(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0200000000000000a8b266696c653000"]) fcntl$setownex(r3, 0xf, &(0x7f00000001c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket(0x6, 0x80000, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) 14:29:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='!', 0x1) migrate_pages(0x0, 0x0, &(0x7f0000000200)=0xffffffbffffffff9, &(0x7f0000000240)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x145, 0x4001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x15100, 0x0, 0x9, 0xf9d6ac85e061c4bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x20d315) socket$netlink(0x10, 0x3, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:29:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b34, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:29:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:29:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 14:29:52 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b", 0x16, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:29:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) futimesat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x34200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x0, &(0x7f0000000100)={0x5618, {{0x2, 0x0, @broadcast}}, {{0x2, 0x4, @broadcast}}}, 0x108) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0x20d314) [ 1403.278051] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. 14:29:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b35, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1403.338680] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1403.385519] isofs_fill_super: root inode is not a directory. Corrupted media? 14:30:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:30:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2d8f, 0x4000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x80000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x100, 0x6, 0x8, 0x10001, 0x2, 0x3}) io_setup(0x7, &(0x7f00000000c0)=0x0) io_pgetevents(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 14:30:06 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='!', 0x1) migrate_pages(0x0, 0x0, &(0x7f0000000200)=0xffffffbffffffff9, &(0x7f0000000240)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x145, 0x4001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x15100, 0x0, 0x9, 0xf9d6ac85e061c4bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x20d315) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:30:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b36, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:30:06 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a080200000100000101", 0x21, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:30:06 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) r2 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x210400, 0x0) mknod$loop(0x0, 0x0, 0x1) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2}, 0xa0ca, 0x0, 0x9, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) openat(r0, &(0x7f0000000300)='./file0\x00', 0x88000, 0x200) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0200000000000000a8b266696c653000"]) fcntl$setownex(r3, 0xf, &(0x7f00000001c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x1, 0x0, 0x5}}, 0xe8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket(0x6, 0x80000, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) 14:30:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) futimesat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x34200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x0, &(0x7f0000000100)={0x5618, {{0x2, 0x0, @broadcast}}, {{0x2, 0x4, @broadcast}}}, 0x108) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) [ 1417.884656] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:30:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b37, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:30:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:30:06 executing program 7: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000240)=0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="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") 14:30:06 executing program 4: getxattr(0x0, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)=""/106, 0x6a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, 0x0, 0x0, 0x16060, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup3(r2, r3, 0x80000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x1, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast1}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0xb9d9013000f05def) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r4, &(0x7f0000000000), 0x5ac, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) 14:30:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) futimesat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x34200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) [ 1418.035396] kauditd_printk_skb: 46 callbacks suppressed [ 1418.035414] audit: type=1326 audit(1722004207.036:551): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9525 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1418.049584] audit: type=1326 audit(1722004207.037:552): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9525 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1418.060604] audit: type=1326 audit(1722004207.037:553): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9525 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1418.075462] audit: type=1326 audit(1722004207.037:554): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9525 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1418.093411] audit: type=1326 audit(1722004207.037:555): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9525 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1418.112429] audit: type=1326 audit(1722004207.038:556): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9525 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1418.128429] audit: type=1326 audit(1722004207.038:557): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9525 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1418.142475] audit: type=1326 audit(1722004207.047:558): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9525 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 14:30:07 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b", 0x16, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:30:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:30:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) futimesat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x34200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:30:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b3a, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:30:07 executing program 7: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) ioctl$FIOCLEX(r2, 0x5451) close(r2) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x5) clone3(&(0x7f0000001ac0)={0x48089900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000001940)=""/144, 0x0}, 0x58) [ 1418.151306] audit: type=1326 audit(1722004207.047:559): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9525 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1418.165648] audit: type=1326 audit(1722004207.047:560): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9525 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 14:30:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='!', 0x1) migrate_pages(0x0, 0x0, &(0x7f0000000200)=0xffffffbffffffff9, &(0x7f0000000240)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x145, 0x4001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x15100, 0x0, 0x9, 0xf9d6ac85e061c4bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:30:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:30:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b3b, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1418.353022] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:30:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b", 0x16, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:30:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:30:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) futimesat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:30:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b3c, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:30:22 executing program 4: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000040), 0xb3200003) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x20010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x902, 0x4b, 0x22}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) r4 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x8000000) 14:30:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='!', 0x1) migrate_pages(0x0, 0x0, &(0x7f0000000200)=0xffffffbffffffff9, &(0x7f0000000240)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x145, 0x4001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x15100, 0x0, 0x9, 0xf9d6ac85e061c4bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:30:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000900), 0x3}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f00000000c0)="e4", 0x1, 0x0, 0x0, 0x0) r3 = dup(r2) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) close(0xffffffffffffffff) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x2000003) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_setup(0x203, &(0x7f0000000080)={0x0, 0xc70b, 0x1, 0x0, 0x370}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r8, 0x0, 0x0}, 0x7) sendmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000a80)="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", 0x149}, {&(0x7f0000000c00)="3f70a15c05bc2c21129daa661dfe4a4789fb69eb182ed6f09727e55b129e51f40a3f58b4c3840f3b9b259fa85a59705c2c5649b442e573b799c44f5f1326f1dd385b7a4738056b3b79b6c8a6ea783b21df2cdd7eff3f3a618723d6185bc04bbdc4f14c19048d8d57d3fd495f311227b110e1303ff614a978932d2c165370064bb3319bdee084fa2db5642dc78ab1d0cb8a1bdc017e4fc8a2c74e961d38720fe02e97c1674a0d619f8cf89802e6de18a15650e34dde28e51fd9e13bc94d770fd8cea579bc8ce29deff157ed2aad765147f4a097fda426b77961acc4d5734086cd30ff9c627c2477", 0xe7}, {&(0x7f0000000480)="9273f7e354b200459068582e9cb1042cce43880b5af116f078dcf10e01e6a3425e39d0c1fbaf9c797bb4fff6b93feb3efb4aeb4b8f0000000002510000000000", 0x40}, {&(0x7f00000004c0)="82b0cff8d2f66ade691b0d423c5cbe50c9b0bc7d19d8d55934bf7a5f9878967d170594facf4c2f8965bad49d17114d28c66a7dc571058336cd0ab52270ee54a47e0b7dd465346b496f587730eed263a2317addb4b1a208e2e5595a29ba1c91a904862e4ef29d49dfda7f7da400566d95f28b8492a5fc24207d6bbb32f1923e3557380e4bfe996dd50ceb1e030f3d760bf36d844405f1ff08424673", 0x9b}, {&(0x7f0000000940)="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", 0x10d}, {&(0x7f0000000600)="40618448b6b9036c543776e0ac618d81318ecf32094c1c0e1aab2bf3f63d47b0592dd0f2fe44059c2b51ecb686cc71477e2f4b720ef4792e5c1eb10cbea2dd07cb01f2f67215bd2d1af8ef58aaf39dcf97", 0x51}, {&(0x7f0000000580)="ff001a2d9228cb677c0000fe3c41799f95665d8d768597525a54baf44f728a38", 0x20}, {&(0x7f00000006c0)="4f4a16f9346da641e6d1146ab07023fb635bdff3df0809edff8014fc0097179efb6263bf1c4c6f6f8933a57e667545e813b1bbdaa06067c05cae4c65699d45c97e96ea04531a83dcea4e44b66180fc504986cb8fd99f923ac3f8f9d6354f69dbe9a6c42ef925e3e90b9b8eb6a9a9f2b8c8376883a88a00043ec5ea23c1d6d92cacec53edf07b018f1711284c91b53c709aaac8a827639a86fb2d2eea69cf3af1c487bb4f0abdc43745d8fab6ff93d4ac661392b18d5cc5b99a2a24203d94ea0cb92cd99a7fa5e929efcca19bbd80502b47a5f5720a6d", 0xd6}], 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="3400002000fdff000100002001000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0x78) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xa4, 0x0, 0x40, 0x8, 0x0, 0x1, 0x402, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x40000, 0x6, 0x3, 0x9, 0x100, 0x3f, 0x2, 0x0, 0x8, 0x0, 0xed5}, 0x0, 0x5, 0xffffffffffffffff, 0x0) getsockname$unix(r2, &(0x7f0000000100), &(0x7f0000000000)=0x6e) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0x80010, r9, 0x10000000) recvmmsg(r3, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) 14:30:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 1) [ 1433.747052] futex_wake_op: syz-executor.4 tries to shift op by 512; fix this program 14:30:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) [ 1433.774241] futex_wake_op: syz-executor.4 tries to shift op by 512; fix this program [ 1433.777711] FAULT_INJECTION: forcing a failure. [ 1433.777711] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.778823] CPU: 1 PID: 9578 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1433.779495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1433.780290] Call Trace: [ 1433.780563] dump_stack+0x107/0x167 [ 1433.780923] should_fail.cold+0x5/0xa [ 1433.781305] ? alloc_pipe_info+0x10a/0x590 [ 1433.781727] should_failslab+0x5/0x20 [ 1433.782104] kmem_cache_alloc_trace+0x55/0x320 [ 1433.782559] alloc_pipe_info+0x10a/0x590 [ 1433.782971] splice_direct_to_actor+0x774/0x980 [ 1433.783447] ? _cond_resched+0x12/0x80 [ 1433.783832] ? inode_security+0x107/0x140 [ 1433.784231] ? pipe_to_sendpage+0x380/0x380 [ 1433.784658] ? avc_policy_seqno+0x9/0x70 [ 1433.785061] ? selinux_file_permission+0x92/0x520 [ 1433.785528] ? do_splice_to+0x160/0x160 [ 1433.785920] ? security_file_permission+0xb1/0xe0 [ 1433.786394] do_splice_direct+0x1c4/0x290 [ 1433.786800] ? splice_direct_to_actor+0x980/0x980 [ 1433.787272] ? avc_policy_seqno+0x9/0x70 [ 1433.787673] ? security_file_permission+0xb1/0xe0 [ 1433.788153] do_sendfile+0x553/0x11e0 [ 1433.788541] ? do_pwritev+0x270/0x270 [ 1433.788921] ? wait_for_completion_io+0x270/0x270 [ 1433.789395] ? rcu_read_lock_any_held+0x75/0xa0 [ 1433.789848] ? vfs_write+0x354/0xb10 [ 1433.790220] __x64_sys_sendfile64+0x1d1/0x210 [ 1433.790675] ? __ia32_sys_sendfile+0x220/0x220 [ 1433.791139] do_syscall_64+0x33/0x40 [ 1433.791502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1433.791999] RIP: 0033:0x7fe5e9dcbb19 [ 1433.792359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1433.794126] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1433.794878] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1433.795568] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1433.796253] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1433.796941] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 1433.797615] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1433.840501] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:30:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x6000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 1433.875938] isofs_fill_super: root inode is not a directory. Corrupted media? 14:30:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x7000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:30:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x12, 0x0, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x202, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x20}, {0xc, 0x90, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 14:30:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r1, &(0x7f0000000040), 0x12) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x280080, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [{}], "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"}, 0x291) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000280)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) fcntl$getownex(r1, 0x10, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee01}}, './file2\x00'}) r5 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fork() r7 = gettid() ptrace$getenv(0x4201, 0x0, 0xba, &(0x7f0000000200)) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2}) kcmp(r6, r7, 0x3, r5, 0xffffffffffffffff) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fork() 14:30:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='!', 0x1) migrate_pages(0x0, 0x0, &(0x7f0000000200)=0xffffffbffffffff9, &(0x7f0000000240)=0x1) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:30:37 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b", 0x16, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:30:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 2) 14:30:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b3d, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1448.483403] FAULT_INJECTION: forcing a failure. [ 1448.483403] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.485542] CPU: 1 PID: 9594 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1448.486763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1448.488274] Call Trace: 14:30:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) [ 1448.488779] dump_stack+0x107/0x167 [ 1448.489554] should_fail.cold+0x5/0xa [ 1448.490283] ? create_object.isra.0+0x3a/0xa20 [ 1448.491142] should_failslab+0x5/0x20 [ 1448.491866] kmem_cache_alloc+0x5b/0x310 [ 1448.492776] create_object.isra.0+0x3a/0xa20 [ 1448.493586] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1448.494504] kmem_cache_alloc_trace+0x151/0x320 [ 1448.495387] alloc_pipe_info+0x10a/0x590 [ 1448.496141] splice_direct_to_actor+0x774/0x980 [ 1448.497003] ? _cond_resched+0x12/0x80 [ 1448.497727] ? inode_security+0x107/0x140 [ 1448.498469] ? pipe_to_sendpage+0x380/0x380 [ 1448.499291] ? avc_policy_seqno+0x9/0x70 [ 1448.500595] ? selinux_file_permission+0x92/0x520 [ 1448.500892] ? do_splice_to+0x160/0x160 [ 1448.500926] ? security_file_permission+0xb1/0xe0 [ 1448.500975] do_splice_direct+0x1c4/0x290 [ 1448.501006] ? splice_direct_to_actor+0x980/0x980 [ 1448.501030] ? avc_policy_seqno+0x9/0x70 [ 1448.501077] ? security_file_permission+0xb1/0xe0 [ 1448.501129] do_sendfile+0x553/0x11e0 [ 1448.501185] ? do_pwritev+0x270/0x270 [ 1448.501221] ? wait_for_completion_io+0x270/0x270 [ 1448.501257] ? rcu_read_lock_any_held+0x75/0xa0 [ 1448.501282] ? vfs_write+0x354/0xb10 [ 1448.501327] __x64_sys_sendfile64+0x1d1/0x210 [ 1448.501362] ? __ia32_sys_sendfile+0x220/0x220 [ 1448.501416] do_syscall_64+0x33/0x40 [ 1448.501442] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1448.501460] RIP: 0033:0x7fe5e9dcbb19 [ 1448.501486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1448.501503] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1448.501534] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1448.501551] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1448.501568] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1448.501585] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 14:30:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:30:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b44, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1448.501602] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:30:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x9000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 1448.662638] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:30:37 executing program 4: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1, 0x7, &(0x7f0000000740)=[{&(0x7f00000001c0)="f0e62033df03abcc130937e1319ad261fbbebd23079128baf4eefbe8fa3ee64666b31ed4fd42e71d49738e1b27911c94ef74e929b0a6fb0c9e5cbe2a03592b2806642ca417fb78fa8d074e7373f355529ddc401ec1d5876288a4d5378a1567d2b75b9035baab738113741882a9158a3d118e8f6f403f69560e45152cc52aa25938e6fbc0f8b4c1649e5ae489634449c754a3e903450ec86725ad20c071daa3aebecc873f702bdc5cb568891a3320a55876e74f4f", 0xb4, 0x5072}, {&(0x7f0000000280)="c9d66e08d03fc1a035e1cf2a04f4c21272e05072a2fb8d0dd9fc98d54453365772bf1ebca03b55e70882792bff647b0173572da3b3e502652bbc035cfccd8e656323569ee852b626db8d70484c7d63c213b93b92b0b9056774afe0441881b50dc99a77afea257828be511a92dc9ca5ab1b30a9a66689382383e92e8e045568cbb16b6a4d05139878f45195efc0ce5accac62794cd25f324bc1b6168a96a5a58fbfe9738f13a1b56f26e734add87da7a4be05dc6e80d0ac6ccb73ed0cfd59a3ad972cc3a68b1c2c9b2bb2", 0xca, 0x1}, {&(0x7f0000000380)="e8de1ab28a7f63d8e4bb75ba613f69faee460f38c878bf826b692939a3468a0efcc8da0acba7e2a7f7bf3161e5809f0be332ee4eab26f9ade67d67eb45acf66bc082674d2e9652b8609ee8e5033434fbebab0aa790a0e2b2754c70be7891635a8faafaa22cf830b786a9b2d529ad227234089f263b85b2d16b824f97134e5714ed41e11fcaf41def02d6d2a2c03c72c929a6", 0x92, 0xffff}, {&(0x7f0000000440)="700c9401d4ee7b35a8ee502ad2e7b68730c3bd9ebad870095848257419a05955a3d3686aec5d1cfb328d48df0858efe6490ebd9383ad2bd50bff5fcaedf7bc3077068b7ea79697a5ca706414e31da71663ee0a7224b16cc3b8c9b53e0209338e75379c0b15ec5732173839887129abb298c539e5cd36ffda93ad1786b24c57afcb0dff1ca919b01b969b511c95b9f67e910c5ba21a43b7744d8bdf1cfb2aa0d4bc9ef70f2f7a237258a4b96b0fdaaca809457e93f12cb83729b2cdf13741c4e231ac58d71eff", 0xc6, 0x8}, {&(0x7f0000000540)="72e627", 0x3}, {&(0x7f0000000580)="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", 0xff, 0xfff}, {&(0x7f0000000680)="20cb59f7455bb3740aa17fe1895879031bb0d8cdab78a5b07f3b43e05a31e945f0c6c657567de24c7b3218a86424e6dcdc9d18499c789075ccc3c23fbfb68ec18d14af452642686fcbfc15e128500083215b36c78c1f4a0ce4aff436d794526605fb095e0bac4bb5d09d162a0abbfe277812e5cf9122cb48ea41e5ebbbbb74cce97ed34275f0a8c763fe1eb493665e47eb107f1dd98c899492ed0cb0", 0x9c, 0x100}], 0x14400, &(0x7f0000000800)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlateno}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_gt}]}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) r4 = syz_io_uring_complete(r1) fchmodat(r4, &(0x7f00000008c0)='./file0\x00', 0x24) syz_io_uring_setup(0x464c, &(0x7f0000000900)={0x0, 0x7c5a, 0x0, 0x1, 0x2d8, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000980), &(0x7f00000009c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000a00)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x1, 0x20d3791e, {0x0, r3}, 0x6, 0x6, 0x1, {0x0, r6, r0}}, 0x9) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1448.679814] isofs_fill_super: root inode is not a directory. Corrupted media? 14:30:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b45, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:30:37 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a08020000", 0x1c, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:30:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='!', 0x1) migrate_pages(0x0, 0x0, &(0x7f0000000200)=0xffffffbffffffff9, &(0x7f0000000240)=0x1) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:30:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 3) 14:30:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:30:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x0) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x1406, &(0x7f0000000480)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@aname={'aname', 0x3d, ']^'}}, {@posixacl}, {@cachetag={'cachetag', 0x3d, ')@]'}}, {@access_any}, {@uname={'uname', 0x3d, 'sysfs\x00'}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, 'sysfs\x00'}}, {@measure}, {@euid_eq={'euid', 0x3d, 0xee01}}]}}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)) umount2(&(0x7f0000000080)='./file0\x00', 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x25, 0xc21, 0x0, 0x0, {}, [@typed={0x4}, @generic="859099bd063ca82658735edeb4"]}, 0x28}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) [ 1448.969966] FAULT_INJECTION: forcing a failure. [ 1448.969966] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.971688] CPU: 0 PID: 9646 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1448.972676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1448.973853] Call Trace: [ 1448.974249] dump_stack+0x107/0x167 [ 1448.974783] should_fail.cold+0x5/0xa [ 1448.975360] ? alloc_pipe_info+0x1e5/0x590 [ 1448.975970] should_failslab+0x5/0x20 [ 1448.976525] __kmalloc+0x72/0x390 [ 1448.977036] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1448.977786] alloc_pipe_info+0x1e5/0x590 [ 1448.978385] splice_direct_to_actor+0x774/0x980 [ 1448.979068] ? _cond_resched+0x12/0x80 [ 1448.979656] ? inode_security+0x107/0x140 [ 1448.980246] ? pipe_to_sendpage+0x380/0x380 [ 1448.980878] ? avc_policy_seqno+0x9/0x70 [ 1448.981478] ? selinux_file_permission+0x92/0x520 [ 1448.982267] ? do_splice_to+0x160/0x160 [ 1448.982929] ? security_file_permission+0xb1/0xe0 [ 1448.983816] do_splice_direct+0x1c4/0x290 [ 1448.984494] ? splice_direct_to_actor+0x980/0x980 [ 1448.985355] ? avc_policy_seqno+0x9/0x70 [ 1448.985994] ? security_file_permission+0xb1/0xe0 [ 1448.986767] do_sendfile+0x553/0x11e0 [ 1448.987477] ? do_pwritev+0x270/0x270 [ 1448.988041] ? wait_for_completion_io+0x270/0x270 [ 1448.988812] ? rcu_read_lock_any_held+0x75/0xa0 [ 1448.989594] ? vfs_write+0x354/0xb10 [ 1448.990142] __x64_sys_sendfile64+0x1d1/0x210 [ 1448.990787] ? __ia32_sys_sendfile+0x220/0x220 [ 1448.991627] do_syscall_64+0x33/0x40 [ 1448.992233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1448.993007] RIP: 0033:0x7fe5e9dcbb19 [ 1448.993535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1448.996241] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1448.997319] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1448.998353] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1448.999371] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1449.000397] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 1449.001411] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1449.019157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1449.034583] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1449.065929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:30:52 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000180)='./file0\x00', 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x8020}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r4, 0xffff) sendfile(r2, r3, 0x0, 0x20d315) 14:30:52 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a08020000", 0x1c, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:30:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:30:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 4) 14:30:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b46, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:30:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:30:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='!', 0x1) migrate_pages(0x0, 0x0, &(0x7f0000000200)=0xffffffbffffffff9, &(0x7f0000000240)=0x1) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:30:52 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYBLOB="7c9fe20c234c23fd18304ec3a7370200000020aec2293d6fe9094aa2d235e1edce3892104e69bec56d5617799747b7b6ea835feb464723000000000000000000000000000083c1b40e32c1e46a98abf0d6d601fac7111ddd6af6b2cf34a5c6e8eaa1abd18fe7a477c258719264d850feab41901ec4482c7e9ac29c4d9e23d060c087b0ca0b4dfbccb90e34104811137229649725c29b57be35988be80dd529ae2926627c2844daf1dde38844614f73931fa263645485b77d398e3046631919e43efa372420d434c5ce24b8c6e74d0d94b220519925838ee93a051efcbc4084b400000000000000"], 0x98a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}) r3 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, '\x00', [{0xfffffff8, 0x10000, 0x0, 0x80000001, 0x6}, {0x7, 0x0, 0x20, 0x2, 0x9, 0x8}], ['\x00', '\x00', '\x00', '\x00']}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) dup(0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000800)) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x7, 0x4, 0x81, 0x7d, 0x0, 0x6, 0x23e0a, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000180), 0x5}, 0x40450, 0x9, 0x3, 0x1, 0x4, 0x9, 0x8, 0x0, 0x3, 0x0, 0xffffffff}, 0x0, 0x6, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'}) tee(r1, r4, 0x1, 0x6) unshare(0x48020200) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='3', 0x1}, {0x0, 0x2}], 0x2) pidfd_getfd(0xffffffffffffffff, r2, 0x0) [ 1463.299061] FAULT_INJECTION: forcing a failure. [ 1463.299061] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.300774] CPU: 0 PID: 9670 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1463.301770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1463.302966] Call Trace: [ 1463.303373] dump_stack+0x107/0x167 [ 1463.303913] should_fail.cold+0x5/0xa [ 1463.304480] ? create_object.isra.0+0x3a/0xa20 [ 1463.305153] should_failslab+0x5/0x20 [ 1463.305717] kmem_cache_alloc+0x5b/0x310 [ 1463.306322] create_object.isra.0+0x3a/0xa20 [ 1463.306969] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1463.307735] __kmalloc+0x16e/0x390 [ 1463.308271] alloc_pipe_info+0x1e5/0x590 [ 1463.308873] splice_direct_to_actor+0x774/0x980 [ 1463.309556] ? _cond_resched+0x12/0x80 [ 1463.310126] ? inode_security+0x107/0x140 [ 1463.310726] ? pipe_to_sendpage+0x380/0x380 [ 1463.311365] ? avc_policy_seqno+0x9/0x70 [ 1463.311958] ? selinux_file_permission+0x92/0x520 [ 1463.312662] ? do_splice_to+0x160/0x160 [ 1463.313249] ? security_file_permission+0xb1/0xe0 [ 1463.313962] do_splice_direct+0x1c4/0x290 [ 1463.314577] ? splice_direct_to_actor+0x980/0x980 [ 1463.315280] ? avc_policy_seqno+0x9/0x70 [ 1463.315895] ? security_file_permission+0xb1/0xe0 [ 1463.316615] do_sendfile+0x553/0x11e0 [ 1463.317186] ? do_pwritev+0x270/0x270 [ 1463.317747] ? wait_for_completion_io+0x270/0x270 [ 1463.318455] ? rcu_read_lock_any_held+0x75/0xa0 [ 1463.319130] ? vfs_write+0x354/0xb10 [ 1463.319699] __x64_sys_sendfile64+0x1d1/0x210 [ 1463.320354] ? __ia32_sys_sendfile+0x220/0x220 [ 1463.321037] do_syscall_64+0x33/0x40 [ 1463.321582] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1463.322326] RIP: 0033:0x7fe5e9dcbb19 [ 1463.322869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1463.325520] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1463.326625] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1463.327664] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1463.328694] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1463.329732] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 1463.330762] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:30:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:30:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 1463.366166] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:30:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b48, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:30:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0xc9000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:30:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='!', 0x1) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:30:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20d314) 14:30:52 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="200000000900000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000a}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x201, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000882}, 0x20000000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000880)={@initdev, @private, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) dup2(r1, r3) 14:30:52 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a", 0x17, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:30:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:30:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20d314) 14:30:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b49, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:30:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 5) 14:30:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20d314) [ 1463.634822] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:30:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x12) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000340)={0x0, 0x7fffffff, 0x5}) 14:30:52 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a", 0x17, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) [ 1463.687771] FAULT_INJECTION: forcing a failure. [ 1463.687771] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.688720] CPU: 1 PID: 9711 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1463.689274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1463.689935] Call Trace: [ 1463.690165] dump_stack+0x107/0x167 [ 1463.690467] should_fail.cold+0x5/0xa [ 1463.690783] ? iter_file_splice_write+0x16d/0xc30 [ 1463.691177] should_failslab+0x5/0x20 [ 1463.691498] __kmalloc+0x72/0x390 [ 1463.691784] iter_file_splice_write+0x16d/0xc30 [ 1463.692159] ? atime_needs_update+0x600/0x600 [ 1463.692534] ? generic_splice_sendpage+0x140/0x140 [ 1463.692934] ? pipe_to_user+0x170/0x170 [ 1463.693275] ? security_file_permission+0xb1/0xe0 [ 1463.693668] ? generic_splice_sendpage+0x140/0x140 [ 1463.694065] direct_splice_actor+0x10f/0x170 [ 1463.694427] splice_direct_to_actor+0x387/0x980 [ 1463.694815] ? pipe_to_sendpage+0x380/0x380 [ 1463.695167] ? do_splice_to+0x160/0x160 [ 1463.695499] ? security_file_permission+0xb1/0xe0 [ 1463.695898] do_splice_direct+0x1c4/0x290 [ 1463.696239] ? splice_direct_to_actor+0x980/0x980 [ 1463.696633] ? avc_policy_seqno+0x9/0x70 [ 1463.696967] ? security_file_permission+0xb1/0xe0 [ 1463.697371] do_sendfile+0x553/0x11e0 [ 1463.697694] ? do_pwritev+0x270/0x270 [ 1463.698010] ? wait_for_completion_io+0x270/0x270 [ 1463.698414] ? rcu_read_lock_any_held+0x75/0xa0 [ 1463.698790] ? vfs_write+0x354/0xb10 [ 1463.699106] __x64_sys_sendfile64+0x1d1/0x210 [ 1463.699487] ? __ia32_sys_sendfile+0x220/0x220 [ 1463.699865] do_syscall_64+0x33/0x40 [ 1463.700169] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1463.700590] RIP: 0033:0x7fe5e9dcbb19 [ 1463.700892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1463.702386] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1463.703012] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1463.703601] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1463.704176] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1463.704752] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 1463.705321] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:31:09 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2000000000000004, &(0x7f00000005c0)}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000040)={0x0, 0x4, 0x7}) 14:31:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 6) 14:31:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x20d314) 14:31:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0xf6000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:31:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b4a, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:31:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:31:09 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a", 0x17, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:31:09 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"/627], 0x98}}, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000340)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x8, &(0x7f0000000000)="ef3003e7d4d5730dd9bc2116cbd2ec2d4cef7a97c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024db4d3ec4b7b6dc1", 0x3a, 0xe, 0x1}, 0x1009) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) add_key(0x0, 0x0, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20040010) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="fa", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000002c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r5) unshare(0x48020200) [ 1480.289140] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1480.293040] FAULT_INJECTION: forcing a failure. [ 1480.293040] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.294886] CPU: 1 PID: 9734 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1480.295905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1480.297120] Call Trace: [ 1480.297532] dump_stack+0x107/0x167 [ 1480.298084] should_fail.cold+0x5/0xa [ 1480.298660] ? create_object.isra.0+0x3a/0xa20 [ 1480.299342] should_failslab+0x5/0x20 [ 1480.299923] kmem_cache_alloc+0x5b/0x310 [ 1480.300528] ? igrab+0xc0/0xc0 [ 1480.301022] create_object.isra.0+0x3a/0xa20 [ 1480.301681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1480.302444] __kmalloc+0x16e/0x390 [ 1480.302990] iter_file_splice_write+0x16d/0xc30 [ 1480.303688] ? atime_needs_update+0x600/0x600 [ 1480.304382] ? generic_splice_sendpage+0x140/0x140 [ 1480.305112] ? pipe_to_user+0x170/0x170 [ 1480.305734] ? security_file_permission+0xb1/0xe0 [ 1480.306456] ? generic_splice_sendpage+0x140/0x140 [ 1480.307186] direct_splice_actor+0x10f/0x170 [ 1480.307853] splice_direct_to_actor+0x387/0x980 [ 1480.308555] ? pipe_to_sendpage+0x380/0x380 [ 1480.309204] ? do_splice_to+0x160/0x160 [ 1480.309799] ? security_file_permission+0xb1/0xe0 [ 1480.310530] do_splice_direct+0x1c4/0x290 [ 1480.311147] ? splice_direct_to_actor+0x980/0x980 [ 1480.311869] ? avc_policy_seqno+0x9/0x70 [ 1480.312488] ? security_file_permission+0xb1/0xe0 [ 1480.313223] do_sendfile+0x553/0x11e0 [ 1480.313814] ? do_pwritev+0x270/0x270 [ 1480.314389] ? wait_for_completion_io+0x270/0x270 [ 1480.315110] ? rcu_read_lock_any_held+0x75/0xa0 [ 1480.315838] ? vfs_write+0x354/0xb10 [ 1480.316407] __x64_sys_sendfile64+0x1d1/0x210 [ 1480.317080] ? __ia32_sys_sendfile+0x220/0x220 [ 1480.317781] do_syscall_64+0x33/0x40 [ 1480.318335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1480.319095] RIP: 0033:0x7fe5e9dcbb19 [ 1480.319671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1480.322340] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1480.323462] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1480.324518] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1480.325566] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1480.326614] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 1480.327668] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1480.514447] isofs_fill_super: root inode is not a directory. Corrupted media? 14:31:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 7) 14:31:24 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:31:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b4b, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:31:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x20d314) 14:31:24 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x63, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_open_dev$vcsn(&(0x7f0000000280), 0x100000001, 0x10000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WOWLAN(r3, 0x0, 0xc4) fallocate(r2, 0x0, 0xffff, 0x0) write$binfmt_elf64(r3, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x2d, 0x7f, 0x40, 0x5, 0x1, 0x2, 0x5878a1c7eda72592, 0xf, 0x9d, 0x40, 0x55, 0x2, 0x7ff, 0x38, 0x1, 0x5b, 0x5, 0x3}, [{0x4, 0x0, 0x87, 0x80000001, 0x0, 0x9, 0x6, 0x4f52}], "b1c4ff3417177d7eda74beff083b421aba2828bf801a8f76741eae91ae25302ea0b34afa740f0d21909af9806e521c3ebedeb440b0a82de876ec5e4356104a4fbd78d7e8a6e020fc142f6c5308b12f1fc8a94ed112e5dd80b425a594a9c97461943acc2a6a7cbde9a4896570fd6465099b06153b71a72759b7525885fad8d73edbbe41b3e9ebb7f424e2a723ee9528f300ce61d5c7bac124cc8eeb2fadc2bf9fabd1f381cef7112b047dd35519353e840b4ea95af640c75878958dec585eaab83b9b3dd2b5439eebe42f30a5982ecf823448430fc56651c62f0ec3c560eee8c5abec603b", ['\x00']}, 0x25c) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x0, @fd_index=0x2, 0x0, &(0x7f0000000240)=""/61, 0x3d}, 0x0) pipe(&(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) syz_open_dev$ttys(0xc, 0x2, 0x1) 14:31:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0xfffff000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:31:24 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x8, 0x2c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @mlv2_report}}}}}, 0x0) r0 = fork() open(&(0x7f00000002c0)='./file0\x00', 0x2800, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ptrace(0x10, r0) 14:31:24 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1495.816565] FAULT_INJECTION: forcing a failure. [ 1495.816565] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.818756] CPU: 0 PID: 9749 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1495.819767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1495.820980] Call Trace: [ 1495.821375] dump_stack+0x107/0x167 [ 1495.821909] should_fail.cold+0x5/0xa [ 1495.822469] ? jbd2__journal_start+0x190/0x7e0 [ 1495.823134] should_failslab+0x5/0x20 [ 1495.823692] kmem_cache_alloc+0x5b/0x310 [ 1495.824290] jbd2__journal_start+0x190/0x7e0 [ 1495.824939] __ext4_journal_start_sb+0x214/0x390 [ 1495.825623] ext4_dirty_inode+0xbc/0x130 [ 1495.826217] ? ext4_setattr+0x2160/0x2160 [ 1495.826822] __mark_inode_dirty+0x492/0xd40 [ 1495.827456] ? security_inode_need_killpriv+0x79/0xa0 [ 1495.828232] generic_update_time+0x21c/0x370 [ 1495.828842] file_update_time+0x43a/0x520 [ 1495.829443] ? evict_inodes+0x420/0x420 [ 1495.830030] ? down_write_killable+0x180/0x180 [ 1495.830677] file_modified+0x7d/0xa0 [ 1495.831227] ext4_file_write_iter+0x906/0x18d0 [ 1495.831923] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1495.832593] ? kasan_save_stack+0x32/0x40 [ 1495.833200] ? kasan_save_stack+0x1b/0x40 [ 1495.833787] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1495.834505] ? iter_file_splice_write+0x16d/0xc30 [ 1495.835207] ? direct_splice_actor+0x10f/0x170 [ 1495.835876] ? splice_direct_to_actor+0x387/0x980 [ 1495.836566] ? do_splice_direct+0x1c4/0x290 [ 1495.837192] ? do_sendfile+0x553/0x11e0 [ 1495.837763] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1495.838440] ? do_syscall_64+0x33/0x40 [ 1495.839018] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1495.839780] do_iter_readv_writev+0x476/0x750 [ 1495.840438] ? new_sync_write+0x660/0x660 [ 1495.841056] ? avc_policy_seqno+0x9/0x70 [ 1495.841664] ? selinux_file_permission+0x92/0x520 [ 1495.842371] ? security_file_permission+0xb1/0xe0 [ 1495.843087] do_iter_write+0x191/0x700 [ 1495.843650] ? trace_hardirqs_on+0x5b/0x180 [ 1495.844282] vfs_iter_write+0x70/0xa0 [ 1495.844835] iter_file_splice_write+0x762/0xc30 [ 1495.845517] ? generic_splice_sendpage+0x140/0x140 [ 1495.846246] ? security_file_permission+0xb1/0xe0 [ 1495.846938] ? generic_splice_sendpage+0x140/0x140 [ 1495.847607] direct_splice_actor+0x10f/0x170 [ 1495.848257] splice_direct_to_actor+0x387/0x980 [ 1495.848934] ? pipe_to_sendpage+0x380/0x380 [ 1495.849531] ? do_splice_to+0x160/0x160 [ 1495.850086] ? security_file_permission+0xb1/0xe0 [ 1495.850773] do_splice_direct+0x1c4/0x290 [ 1495.851352] ? splice_direct_to_actor+0x980/0x980 [ 1495.852043] ? avc_policy_seqno+0x9/0x70 [ 1495.852635] ? security_file_permission+0xb1/0xe0 [ 1495.853308] do_sendfile+0x553/0x11e0 [ 1495.853881] ? do_pwritev+0x270/0x270 [ 1495.854411] ? wait_for_completion_io+0x270/0x270 [ 1495.855120] ? rcu_read_lock_any_held+0x75/0xa0 [ 1495.855759] ? vfs_write+0x354/0xb10 [ 1495.856317] __x64_sys_sendfile64+0x1d1/0x210 [ 1495.856967] ? __ia32_sys_sendfile+0x220/0x220 [ 1495.857639] do_syscall_64+0x33/0x40 [ 1495.858182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1495.858920] RIP: 0033:0x7fe5e9dcbb19 [ 1495.859457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1495.861964] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1495.863010] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1495.864038] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1495.865035] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1495.866067] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 1495.867021] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1495.912531] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:31:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:31:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x20d314) 14:31:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x1) fallocate(r1, 0x0, 0x0, 0x8800000) openat(r1, &(0x7f0000000240)='./file0\x00', 0xa8100, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x8002, 0x80) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futimesat(r2, &(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000340)={{r3, r4/1000+10000}}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0x100000000}) 14:31:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b4c, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:31:25 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1496.108084] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:31:25 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:31:25 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a", 0x18, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:31:25 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1496.410347] isofs_fill_super: root inode is not a directory. Corrupted media? 14:31:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:31:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0xffffff9e, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:31:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b4d, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:31:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x270f01, 0x49) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x101, 0x5, 0x42, 0x7, 0x3f}) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) fcntl$setown(r4, 0x8, 0xffffffffffffffff) close(r4) perf_event_open(0x0, 0x0, 0xc, r4, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000340)) lseek(r3, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r3, 0x0, 0x200f5ef, 0x0) 14:31:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$VT_ACTIVATE(r3, 0x5606, 0x101) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffffc9, 0xcd08, 0x0, 0xfffffffffffffe77) 14:31:40 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a", 0x18, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:31:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 8) 14:31:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1512.019645] FAULT_INJECTION: forcing a failure. [ 1512.019645] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.020876] CPU: 1 PID: 9813 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1512.021571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1512.022419] Call Trace: [ 1512.022700] dump_stack+0x107/0x167 [ 1512.023088] should_fail.cold+0x5/0xa [ 1512.023495] ? create_object.isra.0+0x3a/0xa20 [ 1512.023982] should_failslab+0x5/0x20 [ 1512.024390] kmem_cache_alloc+0x5b/0x310 [ 1512.024822] create_object.isra.0+0x3a/0xa20 [ 1512.025284] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1512.025818] kmem_cache_alloc+0x159/0x310 [ 1512.026261] jbd2__journal_start+0x190/0x7e0 [ 1512.026733] __ext4_journal_start_sb+0x214/0x390 [ 1512.027233] ext4_dirty_inode+0xbc/0x130 [ 1512.027657] ? ext4_setattr+0x2160/0x2160 [ 1512.028096] __mark_inode_dirty+0x492/0xd40 [ 1512.028560] ? security_inode_need_killpriv+0x79/0xa0 [ 1512.029105] generic_update_time+0x21c/0x370 [ 1512.029570] file_update_time+0x43a/0x520 [ 1512.030001] ? evict_inodes+0x420/0x420 [ 1512.030425] ? down_write_killable+0x180/0x180 [ 1512.030907] file_modified+0x7d/0xa0 [ 1512.031302] ext4_file_write_iter+0x906/0x18d0 [ 1512.031795] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1512.032279] ? kasan_save_stack+0x32/0x40 [ 1512.032719] ? kasan_save_stack+0x1b/0x40 [ 1512.033157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1512.033686] ? iter_file_splice_write+0x16d/0xc30 [ 1512.034186] ? direct_splice_actor+0x10f/0x170 [ 1512.034662] ? splice_direct_to_actor+0x387/0x980 [ 1512.035165] ? do_splice_direct+0x1c4/0x290 [ 1512.035727] ? do_sendfile+0x553/0x11e0 [ 1512.036134] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1512.036595] ? do_syscall_64+0x33/0x40 [ 1512.036986] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1512.037523] do_iter_readv_writev+0x476/0x750 [ 1512.037972] ? new_sync_write+0x660/0x660 [ 1512.038385] ? avc_policy_seqno+0x9/0x70 [ 1512.038790] ? selinux_file_permission+0x92/0x520 [ 1512.039278] ? security_file_permission+0xb1/0xe0 [ 1512.039771] do_iter_write+0x191/0x700 [ 1512.040167] ? trace_hardirqs_on+0x5b/0x180 [ 1512.040606] vfs_iter_write+0x70/0xa0 [ 1512.040991] iter_file_splice_write+0x762/0xc30 [ 1512.041471] ? generic_splice_sendpage+0x140/0x140 [ 1512.041978] ? security_file_permission+0xb1/0xe0 [ 1512.042461] ? generic_splice_sendpage+0x140/0x140 [ 1512.042952] direct_splice_actor+0x10f/0x170 [ 1512.043396] splice_direct_to_actor+0x387/0x980 [ 1512.043867] ? pipe_to_sendpage+0x380/0x380 [ 1512.044307] ? do_splice_to+0x160/0x160 [ 1512.044707] ? security_file_permission+0xb1/0xe0 [ 1512.045198] do_splice_direct+0x1c4/0x290 [ 1512.045614] ? splice_direct_to_actor+0x980/0x980 [ 1512.046092] ? avc_policy_seqno+0x9/0x70 [ 1512.046505] ? security_file_permission+0xb1/0xe0 [ 1512.046997] do_sendfile+0x553/0x11e0 [ 1512.047389] ? do_pwritev+0x270/0x270 [ 1512.047776] ? wait_for_completion_io+0x270/0x270 [ 1512.048265] ? rcu_read_lock_any_held+0x75/0xa0 [ 1512.048729] ? vfs_write+0x354/0xb10 [ 1512.049111] __x64_sys_sendfile64+0x1d1/0x210 [ 1512.049564] ? __ia32_sys_sendfile+0x220/0x220 [ 1512.050028] do_syscall_64+0x33/0x40 [ 1512.050403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1512.050911] RIP: 0033:0x7fe5e9dcbb19 [ 1512.051288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1512.053088] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1512.053846] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1512.054551] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1512.055265] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1512.055973] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 1512.056687] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:31:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 1512.115496] isofs_fill_super: root inode is not a directory. Corrupted media? 14:31:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b4e, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1512.120140] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:31:41 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a", 0x18, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:31:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:31:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:31:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 1512.274022] isofs_fill_super: root inode is not a directory. Corrupted media? 14:31:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b52, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:31:41 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a08", 0x19, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:31:41 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)={0x0, 0x5, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @hao={0xc9, 0x10, @mcast2}]}, 0x38) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000380)=@dstopts={0x1c, 0xa, '\x00', [@generic={0x8, 0x19, "069a7fbdacb85c6c5ba798ebbeef1ba5d26e74c3cda3979cd4"}, @hao={0xc9, 0x10, @mcast2}, @pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0x4, 0x95, [0x5, 0x20, 0x81]}}, @enc_lim={0x4, 0x1, 0x3}]}, 0x60) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000002c0)=@routing={0x2f, 0x12, 0x1, 0x10, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}, 0x98) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10040, 0x0, 0xfffffffe, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x20}, @device_a, @device_a, @initial, {0x1, 0xaf5}}, @ver_80211n={0x0, 0xcc6, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x37, @void}, 0x1e) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@initdev, @in=@multicast1}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) syz_open_dev$vcsa(&(0x7f0000000100), 0x609de88b, 0x301a00) [ 1512.401177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:31:41 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:31:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 9) [ 1512.498274] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1512.505322] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1512.541179] FAULT_INJECTION: forcing a failure. [ 1512.541179] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.542860] CPU: 0 PID: 9854 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1512.543851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1512.545081] Call Trace: [ 1512.545483] dump_stack+0x107/0x167 [ 1512.546032] should_fail.cold+0x5/0xa [ 1512.546604] ? jbd2__journal_start+0x190/0x7e0 [ 1512.547288] should_failslab+0x5/0x20 [ 1512.547859] kmem_cache_alloc+0x5b/0x310 [ 1512.548478] jbd2__journal_start+0x190/0x7e0 [ 1512.549142] __ext4_journal_start_sb+0x214/0x390 [ 1512.549859] ext4_file_write_iter+0xdbf/0x18d0 [ 1512.550562] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1512.551236] ? kasan_save_stack+0x32/0x40 [ 1512.551848] ? kasan_save_stack+0x1b/0x40 [ 1512.552476] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1512.553236] ? iter_file_splice_write+0x16d/0xc30 [ 1512.553951] ? direct_splice_actor+0x10f/0x170 [ 1512.554626] ? splice_direct_to_actor+0x387/0x980 [ 1512.555341] ? do_splice_direct+0x1c4/0x290 [ 1512.555989] ? do_sendfile+0x553/0x11e0 [ 1512.556581] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1512.557272] ? do_syscall_64+0x33/0x40 [ 1512.557852] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1512.558653] do_iter_readv_writev+0x476/0x750 [ 1512.559330] ? new_sync_write+0x660/0x660 [ 1512.559956] ? avc_policy_seqno+0x9/0x70 [ 1512.560565] ? selinux_file_permission+0x92/0x520 [ 1512.561291] ? security_file_permission+0xb1/0xe0 [ 1512.562020] do_iter_write+0x191/0x700 [ 1512.562610] ? trace_hardirqs_on+0x5b/0x180 [ 1512.563266] vfs_iter_write+0x70/0xa0 [ 1512.563835] iter_file_splice_write+0x762/0xc30 [ 1512.564553] ? generic_splice_sendpage+0x140/0x140 [ 1512.565312] ? security_file_permission+0xb1/0xe0 [ 1512.566028] ? generic_splice_sendpage+0x140/0x140 [ 1512.566754] direct_splice_actor+0x10f/0x170 [ 1512.567413] splice_direct_to_actor+0x387/0x980 [ 1512.568138] ? pipe_to_sendpage+0x380/0x380 [ 1512.568787] ? do_splice_to+0x160/0x160 [ 1512.569383] ? security_file_permission+0xb1/0xe0 [ 1512.570109] do_splice_direct+0x1c4/0x290 [ 1512.570726] ? splice_direct_to_actor+0x980/0x980 [ 1512.571437] ? avc_policy_seqno+0x9/0x70 [ 1512.572056] ? security_file_permission+0xb1/0xe0 [ 1512.572782] do_sendfile+0x553/0x11e0 [ 1512.573366] ? do_pwritev+0x270/0x270 [ 1512.573939] ? wait_for_completion_io+0x270/0x270 [ 1512.574671] ? rcu_read_lock_any_held+0x75/0xa0 [ 1512.575356] ? vfs_write+0x354/0xb10 [ 1512.575926] __x64_sys_sendfile64+0x1d1/0x210 [ 1512.576598] ? __ia32_sys_sendfile+0x220/0x220 [ 1512.577294] do_syscall_64+0x33/0x40 [ 1512.577847] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1512.578600] RIP: 0033:0x7fe5e9dcbb19 [ 1512.579150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1512.581860] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1512.582985] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1512.584048] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1512.585102] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1512.586152] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 1512.587203] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1512.791205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:31:57 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a08", 0x19, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:31:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:31:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b62, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:31:57 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:31:57 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:31:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 10) 14:31:57 executing program 7: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, 0x108) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x60) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x48) quotactl(0x2, &(0x7f0000001340)='./file0\x00', 0x0, &(0x7f0000001380)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffff, 0x0, 0x1000}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) 14:31:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x3, 0x0, 0xb1f3572d9555fa0a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x1000003) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x39b) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000140)={0x83, 0x46, 0x8000003, 0x7755, 0x19, "0000000000000000f0dc2477a0e3d6deff00"}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x6) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) ioctl$FIOCLEX(r6, 0x5451) close(r6) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x9, 0x1, 0x8, 0x0, 0x1000000006, 0x4000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x100000000, 0xc2b8}, 0x500, 0x960, 0x2, 0x6, 0x7fd, 0x25e4, 0x3, 0x0, 0xa74d, 0x0, 0x2}, 0x0, 0xb, r6, 0x8) unshare(0x4a060400) [ 1528.440088] FAULT_INJECTION: forcing a failure. [ 1528.440088] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.441825] CPU: 1 PID: 9874 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1528.442829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1528.444069] Call Trace: [ 1528.444481] dump_stack+0x107/0x167 [ 1528.445024] should_fail.cold+0x5/0xa [ 1528.445605] ? create_object.isra.0+0x3a/0xa20 [ 1528.446286] should_failslab+0x5/0x20 [ 1528.446861] kmem_cache_alloc+0x5b/0x310 [ 1528.447482] create_object.isra.0+0x3a/0xa20 [ 1528.448148] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1528.448906] kmem_cache_alloc+0x159/0x310 [ 1528.449530] jbd2__journal_start+0x190/0x7e0 [ 1528.450193] __ext4_journal_start_sb+0x214/0x390 [ 1528.450903] ext4_dirty_inode+0xbc/0x130 [ 1528.451513] ? ext4_setattr+0x2160/0x2160 [ 1528.452138] __mark_inode_dirty+0x492/0xd40 [ 1528.452781] ? security_inode_need_killpriv+0x79/0xa0 [ 1528.453544] generic_update_time+0x21c/0x370 [ 1528.454212] file_update_time+0x43a/0x520 [ 1528.454837] ? evict_inodes+0x420/0x420 [ 1528.455436] ? down_write_killable+0x180/0x180 [ 1528.456146] file_modified+0x7d/0xa0 [ 1528.456703] ext4_file_write_iter+0x906/0x18d0 [ 1528.457413] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1528.458095] ? kasan_save_stack+0x32/0x40 [ 1528.458709] ? kasan_save_stack+0x1b/0x40 [ 1528.459356] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1528.460132] ? iter_file_splice_write+0x16d/0xc30 [ 1528.460843] ? direct_splice_actor+0x10f/0x170 [ 1528.461518] ? splice_direct_to_actor+0x387/0x980 [ 1528.462224] ? do_splice_direct+0x1c4/0x290 [ 1528.462860] ? do_sendfile+0x553/0x11e0 [ 1528.463486] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1528.464179] ? do_syscall_64+0x33/0x40 [ 1528.464759] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1528.465559] do_iter_readv_writev+0x476/0x750 [ 1528.466223] ? new_sync_write+0x660/0x660 [ 1528.466828] ? avc_policy_seqno+0x9/0x70 [ 1528.467440] ? selinux_file_permission+0x92/0x520 [ 1528.468176] ? security_file_permission+0xb1/0xe0 [ 1528.468904] do_iter_write+0x191/0x700 [ 1528.469487] ? trace_hardirqs_on+0x5b/0x180 [ 1528.470142] vfs_iter_write+0x70/0xa0 [ 1528.470710] iter_file_splice_write+0x762/0xc30 [ 1528.471419] ? generic_splice_sendpage+0x140/0x140 [ 1528.472181] ? security_file_permission+0xb1/0xe0 [ 1528.472898] ? generic_splice_sendpage+0x140/0x140 [ 1528.473624] direct_splice_actor+0x10f/0x170 [ 1528.474281] splice_direct_to_actor+0x387/0x980 [ 1528.474971] ? pipe_to_sendpage+0x380/0x380 [ 1528.475612] ? do_splice_to+0x160/0x160 [ 1528.476208] ? security_file_permission+0xb1/0xe0 [ 1528.476927] do_splice_direct+0x1c4/0x290 [ 1528.477540] ? splice_direct_to_actor+0x980/0x980 [ 1528.478247] ? avc_policy_seqno+0x9/0x70 [ 1528.478859] ? security_file_permission+0xb1/0xe0 [ 1528.479582] do_sendfile+0x553/0x11e0 [ 1528.480169] ? do_pwritev+0x270/0x270 [ 1528.480737] ? wait_for_completion_io+0x270/0x270 [ 1528.481451] ? rcu_read_lock_any_held+0x75/0xa0 [ 1528.482127] ? vfs_write+0x354/0xb10 [ 1528.482687] __x64_sys_sendfile64+0x1d1/0x210 [ 1528.483349] ? __ia32_sys_sendfile+0x220/0x220 [ 1528.484031] do_syscall_64+0x33/0x40 [ 1528.484612] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1528.485359] RIP: 0033:0x7fe5e9dcbb19 [ 1528.485911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1528.488565] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1528.489682] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1528.490711] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1528.491776] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1528.492838] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1528.493880] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:31:57 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:31:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b63, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:31:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 1528.587272] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:31:57 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x0, 0x2000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) pipe2(&(0x7f00000000c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={0x0, @generic={0x28, "9c147fcdf217e87d3747fea2d02e"}, @hci={0x1f, 0x4, 0x1}, @qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='team0\x00', 0xac0, 0x6, 0x7}) [ 1528.704006] isofs_fill_super: root inode is not a directory. Corrupted media? 14:31:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b64, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:31:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:32:14 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x5, 0xfffffffffffffd2d, 0x0, 0x91, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r1, 0x0, 0x2) umount2(&(0x7f0000000080)='./file0\x00', 0x4) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000280)=@v1={0x0, @adiantum, 0x3, @desc2}) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)=0x0) symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f, 0x0, &(0x7f00000001c0), 0x2010004, &(0x7f0000000680)=ANY=[@ANYBLOB="6e6f64656c618f6c6f632c67727069642c696e6f64655f7265616461686561645f626c6b733d3078303030303030303030303030303430302c6a71666d743d76667376302c66736d616769633d3078303030303030303030303030303030352c61756469742c736d61636b6673726f6f743d2c6f626a5f747970653d3a5b7b2c666f776e65723d002a57ebf03702db8addc9008f207272809dfce710511c24c5c8835017129f469c43e7ad3d8f193fd3e6c82c1cd52e4441875f81c12861fdad68ee55ab81f26b67d8bccbdb8157eee387114488c8a8f244afbb57b2b8dc936cbc8b26d528741c90e5817153c2f6f38ed8ae074bf6dfd0a4f741bf30b70b941f1effaac81e469647999d25fa7d3d84c58799a184d3ad925bf639daae8d0e9c2d020ba5f65721f2bd330d4375aa8bcbffaed88a04", @ANYRESDEC=r4, @ANYBLOB=',rootcontext=unconfined_u,dont_hash,\x00']) 14:32:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:32:14 executing program 4: unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x248803, 0x0) mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x7f, 0xe7, 0x7, 0x0, 0x401, 0x48000, 0x11, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, @perf_bp, 0x2040, 0x5, 0x3ff, 0x2, 0x1, 0x8, 0x1, 0x0, 0x2fff, 0x0, 0x4e77}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x9, 0x7, 0x7, 0x1, 0x0, 0x7f, 0x80000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x100}, 0x480, 0x7fffffff, 0xff5, 0x3, 0x6, 0x0, 0x4, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xb, r0, 0x3) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x12002, 0x2) getsockname(r2, &(0x7f0000000240)=@hci, 0x0) pipe2(&(0x7f0000000100), 0x80000) creat(&(0x7f0000000180)='./file1\x00', 0x8) r3 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0xa040, 0x191) close(r3) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff810013a0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200600, 0x0) close(r2) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 14:32:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:32:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:32:14 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a08", 0x19, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:32:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b65, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:32:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 11) [ 1545.984389] FAULT_INJECTION: forcing a failure. [ 1545.984389] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.986191] CPU: 0 PID: 9921 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1545.987173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1545.988359] Call Trace: [ 1545.988747] dump_stack+0x107/0x167 [ 1545.989287] should_fail.cold+0x5/0xa [ 1545.989855] ? __iomap_dio_rw+0x1ee/0x1110 [ 1545.990468] should_failslab+0x5/0x20 [ 1545.991030] kmem_cache_alloc_trace+0x55/0x320 [ 1545.991708] __iomap_dio_rw+0x1ee/0x1110 [ 1545.992326] ? jbd2_journal_stop+0x188/0xdc0 [ 1545.992971] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1545.993647] ? ext4_orphan_add+0x253/0x9e0 [ 1545.994261] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1545.994975] ? ext4_empty_dir+0xae0/0xae0 [ 1545.995576] ? jbd2__journal_start+0xf3/0x7e0 [ 1545.996246] iomap_dio_rw+0x31/0x90 [ 1545.996789] ext4_file_write_iter+0xb26/0x18d0 [ 1545.997476] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1545.998136] ? kasan_save_stack+0x32/0x40 [ 1545.998750] ? kasan_save_stack+0x1b/0x40 [ 1545.999365] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.000115] ? iter_file_splice_write+0x16d/0xc30 [ 1546.000822] ? direct_splice_actor+0x10f/0x170 [ 1546.001485] ? splice_direct_to_actor+0x387/0x980 [ 1546.002183] ? do_splice_direct+0x1c4/0x290 [ 1546.002814] ? do_sendfile+0x553/0x11e0 [ 1546.003402] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1546.004076] ? do_syscall_64+0x33/0x40 [ 1546.004663] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.005458] do_iter_readv_writev+0x476/0x750 [ 1546.006121] ? new_sync_write+0x660/0x660 [ 1546.006739] ? avc_policy_seqno+0x9/0x70 [ 1546.007338] ? selinux_file_permission+0x92/0x520 [ 1546.008065] ? security_file_permission+0xb1/0xe0 [ 1546.008802] do_iter_write+0x191/0x700 [ 1546.009375] ? trace_hardirqs_on+0x5b/0x180 [ 1546.010012] vfs_iter_write+0x70/0xa0 [ 1546.010577] iter_file_splice_write+0x762/0xc30 [ 1546.011269] ? generic_splice_sendpage+0x140/0x140 [ 1546.012009] ? security_file_permission+0xb1/0xe0 [ 1546.012722] ? generic_splice_sendpage+0x140/0x140 [ 1546.013457] direct_splice_actor+0x10f/0x170 [ 1546.014098] splice_direct_to_actor+0x387/0x980 [ 1546.014783] ? pipe_to_sendpage+0x380/0x380 [ 1546.015417] ? do_splice_to+0x160/0x160 [ 1546.016002] ? security_file_permission+0xb1/0xe0 [ 1546.016721] do_splice_direct+0x1c4/0x290 [ 1546.017331] ? splice_direct_to_actor+0x980/0x980 [ 1546.018028] ? avc_policy_seqno+0x9/0x70 [ 1546.018634] ? security_file_permission+0xb1/0xe0 [ 1546.019361] do_sendfile+0x553/0x11e0 [ 1546.019933] ? do_pwritev+0x270/0x270 [ 1546.020510] ? wait_for_completion_io+0x270/0x270 [ 1546.021222] ? rcu_read_lock_any_held+0x75/0xa0 [ 1546.021898] ? vfs_write+0x354/0xb10 [ 1546.022451] __x64_sys_sendfile64+0x1d1/0x210 [ 1546.023106] ? __ia32_sys_sendfile+0x220/0x220 [ 1546.023789] do_syscall_64+0x33/0x40 [ 1546.024339] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.025084] RIP: 0033:0x7fe5e9dcbb19 [ 1546.025630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.028292] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1546.029434] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1546.030470] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1546.031516] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1546.032563] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1546.033614] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1546.045459] isofs_fill_super: root inode is not a directory. Corrupted media? 14:32:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b72, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:32:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:32:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 1546.160909] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:32:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x78, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000c0}, 0x95) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:unconfined_execmem_exec_t:s0\x00'}]}, 0x58}}, 0x0) 14:32:15 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:32:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4bfa, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1546.272484] isofs_fill_super: get root inode failed 14:32:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:32:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:32:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:32:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:32:29 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@mcast1}, 0x14) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700ed7ffffffffd0000000046180018006400003f049058ac1e0101ac14143e94040100"]}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) syz_io_uring_setup(0x2562, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, r5}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r5}, 0x14) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) ioctl$FIOCLEX(r6, 0x5451) close(r6) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0x2000003) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {r8, 0xee00}}, './file0\x00'}) 14:32:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:32:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 12) 14:32:29 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) readv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2) dup3(r3, r4, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$RTC_PIE_ON(r5, 0x7005) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x80, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r7, &(0x7f0000000280)}, 0xcabf) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e22, 0xef, @remote, 0x5}, 0x1c) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xd7a2, 0x200, 0x0, 0x3ff}, 0x14) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4bfb, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1560.969056] FAULT_INJECTION: forcing a failure. [ 1560.969056] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.970407] CPU: 0 PID: 9961 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1560.971269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1560.972303] Call Trace: [ 1560.972654] dump_stack+0x107/0x167 [ 1560.973116] should_fail.cold+0x5/0xa [ 1560.973601] ? create_object.isra.0+0x3a/0xa20 [ 1560.974185] should_failslab+0x5/0x20 [ 1560.974660] kmem_cache_alloc+0x5b/0x310 [ 1560.975171] create_object.isra.0+0x3a/0xa20 [ 1560.975721] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1560.976365] kmem_cache_alloc_trace+0x151/0x320 [ 1560.976979] __iomap_dio_rw+0x1ee/0x1110 [ 1560.977500] ? jbd2_journal_stop+0x188/0xdc0 [ 1560.978051] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1560.978627] ? ext4_orphan_add+0x253/0x9e0 [ 1560.979147] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1560.979770] ? ext4_empty_dir+0xae0/0xae0 [ 1560.980279] ? jbd2__journal_start+0xf3/0x7e0 [ 1560.980866] iomap_dio_rw+0x31/0x90 [ 1560.981325] ext4_file_write_iter+0xb26/0x18d0 [ 1560.981906] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1560.982470] ? kasan_save_stack+0x32/0x40 [ 1560.982987] ? kasan_save_stack+0x1b/0x40 [ 1560.983505] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1560.984130] ? iter_file_splice_write+0x16d/0xc30 [ 1560.984741] ? direct_splice_actor+0x10f/0x170 [ 1560.985307] ? splice_direct_to_actor+0x387/0x980 [ 1560.985896] ? do_splice_direct+0x1c4/0x290 [ 1560.986430] ? do_sendfile+0x553/0x11e0 [ 1560.986920] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1560.987490] ? do_syscall_64+0x33/0x40 [ 1560.987971] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1560.988487] do_iter_readv_writev+0x476/0x750 [ 1560.989050] ? new_sync_write+0x660/0x660 [ 1560.989564] ? avc_policy_seqno+0x9/0x70 [ 1560.990069] ? selinux_file_permission+0x92/0x520 [ 1560.990677] ? security_file_permission+0xb1/0xe0 [ 1560.991282] do_iter_write+0x191/0x700 [ 1560.991771] ? trace_hardirqs_on+0x5b/0x180 [ 1560.992311] vfs_iter_write+0x70/0xa0 [ 1560.992793] iter_file_splice_write+0x762/0xc30 [ 1560.993381] ? generic_splice_sendpage+0x140/0x140 [ 1560.994006] ? security_file_permission+0xb1/0xe0 [ 1560.994597] ? generic_splice_sendpage+0x140/0x140 [ 1560.995209] direct_splice_actor+0x10f/0x170 [ 1560.995763] splice_direct_to_actor+0x387/0x980 [ 1560.996341] ? pipe_to_sendpage+0x380/0x380 [ 1560.996888] ? do_splice_to+0x160/0x160 [ 1560.997380] ? security_file_permission+0xb1/0xe0 [ 1560.997978] do_splice_direct+0x1c4/0x290 [ 1560.998487] ? splice_direct_to_actor+0x980/0x980 [ 1560.999079] ? avc_policy_seqno+0x9/0x70 [ 1560.999589] ? security_file_permission+0xb1/0xe0 [ 1561.000196] do_sendfile+0x553/0x11e0 [ 1561.000697] ? do_pwritev+0x270/0x270 [ 1561.001176] ? wait_for_completion_io+0x270/0x270 [ 1561.001771] ? rcu_read_lock_any_held+0x75/0xa0 [ 1561.002339] ? vfs_write+0x354/0xb10 [ 1561.002813] __x64_sys_sendfile64+0x1d1/0x210 [ 1561.003364] ? __ia32_sys_sendfile+0x220/0x220 [ 1561.003932] do_syscall_64+0x33/0x40 [ 1561.004390] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1561.005028] RIP: 0033:0x7fe5e9dcbb19 [ 1561.005489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1561.007698] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1561.008635] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1561.009502] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1561.010371] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1561.011243] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1561.012110] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:32:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:32:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5409, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1561.102921] isofs_fill_super: get root inode failed [ 1561.131150] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:32:30 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:32:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1561.281990] isofs_fill_super: get root inode failed 14:32:30 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat$cgroup_devices(r0, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="0000800100000000000000000000000000019831cee4eb4cf192ebc1ca"], 0x190) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x5, 0x6, @local}, 0x10) close(0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x8, {{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}}, 0x1, 0x7, [{{0xa, 0x4e22, 0x0, @empty, 0x7e000000}}, {{0xa, 0x4e21, 0x3, @private1, 0x7}}, {{0xa, 0x4e21, 0x3, @mcast1, 0x5}}, {{0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, {{0xa, 0x4e24, 0x8, @remote, 0x4}}, {{0xa, 0x4e21, 0xfffffff9, @private1, 0x1}}, {{0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1f}, 0x3}}]}, 0x410) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r5, 0x2d, 0x4, 0x1, 0x7ff, 0x0, @local, @private1, 0x8000, 0x20, 0x1f}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r6, 0x1, 0x6, @random="4b57099ac259"}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7, r5}) fcntl$setlease(r0, 0x400, 0x2) 14:32:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:32:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:32:30 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000080)=[{&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:32:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x540b, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1561.406787] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:32:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x540c, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:32:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:32:30 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000080)=[{&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:32:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:32:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 13) [ 1561.569442] FAULT_INJECTION: forcing a failure. [ 1561.569442] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.571323] CPU: 1 PID: 10014 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1561.572365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1561.573627] Call Trace: [ 1561.574042] dump_stack+0x107/0x167 [ 1561.574608] should_fail.cold+0x5/0xa [ 1561.575192] ? jbd2__journal_start+0x190/0x7e0 [ 1561.575892] should_failslab+0x5/0x20 [ 1561.576475] kmem_cache_alloc+0x5b/0x310 [ 1561.577104] ? __kernel_text_address+0x9/0x40 [ 1561.577796] jbd2__journal_start+0x190/0x7e0 [ 1561.578456] __ext4_journal_start_sb+0x214/0x390 [ 1561.579185] ext4_iomap_begin+0x485/0x700 [ 1561.579837] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1561.580602] ? kasan_save_stack+0x1b/0x40 [ 1561.581247] ? ext4_file_write_iter+0xb26/0x18d0 [ 1561.581985] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 1561.582951] ? splice_direct_to_actor+0x387/0x980 [ 1561.583684] ? do_splice_direct+0x1c4/0x290 [ 1561.584344] ? do_sendfile+0x553/0x11e0 [ 1561.584955] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1561.585664] ? do_syscall_64+0x33/0x40 [ 1561.586233] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1561.587053] iomap_apply+0x164/0x810 [ 1561.587625] ? iomap_dio_rw+0x90/0x90 [ 1561.588219] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1561.589125] ? mark_held_locks+0x9e/0xe0 [ 1561.589766] ? filemap_check_errors+0xa5/0x150 [ 1561.590474] __iomap_dio_rw+0x6cd/0x1110 [ 1561.591063] ? iomap_dio_rw+0x90/0x90 [ 1561.591670] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1561.592374] ? ext4_orphan_add+0x253/0x9e0 [ 1561.593033] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1561.593787] ? ext4_empty_dir+0xae0/0xae0 [ 1561.594416] ? jbd2__journal_start+0xf3/0x7e0 [ 1561.595115] iomap_dio_rw+0x31/0x90 [ 1561.595656] ext4_file_write_iter+0xb26/0x18d0 [ 1561.596380] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1561.597083] ? kasan_save_stack+0x32/0x40 [ 1561.597723] ? kasan_save_stack+0x1b/0x40 [ 1561.598364] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1561.599140] ? iter_file_splice_write+0x16d/0xc30 [ 1561.599880] ? direct_splice_actor+0x10f/0x170 [ 1561.600587] ? splice_direct_to_actor+0x387/0x980 [ 1561.601324] ? do_splice_direct+0x1c4/0x290 [ 1561.601987] ? do_sendfile+0x553/0x11e0 [ 1561.602608] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1561.603326] ? do_syscall_64+0x33/0x40 [ 1561.603930] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1561.604770] do_iter_readv_writev+0x476/0x750 [ 1561.605468] ? new_sync_write+0x660/0x660 [ 1561.606107] ? avc_policy_seqno+0x9/0x70 [ 1561.606735] ? selinux_file_permission+0x92/0x520 [ 1561.607491] ? security_file_permission+0xb1/0xe0 [ 1561.608250] do_iter_write+0x191/0x700 [ 1561.608862] ? trace_hardirqs_on+0x5b/0x180 [ 1561.609549] vfs_iter_write+0x70/0xa0 [ 1561.610140] iter_file_splice_write+0x762/0xc30 [ 1561.610877] ? generic_splice_sendpage+0x140/0x140 [ 1561.611660] ? security_file_permission+0xb1/0xe0 [ 1561.612405] ? generic_splice_sendpage+0x140/0x140 [ 1561.613176] direct_splice_actor+0x10f/0x170 [ 1561.613864] splice_direct_to_actor+0x387/0x980 [ 1561.614585] ? pipe_to_sendpage+0x380/0x380 [ 1561.615257] ? do_splice_to+0x160/0x160 [ 1561.615878] ? security_file_permission+0xb1/0xe0 [ 1561.616640] do_splice_direct+0x1c4/0x290 [ 1561.617281] ? splice_direct_to_actor+0x980/0x980 [ 1561.618028] ? avc_policy_seqno+0x9/0x70 [ 1561.618673] ? security_file_permission+0xb1/0xe0 [ 1561.619428] do_sendfile+0x553/0x11e0 [ 1561.620031] ? do_pwritev+0x270/0x270 [ 1561.620631] ? wait_for_completion_io+0x270/0x270 [ 1561.621386] ? rcu_read_lock_any_held+0x75/0xa0 [ 1561.622100] ? vfs_write+0x354/0xb10 [ 1561.622685] __x64_sys_sendfile64+0x1d1/0x210 [ 1561.623382] ? __ia32_sys_sendfile+0x220/0x220 [ 1561.624102] do_syscall_64+0x33/0x40 [ 1561.624690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1561.625475] RIP: 0033:0x7fe5e9dcbb19 [ 1561.626050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1561.628860] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1561.630026] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1561.631116] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1561.632206] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1561.633303] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1561.634403] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1561.714984] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:32:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:32:46 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat$cgroup_devices(r0, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="0000800100000000000000000000000000019831cee4eb4cf192ebc1ca"], 0x190) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x5, 0x6, @local}, 0x10) close(0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x8, {{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}}, 0x1, 0x7, [{{0xa, 0x4e22, 0x0, @empty, 0x7e000000}}, {{0xa, 0x4e21, 0x3, @private1, 0x7}}, {{0xa, 0x4e21, 0x3, @mcast1, 0x5}}, {{0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, {{0xa, 0x4e24, 0x8, @remote, 0x4}}, {{0xa, 0x4e21, 0xfffffff9, @private1, 0x1}}, {{0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1f}, 0x3}}]}, 0x410) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r5, 0x2d, 0x4, 0x1, 0x7ff, 0x0, @local, @private1, 0x8000, 0x20, 0x1f}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r6, 0x1, 0x6, @random="4b57099ac259"}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7, r5}) fcntl$setlease(r0, 0x400, 0x2) 14:32:46 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000080)=[{&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:32:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 14) 14:32:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x540d, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:32:46 executing program 4: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x8, 0xb6, 0xdb, 0x8, 0x0, 0x9, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0xf65}, 0x4200, 0x1, 0x7ff, 0x5, 0x8, 0xffffffff, 0x9, 0x0, 0xffff, 0x0, 0xffffffffffff0000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x6, 0x1}, &(0x7f0000000240)) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x100000) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) prlimit64(0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x7, 0x3}, &(0x7f0000000100)) setresuid(0xffffffffffffffff, r1, 0x0) prlimit64(0x0, 0xc, 0x0, &(0x7f0000000140)) setreuid(0xffffffffffffffff, r1) io_setup(0x2d47, &(0x7f0000000000)) 14:32:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:32:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) [ 1577.568888] FAULT_INJECTION: forcing a failure. [ 1577.568888] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.570632] CPU: 1 PID: 10043 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1577.571627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1577.572872] Call Trace: [ 1577.573256] dump_stack+0x107/0x167 [ 1577.573794] should_fail.cold+0x5/0xa [ 1577.574359] ? create_object.isra.0+0x3a/0xa20 [ 1577.575030] should_failslab+0x5/0x20 [ 1577.575592] kmem_cache_alloc+0x5b/0x310 [ 1577.576195] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1577.576966] create_object.isra.0+0x3a/0xa20 [ 1577.577586] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1577.578308] kmem_cache_alloc+0x159/0x310 [ 1577.578899] ? __kernel_text_address+0x9/0x40 [ 1577.579539] jbd2__journal_start+0x190/0x7e0 [ 1577.580210] __ext4_journal_start_sb+0x214/0x390 [ 1577.580929] ext4_iomap_begin+0x485/0x700 [ 1577.581529] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1577.582221] ? kasan_save_stack+0x1b/0x40 [ 1577.582808] ? ext4_file_write_iter+0xb26/0x18d0 [ 1577.583488] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 1577.584418] ? splice_direct_to_actor+0x387/0x980 [ 1577.585126] ? do_splice_direct+0x1c4/0x290 [ 1577.585744] ? do_sendfile+0x553/0x11e0 [ 1577.586307] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1577.586951] ? do_syscall_64+0x33/0x40 [ 1577.587504] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1577.588298] iomap_apply+0x164/0x810 [ 1577.588849] ? iomap_dio_rw+0x90/0x90 [ 1577.589388] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1577.590221] ? mark_held_locks+0x9e/0xe0 [ 1577.590808] ? filemap_check_errors+0xa5/0x150 [ 1577.591463] __iomap_dio_rw+0x6cd/0x1110 [ 1577.592056] ? iomap_dio_rw+0x90/0x90 [ 1577.592642] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1577.593306] ? ext4_orphan_add+0x253/0x9e0 [ 1577.593904] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1577.594609] ? ext4_empty_dir+0xae0/0xae0 [ 1577.595192] ? jbd2__journal_start+0xf3/0x7e0 [ 1577.595847] iomap_dio_rw+0x31/0x90 [ 1577.596414] ext4_file_write_iter+0xb26/0x18d0 [ 1577.597105] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1577.597756] ? kasan_save_stack+0x32/0x40 [ 1577.598390] ? kasan_save_stack+0x1b/0x40 [ 1577.598988] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1577.599684] ? iter_file_splice_write+0x16d/0xc30 [ 1577.600374] ? direct_splice_actor+0x10f/0x170 [ 1577.600998] ? splice_direct_to_actor+0x387/0x980 [ 1577.601678] ? do_splice_direct+0x1c4/0x290 [ 1577.602334] ? do_sendfile+0x553/0x11e0 [ 1577.602891] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1577.603542] ? do_syscall_64+0x33/0x40 [ 1577.604097] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1577.604850] do_iter_readv_writev+0x476/0x750 [ 1577.605503] ? new_sync_write+0x660/0x660 [ 1577.606120] ? avc_policy_seqno+0x9/0x70 [ 1577.606716] ? selinux_file_permission+0x92/0x520 [ 1577.607405] ? security_file_permission+0xb1/0xe0 [ 1577.608116] do_iter_write+0x191/0x700 [ 1577.608685] ? trace_hardirqs_on+0x5b/0x180 [ 1577.609322] vfs_iter_write+0x70/0xa0 [ 1577.609871] iter_file_splice_write+0x762/0xc30 [ 1577.610577] ? generic_splice_sendpage+0x140/0x140 [ 1577.611347] ? security_file_permission+0xb1/0xe0 [ 1577.612038] ? generic_splice_sendpage+0x140/0x140 [ 1577.612782] direct_splice_actor+0x10f/0x170 [ 1577.613421] splice_direct_to_actor+0x387/0x980 [ 1577.614119] ? pipe_to_sendpage+0x380/0x380 [ 1577.614739] ? do_splice_to+0x160/0x160 [ 1577.615340] ? security_file_permission+0xb1/0xe0 [ 1577.616046] do_splice_direct+0x1c4/0x290 [ 1577.616664] ? splice_direct_to_actor+0x980/0x980 [ 1577.617358] ? avc_policy_seqno+0x9/0x70 [ 1577.617974] ? security_file_permission+0xb1/0xe0 [ 1577.618713] do_sendfile+0x553/0x11e0 [ 1577.619302] ? do_pwritev+0x270/0x270 [ 1577.619852] ? wait_for_completion_io+0x270/0x270 [ 1577.620573] ? rcu_read_lock_any_held+0x75/0xa0 [ 1577.621266] ? vfs_write+0x354/0xb10 [ 1577.621815] __x64_sys_sendfile64+0x1d1/0x210 [ 1577.622527] ? __ia32_sys_sendfile+0x220/0x220 [ 1577.623198] do_syscall_64+0x33/0x40 [ 1577.623760] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1577.624494] RIP: 0033:0x7fe5e9dcbb19 [ 1577.625066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1577.627690] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1577.628837] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1577.629849] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1577.630924] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1577.631950] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1577.632973] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1577.710948] ISOFS: Unable to identify CD-ROM format. 14:33:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) [ 1593.601949] FAULT_INJECTION: forcing a failure. [ 1593.601949] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.604262] CPU: 0 PID: 10057 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1593.605807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1593.607248] Call Trace: [ 1593.607856] dump_stack+0x107/0x167 [ 1593.608504] should_fail.cold+0x5/0xa [ 1593.609373] ? jbd2__journal_start+0x190/0x7e0 [ 1593.610401] should_failslab+0x5/0x20 [ 1593.611387] kmem_cache_alloc+0x5b/0x310 [ 1593.612301] ? __kernel_text_address+0x9/0x40 [ 1593.613342] jbd2__journal_start+0x190/0x7e0 [ 1593.614354] __ext4_journal_start_sb+0x214/0x390 [ 1593.615450] ext4_iomap_begin+0x485/0x700 [ 1593.616196] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1593.617307] ? kasan_save_stack+0x1b/0x40 [ 1593.618073] ? ext4_file_write_iter+0xb26/0x18d0 [ 1593.619134] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 1593.620330] ? splice_direct_to_actor+0x387/0x980 [ 1593.621412] ? do_splice_direct+0x1c4/0x290 [ 1593.622371] ? do_sendfile+0x553/0x11e0 [ 1593.623254] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1593.624293] ? do_syscall_64+0x33/0x40 [ 1593.625179] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1593.626381] iomap_apply+0x164/0x810 [ 1593.627219] ? iomap_dio_rw+0x90/0x90 [ 1593.628085] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1593.629410] ? mark_held_locks+0x9e/0xe0 [ 1593.630348] ? filemap_check_errors+0xa5/0x150 [ 1593.631228] __iomap_dio_rw+0x6cd/0x1110 [ 1593.632129] ? iomap_dio_rw+0x90/0x90 [ 1593.632829] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1593.633856] ? ext4_orphan_add+0x253/0x9e0 [ 1593.634799] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1593.635902] ? ext4_empty_dir+0xae0/0xae0 [ 1593.636821] ? jbd2__journal_start+0xf3/0x7e0 [ 1593.637872] iomap_dio_rw+0x31/0x90 [ 1593.638691] ext4_file_write_iter+0xb26/0x18d0 [ 1593.639750] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1593.640779] ? kasan_save_stack+0x32/0x40 [ 1593.641717] ? kasan_save_stack+0x1b/0x40 [ 1593.642651] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1593.643617] ? iter_file_splice_write+0x16d/0xc30 [ 1593.644675] ? direct_splice_actor+0x10f/0x170 [ 1593.645470] ? splice_direct_to_actor+0x387/0x980 [ 1593.646361] ? do_splice_direct+0x1c4/0x290 [ 1593.646981] ? do_sendfile+0x553/0x11e0 [ 1593.647732] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1593.648396] ? do_syscall_64+0x33/0x40 [ 1593.649138] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1593.650150] do_iter_readv_writev+0x476/0x750 [ 1593.650995] ? new_sync_write+0x660/0x660 [ 1593.651773] ? avc_policy_seqno+0x9/0x70 [ 1593.652539] ? selinux_file_permission+0x92/0x520 [ 1593.653465] ? security_file_permission+0xb1/0xe0 [ 1593.654384] do_iter_write+0x191/0x700 [ 1593.655119] ? trace_hardirqs_on+0x5b/0x180 [ 1593.655952] vfs_iter_write+0x70/0xa0 [ 1593.656663] iter_file_splice_write+0x762/0xc30 [ 1593.657430] ? generic_splice_sendpage+0x140/0x140 [ 1593.658375] ? security_file_permission+0xb1/0xe0 [ 1593.659285] ? generic_splice_sendpage+0x140/0x140 [ 1593.660205] direct_splice_actor+0x10f/0x170 [ 1593.661050] splice_direct_to_actor+0x387/0x980 [ 1593.661928] ? pipe_to_sendpage+0x380/0x380 [ 1593.662745] ? do_splice_to+0x160/0x160 [ 1593.663501] ? security_file_permission+0xb1/0xe0 [ 1593.664428] do_splice_direct+0x1c4/0x290 [ 1593.665215] ? splice_direct_to_actor+0x980/0x980 [ 1593.666116] ? avc_policy_seqno+0x9/0x70 [ 1593.666889] ? security_file_permission+0xb1/0xe0 [ 1593.667809] do_sendfile+0x553/0x11e0 [ 1593.668555] ? do_pwritev+0x270/0x270 [ 1593.669127] ? wait_for_completion_io+0x270/0x270 [ 1593.670039] ? rcu_read_lock_any_held+0x75/0xa0 [ 1593.670900] ? vfs_write+0x354/0xb10 [ 1593.671615] __x64_sys_sendfile64+0x1d1/0x210 [ 1593.672469] ? __ia32_sys_sendfile+0x220/0x220 [ 1593.673345] do_syscall_64+0x33/0x40 [ 1593.674057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1593.675030] RIP: 0033:0x7fe5e9dcbb19 [ 1593.675735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1593.679216] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1593.680640] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1593.681981] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1593.683320] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1593.684648] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1593.685992] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:33:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 15) 14:33:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0xb}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:33:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x540e, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:33:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:33:02 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:33:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/116, 0x74}, {&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000000200)=""/229, 0xe5}], 0x4, &(0x7f0000000340)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000480)=""/188, 0xbc}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/55, 0x37}, {&(0x7f0000001580)=""/59, 0x3b}, {&(0x7f00000015c0)=""/202, 0xca}, {&(0x7f00000016c0)=""/114, 0x72}], 0x6, &(0x7f00000017c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001900)=""/74, 0x4a}, {&(0x7f0000001980)=""/71, 0x47}, {&(0x7f0000001a00)=""/11, 0xb}, {&(0x7f0000001a40)=""/172, 0xac}, {&(0x7f0000001b00)=""/121, 0x79}], 0x5, &(0x7f0000001c00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x3, 0x40, &(0x7f0000001d00)={0x77359400}) openat(r0, &(0x7f0000002240)='./file0\x00', 0x301000, 0x142) sendmsg$inet6(r1, &(0x7f0000002200)={&(0x7f0000001d40)={0xa, 0x4e23, 0x1ff, @mcast1, 0x80}, 0x1c, &(0x7f00000020c0)=[{&(0x7f0000001ec0)="dc6a47b32ecca140193551f65317b5653801b3a88734362eb87041dcdec879e6efa87802baafcd1e4bbaa66a71227c409a358e1a990359a5ec0ca77f3232a1b1b9dd6cbc9e7eac43e547e91cebe3cad52af697af0c4a5756de832c04548fb98ae60d275e282be5d703f05b80bb1a72a0c212e39b36cd0b34f4de3d634df4e6f0667fdf450b20bb13f026e7fe2476b5d21e589f24886711e83279", 0x9a}, {&(0x7f0000001f80)="18acd16bfe8b490a41d42cddb36429dc425c1fcbc8707dd39ca74591dc00f0808e721aea167cfc48ea8c5bfc8a6d41bf4317b3c9a852affdf24aeaae6f0dcee967cd184fcea49b0abd14efc7a8d3a9693831e8065638f77e5601d4b3f547974648512e161a3bbfd4da7ddacb1eaf4da6cea367e951a4bf0573e1309105a8f4f200f5abd5aaec47aa579bdc", 0x8b}, {&(0x7f0000002040)="8a133f750acf8fad9fe139e4bab5761840fe39bd4555bbd7b2386a01328bbbf86c8650690c7a8fdedd2e6565b0d138cbb3f40b82c0abb155c645918c5731b13a9a9e295744de4385667985b7901ca4698b40371824e093b28fc8", 0x5a}], 0x3, &(0x7f0000002100)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x100}}, @rthdr={{0xa8, 0x29, 0x39, {0x8, 0x12, 0x1, 0x20, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x33}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x0, 0x20, 0x0, [@mcast1]}}}], 0x100}, 0x4000) sync() 14:33:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) accept4(r0, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000180)=0x80, 0x80000) syz_io_uring_setup(0x203, &(0x7f0000000080)={0x0, 0xc70b, 0x1, 0x0, 0x370}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r4, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100800f8afb0000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002cbd7000fddbdf25020000000c0099005420f978f952050ce5e4bfb03fffcba9b30d2dd9e90fdc4f589a414c637ec799e2d39db5a6035b2dd90523199fc6a7dbdb2873a5052f41319d98b8022904e8ddbf95e732c994d2265e8d9fb87becd7eb41e453fe2cb918fc3d2c4ef27063c280fff00b0c44a0625b53e4747a24444ff664807258bbff7f47139a8cef3ffb55d77eebb1c2fd4f3b6df604b67fcb7095819665b266e95507aa68f135"], 0x20}, 0x1, 0x0, 0x0, 0x8034}, 0x4004000) 14:33:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x540f, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1593.799488] ISOFS: Unable to identify CD-ROM format. 14:33:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x2, 0xff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000002780)={&(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002600)=[{&(0x7f0000000180)="82859f33c9da5955dd75e5463ecbeebdc6164197d232001dc3bfe9c62dbf6f49288abbcb70cea0575e8b4e1edf2ea9bcb6bac09cc08d0de1edc1c885f64cd81acdac4a13fa89962a2f80369d095113944d9fa3bb84193df3c0e3f935527640ec1d062db87f6884c8ecd81dbfe7757b397a2d370b0691597a37e687bc47b8f44a0f0892124a23e39f5270ed6c32266f5080cab80900f1db4c01f45b5a5aa3c4de46a51eab53f64d122f129d68af3799cccc79d071b3c849d63fabc87c15be49", 0xbf}, {&(0x7f0000000240)="7a8669c36a7720eba58d2aee30a0b624d08eccfc34311b6422e041af3461adb3b1c0ed846cdd718fac37067a1291f88f23b60681e6b7d50fb560539acd063231efab04c36f1f7465f23e99e546a5f1e09e346ffbdeca9a7ac382f1cac727203fe71443e4d7ee5997307f1b0fc298a1734df234c2", 0x74}, {&(0x7f00000002c0)="4909431faf82e8dee95d406c57ae4d72e25ea4f525995c860bcdf6ff651e7c225842371ff97c2b18a9013e14e26ef58e5393137d7655a1ddb769c64e8d55596aaa95933fadb4989fa673eac49124446bdceae8681a6e867c5ed5bc2507faad73fd157cf39836aa40d99eb81c97cfd8bef218564043bad374eb7ea860b3d523f766914c3357c83cec8674cf73d2e1cdd5a604246a5234c01458ae3c95caa966847a2355b3e90cc3ee225d14d00392f95c3a53a152fca9e1c0f306a40d", 0xbc}, {&(0x7f0000000100)="a402e12179b8910f5d1fd9d6ad33ddd47828ce03948401f72e17dee3041653726a15dee861634f78bc86414480c5994b28874e4283aa90", 0x37}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="2966310fc830f39ef278ac718f88119d77355b8b491560c2d218d4644987fc55ba49dd243ad4fc7a77b369680cfc0f0d918ce2460b2aa09ce9a32332cbfb6729b3105703087bad9ecf971955e0c3d246bd0cedbff97038d4a8ffb645f9b00b0abbb9e446a7c46e0ef67f75de4af59a0c5c7f43a885e7e2aa73b27cdc5fa708051aee8a2a4236991c0ea0448b", 0x8c}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="d0efbb5f1c1ec3d6b5c28cc2349816b7a37c6f0c0987b127709745b529c43240ddb3efeca17d9e49394d9fe93934fbdcee77fa308429bb4cd9f8bc1dacc566eec33fe5ad9035614809a6bc3e7c", 0x4d}, {&(0x7f00000024c0)="a8b5aea8b922c7819d8695cecefcda43fb582cd5308f2f3e37148929e148d8c8a99714a662b2d8a9726bdf25f736095407f99fc063b1be7207efb607bcf246159f21094b59ad7079651e477294759f75faa5ffa1835c483d47ff46dc30ca9e026e1e7d4f72e0eb7b0867d3005ed7a17f4afbad9b16e7b9b3eb35ee306a4c95f8bf396e81d3306ec55914c1b049bc1f98bd3636cd979bcd778aecd105e067e16b3a07cb07e11fe831f232db7df2731bdc9f8ff09580123adfce4fb3ea00a073", 0xbf}, {&(0x7f0000002580)="a6954c47ac8aaa8fb61e9f9e4a8df79309692b220e3298009e2561896465ef874ba6e5ef95bc8a6dee92f3892434dbbfc1ecb266ab263f1b6f932d6722ae84ea6f8f7ac640f8690360b5607ff1ecbb802822f3ae22b04c8e0bd422efe808f851a214f396319aa3ca4710281e208d23b25965", 0x72}], 0xa, &(0x7f00000026c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe2dc}}], 0x98}, 0x4000) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x7fffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) ioctl$FIOCLEX(r5, 0x5451) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003840), 0x80, 0x0) sendmsg$inet6(r6, &(0x7f00000039c0)={&(0x7f0000003940)={0xa, 0x4e21, 0x8000, @private1, 0x7}, 0x1c, &(0x7f0000003980), 0x0, &(0x7f0000003f80)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x73, 0x6, 0x2, 0x0, 0x0, [@private1, @dev={0xfe, 0x80, '\x00', 0x21}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dstopts={{0x58, 0x29, 0x37, {0x21, 0x7, '\x00', [@ra={0x5, 0x2, 0xee29}, @generic={0xe1, 0x1a, "b6bc9473b4acf260b254fe799d979bcc9c80d83ebe04cccdabe8"}, @pad1, @ra={0x5, 0x2, 0xfffe}, @jumbo={0xc2, 0x4, 0x7fffffff}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @private0]}}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x3b, 0x9, '\x00', [@ra={0x5, 0x2, 0x7}, @generic={0x0, 0x40, "e4f1303011b8e120b68beff7edab20914e40317cd4fddfadf36b87f69833b3252eb5cf93d4dae1a28303406eb9e3d69187bf0bd7b6155d7ee8d745ee144f52cc"}, @pad1, @ra={0x5, 0x2, 0x8}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x1, 0x3, 0x0, [@rand_addr=' \x01\x00', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}], 0x1d0}, 0x800) close(r5) sendmmsg$inet6(r5, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000027c0)="39acb93d62d8bfa6785a818aae9aa6244314f191ce2fc40b6fa120d419f85c8ba683213109e4a632c74f64d1a84550fc2e5b3b148f3b6597b1c348", 0x3b}, {&(0x7f0000002800)="06cc48824693fc947ba9e001caa4756ffb0eab4576480f94f44ce9123bb40523f4bbce993692cde5", 0x28}, {&(0x7f0000002840)="9f5505b1c51ce88bb9f489fcfb310571261b47c256b40b7518a17dd94ce7879de2c88a9eb060a795b433f7b5f29d40498bad3e9cf6bbf6c6954d773695682b8c31aaa4d59348924334985530c5bbe73d439292df6be743b4814423fa0e041de2de8f10e4d7aad26fa74074ceb4c89b110abfaa248621f97aabce4c7d8b521eb026fec90d510d70e71549c31411b7f60bbba0468b0f76a60728e42eb8ac5be626b09aabbc8eb2c06130e2c2916ad25f66db0b40fdb6895d2b000637a76d51ce57c94f914d7e16a4fe3af9c1a70489a6d34aabac0eef4497d85e26d916fd59e2e624a434e0cd90d9cca75ae71346902945f6e9845861a4ea3e15920c41cfce62cdbd42aa795f37b56b1856552a8a1c3db3483a237d3bb1eeee6b21d5f53702fd0d53450478b4898f89688cbd5979dcd81d1df502696d0013919555a696f36544d595d359c947857115663398042e297294b854b8d76d93e6b7a4befdba1f4d078e2233274f6ad9d6d5a70a6857d5cec60a95443a3724f21a659c0f6222529e382a8cd0ffa28e8a82aedb2abf38380b7a40a4d4217a59df19440a0531cb0c62590aff51d2e02edabeb62f4604bbdc5fb54b7a48985dd2e0ad3b6e10d34c47ce4ce9afb788bb3af1b83b62bee9d41675bda95954021829975df0e70b0e20713a14b7ea97830e2bcd8b332e4f299de87da7cab937c07ac109c98585e4bdc0d2ec0883c780971efe85e8ff30a7603c05da3d04ee925ba2d6ebde398d4a5f39d1bce38c1719e368ce38e04a2a80b0115aceb3c056b70b2c7e80d211cffc8851d522bcd9e7c16a72657bac5808de643b8b404f571049d87cbd02540b4bf9007e0b14da11eabe067df4561ea0ac2ebaf8ec24be2daa6af57e03754eef7725e3b53e5d6ba8d31fe2eb97cb87ce9893c554c092e8c3d7ca6df55d855018fc536054a06398aceb49a9b4c2eb224ddd5f35f787f49f9d9c92313ec8718e3ffb524013c0fa4294da8b2c6f08a44f557ce3de8815e2df56a859db0edc336b6309ae3b75263425e3a722615326997f733aaa1f20d86746cf5731239284d1d5b3185c08d6f9cfa3576565f44f2d816af968487627933253e48f077d4da85bb1e905684ecd8ed43206537fe0dab87aea19334ff164c377902e38c328d3ad65113e710496ae6a3db5d7658a97d8bd584c796cb70fcfe2fe68b2c36b1acc1750bac1eb141f3309ed0e0c99bac338b4736e6c61a1248b9a49c7224c0d3b422fe2458ac28223f2fbe9321172aee2aa0793ffb67b347e5c91167a899ed5894febaa5c1d233e2ab8ba04677d963093b47bcf9ab74b95578f7d12f85100a3201747a9a3c70bda1a55458e82c2d0c4e19b179f47354a64aa16e18604d8d815c35061220aeb65de0630274d0c6b27a8fc6a985fe2478ec9e77480a075c9b8c89cbb3340de89786c762c82327246202912526c428804f91c18e436af1a1e9ffdc3c72fdabdd9093c94bdf5df1b029b17c3b73f619713a7ef3c65424b7d8b5b56980972156bd124426f639ed82e7ac6bbd153a138983f8d9aa27f2c11076f0f260558e286ddd25e2978e2bceb812f325b8a1951ff4fea694b51250e47f2fc9ff55c992393acfcb6c1dbf5477ed5df3c3076097a0f2c6f0b73937ec0afaa88c97ddb602ad9a5ceb20486537f4ef0614b0847eecb970365fc8779b5f8095b77c76fad51b7cfdae6b04c1363a35824e20f0721146e664a4ff5c6d3067a03bb2d2cc642e411658ebe5b2e19e9734d2fd7f7bb005a1ce9f0a27f2a33c6c30f11e436959d5aefe977df9aee1e88d8194d6012617c5fa6558dbbe9ae63fd2021cf0fd85267dbc4fb8284573930d8de7843f5a9cb6ccb6b7f3039bce8c5a99fd536c35c7726a0ebabc4a0c2e364629a672f25adbdaabfa3f288a57b446248cbe5a885acea4e562576ebb09c95719b4ecf686cd5047532da4c80461ad5500b140fcf1137b0a9327502e85452b818dff9404e467c7fd014140dacdf4ba8259f6cd7ac0da26403236e8c4e9d74a122febb76861012605698b977531186c1d36852e800b4cc65d55e3e8559ee7a1bbb83a30615f5328aa762c4253c3c88d4d7adac6b7b71ef4b4951f7b4f10dd219b8cef0ac152edb0f704a77101c0af2d98bab00edd7cdad800bec05790613e1aae2edcb2a8da715c949192989a0c374f27d9b9bd06a4d043279c4094a1d99960304a88ba3e4a0d4b9ed7f7b0c31cce80150125fe3501c0a6c1cceed766b9518c219ecf7ac405d6b58e1beffcef2526aa957e5031030e7ed4978ddff817b0111f170e47a3e2bc9afbe3cbb99ae7be5cdb47aa74b69ed086a98cba50c98268a83af9246eb2f126b28fb68e8930c1690448e1d5b2b77cba99c1589432a7fded121bb0bc4779a5273c974b8a45c07cbdc3816214e10c3e5963617b9381e974ab23affa38f53d418330f577e265e8e6fc339cb41c9ca9602b5eb8e24caf57022f3fd63c91f2b824ab7a16654c4612424fc816598797d9b34deacb7709b231cdfcf0e782d0bfaf14f22d6f56fd68409de029a5a60daf627a25516c21a01e90470510f875521f3bfb279542647e82b549a1260690a7eac47d01166179efee509cb8cfb02ebc35f8fba48d80bc738b7dd18eabf4c89dcfc089076f209b2d0a877ad8d4188322ffe507043496aa91f338d3c64b075ef9006494d041b179a01b61b32d21ffe8d58208f5f97d4d76337243cd2e2724859321b21f36ee24f9b549358add873a8f1b7c25b9c796747d42d35b2255a158403d7a92020ff5d18cbdd1b48b86771aab1701e7930ba9aab4a93859fdd64878b0ab89f23e550e4b889f32947e2c27b52ab3b0a19dc7f35bca338d7a2506d9b230335f7d890ed1ca48ac350afc1989ea36453ef04ab473f034f2912772e6591e1e180f3faa51c88ab54ae5bdef7581e56de04e00c1cd4e0bd24de272540f825e735028c6e30a2c49e783f9c1c616c2b1937fb2ac176ac20d761160e0114bd6686aeebb1365c68c9e3f7cdb1bef0fa95a13a54078ab0a5403c22dc5a493a217fbf23cd00689e7576c32fb2695027d268b41e7b34ebea22bd0896150de7e81bd46f10ed3b70ac6a04f0a650ad8fd2eaa58b3550de5b7e5fc6c40d9a2286ab1782cb8df4c7f34389c3df24d4aeb1b3364c85687d15d5e9cfbd9ad3648c962d861cec51fdda0c819a536651572bab2960131ad1f6e8b18e0e4b4ca01d003fd7265098add6b2d5c27894be00cdb8b6737228a7e77bd0494b5962d549e6ca1c8cfaaebff27417d59be15ff83c6ec05d296865357135540b2eb47307d2b23ccba13124601fa89ae3c1086304881a4f49183e5cef076185d726d2081962d963c118e2d2c392b5965fa0236391728532eed122369391a8dd0059335d38ba7bd690c18b55f57c317ba9dfc6685b3d0be0cb9a4aa9d5e0178db2e2f29cbeac5a060363873c7232cac304fc51395b067b1fd873e31dbf32707cf6b88475cc295d2ec67a91372f6731586fd271687995b612d013ec9fb4fb8b4538378df46cfe5862eb1664ab3b166ec763d904e6589b8a7fbe694d84a944718d39a45572b69d7694fe8e9ca96c4cec17dc1f705de6a13475ad184bcf425070314e4f29bf68eb357fdd1188f62c7e919bf048a9722db2652f8383fea4603010ee4790358da98cc10d9ec1b1f370ed10583a5b136cfcfafbfa1f8d1c84cf9b29c17662f6c5063d60bca0b6b4615f24fe3a15c4437693ddb3892559b686361782b941a7df27b3ba85fc60546204181484a3821ce1dfb1e71659cee8e0e133f95d3e987ebf848d39643121c3c032ded86d86be55a79114fd4976686f8fa0746d5d8c39b11d289a71157c3396d96acbabe4a6d95e81686d99db1c1fc00f3272846ebc081513ad8b55efff4cf293abc382fbf4e3aead50231f67a989be7e18cab64a59b185970c7c6da97268d93ebc959680e239a3a84618074a0566e83427debd2b48963be6346b81c3bb20c49a165c37186474d81209e43d9ae733135e0d5fa9936784bf064345913ffc5d09a0eaf65e0a1c6fe2e39bdf01b86d37ffd5cbc566d6c1e648a75f0d19fb3ad246deb532a64dff84eef7b5c5d4f5173013df5b49daf548856f2618c07aa8cf151f087678ab2f58542306d763217ae226c9b998764d6890d13790e9b16424e2fb000d4001dc934000a1e2c40da789ad4a601faf39405d45ad905ec1f3ed600a8e4a4153332904bc2c5d14ae9a20a4034e56cd6dfb7489e4000cbcba23e86f6bddab1505afa300189bcf7d6eeb9736ba9a979b688cdb0fadd7d64a6bfc7e266a0c11faf14a94794e5603bef313f78c82e54cf7feef0513779bbe19746f76361080f720638f10169b1b07a45fc9219393ce0c634f11e87c509b02cd7f073d9f85fd97bf9923cd71f74188a55edfd011fd65aa8e492f68eb44c0c5549a395595b6fbd3a84217b17db2e157a58d01428fa8521d152105a2d79c4eaeae60a1fb53d228b80a0bdadb75e5912fe153cb25a92b5313c469a6889976e88ab1b063242f19a3d7bd298686a6a2ece4a38de4ac5f436f1884dcdc2b9d09a3f766e8016d642a64fec27fd4377a720af106f19ea677856445d1776bb6e346640c84c8691f1c0557b05be58280170b01e2ec6ea139423d54bd8d49fe0ce199975b540ba84fc8577e5ac97a40fa62cd027f675e6846f48eda9cb26e5fa721b300742b59652974c018bfb6c3a9d3abecd51d26860d4b9255d1902a92e8fecc1eb02eb52fb4b921e08561b827d10ddd5fff4852f09e6fe628447cb089506e27237cd89522cc884279d7a36723e0af4a24e7690b6da2835bfb9e30fb86ff43fa14edc88b100fc4fdaf6ced3472581e074c7461b8929d3be287e686c669b56e42faa5977227e50a210735f3fdbac7b1a50859cc2690b11c92671879a2828f5c488ceb9344b1a7dfe731894ecdb783292a22f89bac2cbdf684943d435a0b59c97f00e23009c76b46768ca56cbb49229a0e38696be3e7eae40143cf1148d133ea10e94291cb9dd3c51b3e3e62fd8e25924de23a791f61b232fd12b89d0902ba9d400f5d60405b4cc95083d91befe59864644d111522c579092dc216e62db13733b8acf992d74a6e7db76f00e695d936e81768ee2e9da0c7ea74bb7821ca4502e1bab53549b44f6fc4d9f33a3e6efa1ecabc7e263bcba819580a28c5cea25629f426e5e200dd7be3d894dbf2bf938b9715de151c92275532a258cbbcd03c465bd46ea34e41e0bfcf3dc1e01fa620ea37266584824af651f7f60887b1c43d2c22b2f565cdae665fe546d28d3ac0bcba340d0e2ae3902046f336873a4e9f6fd35a5ac679d1a6fb4e2711c9ad4d484f34e7cfaf112fc384d4ec1572c9a069d662d1bc11f7c31a1b470c19fda51a8c3acf58d98dfccee61eaf4932098b56c23fd9bac39bf0d9a16221ce175c61117a1ddd3a35104a006452df02c34eb5c8aa935b9c7caac85a96dd8ce4960f857372ccaf324f3eba8ee5007983b1bb0b2c8e2f94e51881aec3423945f09042f316419c0a4064aebd349da81c956352b48fecadcea23f7ebdf2519430d28e1923e87b924b2ad5e1fc020987ebc6752d656c1d517b8a63348e44d2c1dc0f5383de2d75f80e5338346eeca1327e2eb665055dcf2f71585e4ae25c186cc2da3a6fdf2b19e81edc6dd7ddced91b08e3404271bd3647bcfd2e22fcf26fa1300af0e6f4278311c7f161a73bdb8939988a0998af3413b104a32aca54a9a2ea69df0e1da7bc9e249d1376c46ac3eaaacd639e80151ebd0fc92ba16678901398", 0x1000}, {&(0x7f0000003900)="8593da247ac203e5e5938b86cd1f1753ac9aa56b8676a7ba35f27b0a2bbe267850f32284f3b6f5aab414343e75c770e5d9b3cdce51c468d040", 0x39}], 0x4}}, {{&(0x7f00000038c0)={0xa, 0x4e25, 0x6, @private0, 0x1}, 0x1c, &(0x7f0000003a40)}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003a80)="d9283f06686a09cc05492b45bcad04d718c124d35d8a047204d44fb475aefd7f8cb9ca75717155fab8349cb0d663da6ec2dcd0e726afa1fba44a84c4a2d5c56019bd9d0fc08f53d7a7248911bc7c95dda0e5508f65f62763190a77253d9c02fc5f9ecc230760bd870596bd398cf29a6d8ebad2cfc2b259931434084bb140199ae6f4ff55c365981b730edd885282cd4c41066b871050f7d4275642ea", 0x9c}, {&(0x7f0000003b40)="1ca6d0cef097af3a78bf3b51478785c5564876eb0a650b62cf1cd0c6c0e85418a7b526e6ab6b33332dd057a7eaf11d967571f936bfb8abe1647ce20992354411e935c4053941731f5ffec990340d94f9439710aa7408a069be26f040fe8f8295fa3c37706562d91de9296183a9b17a9ab73e", 0x72}, {&(0x7f0000003bc0)="1a003097fd69dc056a366f08bcfe55b05a2aa91cc5b06ff520fb24a439c2ab46809d2f7b730928be34ca1ad01876f00425a37711e17d281b81e6d560a3513fe96944629376971ef83cd9d1bb109aa1787309e39e51bc04084581f3ab7cd4abea990055a36eedc28db95e38cc741b4aa5e4d9c0939266641261df0a987d67cf8e30165b0299583c2989490a31ee0d29286883d9be58375142e2d3b7622a943a869189517d8069db961351d4016c25e7093225927eb47f05758e58652bab08e0c457c03214a5ed8cd73bb3fb6851b537c5", 0xd0}], 0x3, &(0x7f0000003e80)=[@rthdr={{0x68, 0x29, 0x39, {0x0, 0xa, 0x0, 0x1, 0x0, [@remote, @empty, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hopopts_2292={{0x0, 0x29, 0x36, {0x2b, 0x0, '\x00', [@hao={0xc9, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, @hao={0xc9, 0x0, @loopback}]}}}, @hopopts_2292={{0x0, 0x29, 0x36, {0x6c}}}], 0x98}}], 0x33, 0x41) sendfile(r1, r0, 0x0, 0x9bbb) 14:33:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:33:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5410, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:33:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:33:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 16) 14:33:02 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:33:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) futimesat(r0, 0x0, 0x0) 14:33:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:33:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:33:03 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1594.088530] FAULT_INJECTION: forcing a failure. [ 1594.088530] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.090998] CPU: 0 PID: 10100 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1594.092252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1594.093757] Call Trace: [ 1594.094253] dump_stack+0x107/0x167 [ 1594.094924] should_fail.cold+0x5/0xa [ 1594.095636] ? create_object.isra.0+0x3a/0xa20 [ 1594.096480] should_failslab+0x5/0x20 [ 1594.097184] kmem_cache_alloc+0x5b/0x310 [ 1594.097945] create_object.isra.0+0x3a/0xa20 [ 1594.098742] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1594.099686] __kmalloc+0x16e/0x390 [ 1594.100278] ext4_find_extent+0xa3d/0xd30 [ 1594.101068] ext4_ext_map_blocks+0x1c8/0x5830 [ 1594.102010] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1594.102955] ? SOFTIRQ_verbose+0x10/0x10 [ 1594.103694] ? perf_trace_lock+0xac/0x490 [ 1594.104453] ? SOFTIRQ_verbose+0x10/0x10 [ 1594.105224] ? ext4_ext_release+0x10/0x10 [ 1594.105985] ? lock_release+0x680/0x680 [ 1594.106717] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 1594.107583] ? lock_downgrade+0x6d0/0x6d0 [ 1594.108260] ? down_read+0x10f/0x430 [ 1594.108948] ? down_write+0x160/0x160 [ 1594.109648] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 1594.110512] ext4_map_blocks+0x8e1/0x1910 [ 1594.111280] ? kmem_cache_alloc+0x2a6/0x310 [ 1594.112062] ? __kernel_text_address+0x9/0x40 [ 1594.112883] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1594.113702] ? jbd2__journal_start+0xf3/0x7e0 [ 1594.114529] ? __ext4_journal_start_sb+0x214/0x390 [ 1594.115428] ? __ext4_journal_start_sb+0x1db/0x390 [ 1594.116209] ext4_iomap_begin+0x3ad/0x700 [ 1594.117003] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1594.117981] ? kasan_save_stack+0x1b/0x40 [ 1594.118815] ? ext4_file_write_iter+0xb26/0x18d0 [ 1594.119774] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 1594.121042] ? splice_direct_to_actor+0x387/0x980 [ 1594.122003] ? do_splice_direct+0x1c4/0x290 [ 1594.122864] ? do_sendfile+0x553/0x11e0 [ 1594.123665] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1594.124593] ? do_syscall_64+0x33/0x40 [ 1594.125394] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1594.126476] iomap_apply+0x164/0x810 [ 1594.127241] ? iomap_dio_rw+0x90/0x90 [ 1594.128027] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1594.129220] ? mark_held_locks+0x9e/0xe0 [ 1594.130074] ? filemap_check_errors+0xa5/0x150 [ 1594.131010] __iomap_dio_rw+0x6cd/0x1110 [ 1594.131833] ? iomap_dio_rw+0x90/0x90 [ 1594.132647] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1594.133588] ? ext4_orphan_add+0x253/0x9e0 [ 1594.134445] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1594.135441] ? ext4_empty_dir+0xae0/0xae0 [ 1594.136275] ? jbd2__journal_start+0xf3/0x7e0 [ 1594.137213] iomap_dio_rw+0x31/0x90 [ 1594.137961] ext4_file_write_iter+0xb26/0x18d0 [ 1594.138916] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1594.139838] ? kasan_save_stack+0x32/0x40 [ 1594.140673] ? kasan_save_stack+0x1b/0x40 [ 1594.141527] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1594.142546] ? iter_file_splice_write+0x16d/0xc30 [ 1594.143517] ? direct_splice_actor+0x10f/0x170 [ 1594.144433] ? splice_direct_to_actor+0x387/0x980 [ 1594.145413] ? do_splice_direct+0x1c4/0x290 [ 1594.146281] ? do_sendfile+0x553/0x11e0 [ 1594.147085] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1594.148016] ? do_syscall_64+0x33/0x40 [ 1594.148807] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1594.149905] do_iter_readv_writev+0x476/0x750 [ 1594.150837] ? new_sync_write+0x660/0x660 [ 1594.151675] ? avc_policy_seqno+0x9/0x70 [ 1594.152501] ? selinux_file_permission+0x92/0x520 [ 1594.153498] ? security_file_permission+0xb1/0xe0 [ 1594.154496] do_iter_write+0x191/0x700 [ 1594.155295] ? trace_hardirqs_on+0x5b/0x180 [ 1594.156193] vfs_iter_write+0x70/0xa0 [ 1594.156989] iter_file_splice_write+0x762/0xc30 [ 1594.157972] ? generic_splice_sendpage+0x140/0x140 [ 1594.159009] ? security_file_permission+0xb1/0xe0 [ 1594.159994] ? generic_splice_sendpage+0x140/0x140 [ 1594.161000] direct_splice_actor+0x10f/0x170 [ 1594.161903] splice_direct_to_actor+0x387/0x980 [ 1594.162865] ? pipe_to_sendpage+0x380/0x380 [ 1594.163751] ? do_splice_to+0x160/0x160 [ 1594.164564] ? security_file_permission+0xb1/0xe0 [ 1594.165570] do_splice_direct+0x1c4/0x290 [ 1594.166415] ? splice_direct_to_actor+0x980/0x980 [ 1594.167388] ? avc_policy_seqno+0x9/0x70 [ 1594.168232] ? security_file_permission+0xb1/0xe0 [ 1594.169239] do_sendfile+0x553/0x11e0 [ 1594.170044] ? do_pwritev+0x270/0x270 [ 1594.170829] ? wait_for_completion_io+0x270/0x270 [ 1594.171809] ? rcu_read_lock_any_held+0x75/0xa0 [ 1594.172747] ? vfs_write+0x354/0xb10 [ 1594.173530] __x64_sys_sendfile64+0x1d1/0x210 [ 1594.174446] ? __ia32_sys_sendfile+0x220/0x220 [ 1594.175394] do_syscall_64+0x33/0x40 [ 1594.176153] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1594.177192] RIP: 0033:0x7fe5e9dcbb19 [ 1594.177954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1594.181603] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1594.183140] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1594.184563] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1594.186004] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1594.187358] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1594.188649] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1594.202751] ISOFS: Unable to identify CD-ROM format. 14:33:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5412, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:33:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) ftruncate(r0, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0x0) 14:33:03 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:33:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) [ 1594.547948] ISOFS: Unable to identify CD-ROM format. [ 1610.086881] FAULT_INJECTION: forcing a failure. [ 1610.086881] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.088970] CPU: 0 PID: 10130 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1610.089991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1610.091188] Call Trace: [ 1610.091584] dump_stack+0x107/0x167 [ 1610.092123] should_fail.cold+0x5/0xa [ 1610.092683] ? __es_insert_extent+0xed1/0x1370 [ 1610.093367] should_failslab+0x5/0x20 [ 1610.093922] kmem_cache_alloc+0x5b/0x310 [ 1610.094524] __es_insert_extent+0xed1/0x1370 [ 1610.095172] ? do_raw_read_unlock+0x70/0x70 [ 1610.095798] ? perf_trace_lock+0xac/0x490 [ 1610.096417] ext4_es_insert_extent+0x45d/0xf10 [ 1610.097102] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1610.097738] ? ext4_es_find_extent_range+0x13b/0x3b0 [ 1610.098476] ? lock_downgrade+0x6d0/0x6d0 [ 1610.099090] ? __ext4_handle_dirty_super+0x100/0x100 [ 1610.099825] ? __es_find_extent_range+0x197/0x4b0 [ 1610.100534] ? do_raw_read_unlock+0x3b/0x70 [ 1610.101181] ext4_ext_map_blocks+0x1863/0x5830 [ 1610.101864] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1610.102625] ? SOFTIRQ_verbose+0x10/0x10 [ 1610.103217] ? perf_trace_lock+0xac/0x490 [ 1610.103820] ? SOFTIRQ_verbose+0x10/0x10 [ 1610.104423] ? ext4_ext_release+0x10/0x10 [ 1610.105055] ? lock_release+0x680/0x680 [ 1610.105643] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 1610.106333] ? lock_downgrade+0x6d0/0x6d0 [ 1610.106954] ? down_read+0x10f/0x430 [ 1610.107503] ? down_write+0x160/0x160 [ 1610.108067] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 1610.109005] ext4_map_blocks+0x8e1/0x1910 [ 1610.109627] ? kmem_cache_alloc+0x2a6/0x310 [ 1610.110258] ? __kernel_text_address+0x9/0x40 [ 1610.110912] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1610.111557] ? jbd2__journal_start+0xf3/0x7e0 [ 1610.112212] ? __ext4_journal_start_sb+0x214/0x390 [ 1610.112914] ? __ext4_journal_start_sb+0x1db/0x390 [ 1610.113646] ext4_iomap_begin+0x3ad/0x700 [ 1610.114269] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1610.114970] ? kasan_save_stack+0x1b/0x40 [ 1610.115577] ? ext4_file_write_iter+0xb26/0x18d0 [ 1610.116274] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 1610.117183] ? splice_direct_to_actor+0x387/0x980 [ 1610.117870] ? do_splice_direct+0x1c4/0x290 [ 1610.118500] ? do_sendfile+0x553/0x11e0 [ 1610.119084] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1610.119753] ? do_syscall_64+0x33/0x40 [ 1610.120318] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1610.121109] iomap_apply+0x164/0x810 [ 1610.121653] ? iomap_dio_rw+0x90/0x90 [ 1610.122209] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1610.123045] ? mark_held_locks+0x9e/0xe0 [ 1610.123653] ? filemap_check_errors+0xa5/0x150 [ 1610.124327] __iomap_dio_rw+0x6cd/0x1110 [ 1610.124915] ? iomap_dio_rw+0x90/0x90 [ 1610.125499] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1610.126156] ? ext4_orphan_add+0x253/0x9e0 [ 1610.126763] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1610.127473] ? ext4_empty_dir+0xae0/0xae0 [ 1610.128064] ? jbd2__journal_start+0xf3/0x7e0 [ 1610.128724] iomap_dio_rw+0x31/0x90 [ 1610.129274] ext4_file_write_iter+0xb26/0x18d0 [ 1610.129953] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1610.130606] ? kasan_save_stack+0x32/0x40 [ 1610.131202] ? kasan_save_stack+0x1b/0x40 [ 1610.131803] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1610.132531] ? iter_file_splice_write+0x16d/0xc30 [ 1610.133227] ? direct_splice_actor+0x10f/0x170 [ 1610.133879] ? splice_direct_to_actor+0x387/0x980 [ 1610.134567] ? do_splice_direct+0x1c4/0x290 [ 1610.135192] ? do_sendfile+0x553/0x11e0 [ 1610.135764] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1610.136429] ? do_syscall_64+0x33/0x40 [ 1610.136992] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1610.137777] do_iter_readv_writev+0x476/0x750 [ 1610.138429] ? new_sync_write+0x660/0x660 [ 1610.139028] ? avc_policy_seqno+0x9/0x70 [ 1610.139615] ? selinux_file_permission+0x92/0x520 [ 1610.140315] ? security_file_permission+0xb1/0xe0 [ 1610.141021] do_iter_write+0x191/0x700 [ 1610.141599] ? trace_hardirqs_on+0x5b/0x180 [ 1610.142242] vfs_iter_write+0x70/0xa0 [ 1610.142795] iter_file_splice_write+0x762/0xc30 [ 1610.143495] ? generic_splice_sendpage+0x140/0x140 [ 1610.144229] ? security_file_permission+0xb1/0xe0 [ 1610.144924] ? generic_splice_sendpage+0x140/0x140 [ 1610.145644] direct_splice_actor+0x10f/0x170 [ 1610.146287] splice_direct_to_actor+0x387/0x980 [ 1610.146967] ? pipe_to_sendpage+0x380/0x380 [ 1610.147593] ? do_splice_to+0x160/0x160 [ 1610.148174] ? security_file_permission+0xb1/0xe0 [ 1610.148877] do_splice_direct+0x1c4/0x290 [ 1610.149495] ? splice_direct_to_actor+0x980/0x980 [ 1610.150182] ? avc_policy_seqno+0x9/0x70 [ 1610.150779] ? security_file_permission+0xb1/0xe0 [ 1610.151488] do_sendfile+0x553/0x11e0 [ 1610.152063] ? do_pwritev+0x270/0x270 [ 1610.152616] ? wait_for_completion_io+0x270/0x270 [ 1610.153322] ? rcu_read_lock_any_held+0x75/0xa0 [ 1610.153986] ? vfs_write+0x354/0xb10 [ 1610.154545] __x64_sys_sendfile64+0x1d1/0x210 [ 1610.155198] ? __ia32_sys_sendfile+0x220/0x220 [ 1610.155877] do_syscall_64+0x33/0x40 [ 1610.156418] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1610.157163] RIP: 0033:0x7fe5e9dcbb19 [ 1610.157704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1610.160338] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1610.161451] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1610.162479] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1610.163513] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1610.164535] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1610.165567] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:33:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 17) 14:33:19 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:33:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x9, 0x6, "68bd09f35aa4a169347b894b3b77f236c83b9f65abe9212314cd8df1dc20aa2c433b24a6999fa09021e87118e9498f8e64a72dbdee1719beef82e3b6265651"}, 0x80, &(0x7f0000000240)=[{0x0}], 0x1}}, 0x7fff) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = eventfd(0x6) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0xd8c, &(0x7f0000000800)="116b8eb296b6efbc01772f460e3ca732c40a3f9b607adb807a105e272e3abccc073b46085bc4a73f79382f4b746bf55b9289ec8810f2509b8b1eb48be505a2510d33e56827bbea242d4bb88300a1f1e1378ac8ffca8b92694f373b5183907f6a408e3f36d85ebee4802ef4c3c22a948fca93155a66e23564e92e", 0x7a, 0x8, 0x0, {0x0, r8}}, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x8, &(0x7f0000000780)=[{&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000600)=""/77, 0x4d}, {&(0x7f0000000680)=""/196, 0xc4}], 0x7, 0x0, 0x0, {0x0, r3}}, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) 14:33:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5413, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:33:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:33:19 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:33:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0xe}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:33:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) r4 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0xdd035441d1539ce) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000001c0)={0x28, r5, 0xc21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) 14:33:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5414, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:33:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) [ 1610.253027] ISOFS: Unable to identify CD-ROM format. 14:33:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5415, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:33:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 18) 14:33:34 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:33:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:33:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:33:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0xf}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:33:34 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x7bf9, 0x4) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78, r2}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, r2}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000780)=ANY=[@ANYBLOB='ip_v-ti0\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="07000007000000030000000549ed00a40065000008299078ac1e01017f00000100070f43ac141421640101010000000083138fac1414bbe0000001ffffffffe0000002891362ac1e0001e0000002ac1414bbac1e000107138fe0000002e0000002ac141416e0000002891339ffffffff7f0000010a01010264010100831b15ffffffff0a0101020a0101020a0101010a010101ffffffff01071799ac1414bbac1414aaffffffffac14143b0000000001"]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000100)={0x2, 0xce21, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000700)="6d50c411f90130abf4efabb5660a0267c588af575f7e19b018062232e8bc5dff7cb8eaa18700c872674d761f7572548aa1dcebcab6f5845b535a531aa65024e473b62a47716fbcbcf18f47d2692d683e", 0x50}, {&(0x7f0000000340)="dcb05d233a78d90f1fc7d5a3889c53a3b7aabcde32afbfd7899f2dc89313bfb5f9541572eafef2db8f11e312d514df5af5e6e27c4c254c1ae96179ae84c46bf010c9d1925a7adcb9dc02047376fb0c548c493ceeda16ab956a5d15bc69dc3462b88dd4dbbe1773ea809b2737c525a966c37e69f3bac6869c543419e121473c9033f3d04ce68fd891cb579fcbf9eb8f836b99d0b1", 0x94}, {&(0x7f0000001500)="3173c13a8af42d9268b80ce2a464e7a3c64a5caca424a395c777698ed60b479ab8df7632a3d8800ea3f360039ea4b83c12b2867672e065de8b39539e7b173e1166b0068a12f9a58ce1e67a580a7bd6ac0370f2f4c98763420d92c1515b4464fc8323d5122e1193d454b1044382dd009daafa73f1c86de24fd0c9ccf6616a5f16f3b3d30eec2cb83dc7cabb919c385e7481935928b9233f83c722dad36c7138a29e023572ab2d9364e6ae94e3d2e9776d4b49c4e8bd2cc80a4c89de337bbb01123e296ad101b015a5cc59997aecab78d848e3fbe083c55bb9e3e1855b2c2d0251f8817ea87df02af8c8c13fb83256b932acc6e1245d3f120c81933f49386ae146e74308a65e40f028e6ae27c74f313de34a1fe4171576361f3de43725c7ea19fc2f0adb5de1eeb5d88d12f006d6ff1940b2aadf76a26f287d130026f5256f8aa500563bc4ccd53c0c763afd50c07161c1737738603c4cafe9a28c8ffb15be1947b804fbc8c9c22f5c2fcc70e8a5345d00bb7f8c1a629b6258e64db235ee76cdab52110476598ef692a63047e5a67a718148db70300e69e4a3de4ecb84040386d593f705adb35b002b4e7d175f2ebfcc8cbd45535a561fe3bdab571e50a0c379bf40b5762c273e295ce6fde6016ef395103106fe0d5a9d04b85d761677ad9b6a4f61e811c373978411b237f7f7462a1fdde10a64917e92cf84eeafa4bc0558a2d31c0d3f8fa921ab021d4a64d2a4b3469b22e9487b1c594d45b430ea16a165ddd24ea835a081f2aa99d7cbb913e3df5d047cca31132207981c9b0b7ce3c19d86b695e6c4c098e9abb9b006d173dbb4471b7157f606beb865bf770f0aaed4be2d933534b2c25569df18a2ae6e345ffd61df9214b1a0ec6d58f6d3995b47f4eccf16e031b230f2e2a9064b465051daa7b3e05ed8877656be6c81ccfacfc3fce48cd8314f658329b4f6c58a58a7d6ffdbb08a4586ebce34169d0ebd10ce73a393bc4fb09357816be9f3376faf9ba02ea16124b9b4a73f9a0a8efa26b3f3476ccd0a88c40415eb3912dacb831908b2b00b10ece3ba11cae7b31b4b338d0a63697ecdbde0167c10be11f6b633839376a67cc5ed1ce0f6fdbc712cf78bfc7edf8ea5c685c48cbb492b31ff199f4daad6c11a3e26b64988b965ddab8d7a5c27e540e5315685fb73af044d0061dddbc3af397acf327c760a2100aaf62d4cf04f0addbdfa2f5f79fe5546afe04c6e9fd759e011a278b3194cc7388b881dfcdad3361e79fa90ea6e71928fa246e509c39f32470d2c81c0c0a8559f1a60bc07723b76c0644db336999d544b92cae2bbc94b8f355ea6004f6ab0a1cfd99e98521954bd941822688e414eb5916473cddb2ef873a7009477ce3dadba1cce42d98521e58a17fc4cb435be2a00cd909c342b6e989ac2dd4f5264343523541db5b91a4e9d0db637e1a3e3e868c425e8de6ac94bec3923350b8b023370d22fa1cfa10d52d43339203b06a3930d1e3ce6ce12f571feedd324b6f88bc29a15e630ea5d90b5c558722c6aa00ec70dfc51eaee5ec472546d105fc31260ea8cf141d4d1ee108197c807dc4deb3fbc06b342abac1477b1c3f3bd23581d19a7f41aaf93f4947c58b679bfbde4f120e9b9ceb9e2255fe8b5edb7167b7d765b1c82949a27bfe2f185a760cfcdc4c2688481413e4bd310c3d8e5162b0880be0b2d9f5c0cb15242f2c678204e62f1db35022d050baef14047c04db4bbf6f8b47d40e13b22ea5a46663776ec60761675a9816da09dc6d58d1fd673bf31cbdcab8dbd3481bf3911682ffa31957f4eb581a2cab75fd74ae33f12c1249de866c2262acfb79ddbc3f69c7a98be8fcddf85bb1f5ab5dcbc22d93e51a9f303d49b44f4ba4ad2a728cae0f4c5e8b96abaddad7bfda0aed328c1fb6d769968766382184d5a1f92f4b06c3622ebcfd5beecde1da328dcfa4b03388a0572a4f73d45cdca6acb36bac3256fa33810f690529984a91caad4f0204caead94e2262f7793fee39b3aa9a21fab65709fbc0f9b2d9d47d10372cecb86e19a889cbdb534e1da9eff403872a581eb3578200112e2c3d32637df380982e60bedfdc0e2ca1f5831f1daa4f581c9669194cbed1a1bf76c2db587e323efd270de69cf630a056abdfa8df8d63552d60dbbfd83dc005a4c34247f7e13452a1180148a1ccd327b8966f3264e05eb526c873875e33559667eb8b60acf5168798449014e90d2ca730c6690615653f8cc14d2aafefb5e6036330bff214f7ab2e54b9f37c5ff0b635e837c470a3012b032c303f1dd7a15bb13a61fad4426fc36c3e4b8dc8ed6ff6dd809f8f3f7691fd799af29ecd2d9985746d7315d80d46dfdd954f7a9f48198aa0fe36476507c34df44ead750370c3d49a77ea2a3fd9ef26247a5f4099ac33411107cac8d615a32edffc00d5ab389991e547e3cbd288a3ffd3f26e82d9849f0d1c406a0e72c4350872d233179ff8179199843df1616e2fb8dae4f8349b6f4b4a308d20de8ab2ce2ffa5836d989d4bc1e9b266398bbe4f605bb69315588e0d46b4e670783ca53e8940e4871e3167cd0f93aa9bd8c9e50283071958783629b62af6a71a3aafaebf4c914ab5a7335c95f609415f6cdda6d600d5656db198808c1a35d3f664d6dbcddc38e7660bd9492d2f0594f303cbfd8bd3dc68929b4ed51d8dd6e0b08e866f6b51cbed60bf7bd32a50972c67d6d778b2897a8c756c4cc5112b414b4aaccca2758eb8d0807cc189e8478164799e4224cb79d58d1812984ba482d7b21de225bc4af812f53c55603fbcaf04e7ce688aaa04820fe84ac345e5b8fb3d1691c30a87935575b7024c57d0d15ae662169f249048ee25774d70e02694649f4910d7ddfab21ca430cdfbe8b956b0c43e367055baaf9fb1ca2c6508213a08761e9341d88aff88d300387f4ad1af0e5996a9449e74857692c3cb920b2e28b0d9b303cdc9a48af705d17fe90c0217d145ee1348ef3692e23b64bb931003c09ffc73fe5af9d67d0c52ab7328ae1b5c8c7482071ae455ee120749687b95f6175faa8ffbe7291a02762649efca11310b76f35599669955c1d4ca5037620e0ba5f5c3a492f7382eccaa558e5e206b47247162745649ce1c1c28740470b841c1954ba504e0c1a873367bab99900af0136160967dd1cb274bb880bcf7ad18e4373f29870de0c260f4cadb1cbf1237961f7d10421548ef43def5912ec9aeab40d9687b69c9c78df0a0c428320f4f9ea7ec64de0b1eebb4d47cec15644924d795aced68c141ebc3d1afec9d9e72d7861991ba595df45a516a62c9fcc7fae9651794c181d35f379070e2c50ca3b6f544928da841481d9319e4ab9f18a55554c8a001b7bad918fbfcf41c199188bfd153315cc4a95262ad8a194936d8c2e6c1ccb7bc621072e5fa44bf22de2ff78e689ae26306ab0a4567c5cd2b9d0a8f7ec226f4c75b011e0e8f481559a2521e7ff76abea302af362310709e0e2ea210c340f6a0f862594558d92d249bf9540fdb0f4a026ff09be09907acbe334613e33e34dedf0da03841470b573b929c846e1cb629eb0f87d755eee3b73b127d4468912b5efca74abe5b8cc11591b86dad61af4670352920e9e0e36709b1bb199ab54a21e8ea4b6f3b90290110701f75ff0aa09f8516515bf24f8faa756dd632fc85e9361d6cd18df870efb765d9fdb83eb4ca464135e8efa7e3e9ff5b20b9d0ea84f126d56b26f1488b59f4711396c8434873503d81f6b27bf90f8951b6a4bbca5cb425d9746b653ac7e5a4861418d109d9fb650b9d66cbbba71c2a98b8449971f2c22173c90b13df5e0d1230695722a3db0e68ce280c98a0ef32577f7ea73cddb7d913086d7e43fe23357e0a461c1b814e83ebef12fc84d6db4d72bd8213ad009e7856a54019cf9b2adc8130c6c1a96c5cd308460fea84948edaaea5adfc6667d4a57fc43491044b7be8e61be608bdd3d3c6b297a62119ac33b2d69031aee0e1b2d1678832ca75c5eec0a40f7ce737c533465411fb4bac06b862f4285c29a031f6b8b984bc567be2ff2f520a6a37b24ebb9720cc3ce9e2d00db8defa43ce8fe7086376861a9e645871aa76effce5e102f9d38fcec2cf04fd66760dc8ed00ab2d8d6d4ae6e96f5e73bce4d35a01a241593c333b3e6b2fc5c22e22370ee9de159903c3607ca05ee79e1bdeac9b7b7d513d28e706b401714d5cfcf226f7dc086fc8f830d708d0dfc771b9eb2e4c9b9839c49d882c446532279561d1bf97537cf5de670f4fa2ab750df7bcd69132e06142a58f0613390846c4d9e092a14e5c64cb39eb1ef9fd0d6beca2a31e22c4fe4f4f85e7cb103d6837413a6f8c59852a15aacd9613bd538f087b5f050cdffa2b2a03f0bcc11c69f72265565ff66d6342c3fa1b036825341f9c83ed4dc4ba30bbf9ad0f4eade1a593442dd0d1e2e78d1ce87b1ae0e7f61d7487a83d5dcfcd6fb3b07cf0974ed4abb03a88443cd9b427ab1680974d1bbc791a320a952668877de862ffb5ce2cf261374561ae03665a4031339fc7437251a70ff92735b2e687100ba21dca634a0496658f06cb871a3acd554b68d52e4fbd72daf3b9d8b5f0633a8da44bb83b496d59ff825bc181423de4f056629578c262a1b0ca6cef7b0557d4b02586cfd9cd1bed097630b413e66f4a7779d23467b17adc441b2623e7f3c30aa67e07a64854ed220aa50cdcd4fa9da16b3a2d065efbd47ebcab366470ed969fa14597f8518202d04f14df57ac77ca610dd92ba16913665c83c7be9032e0273324ec3057ee0cae351fa33111c7fb69672c216081b5cd7216379790a8b9b8fece96dabb4ee1937e9c3f8e34dbf0335fff1d94922ec2ffd6067625007705e1e9310fe2dcb3dea22db8c5c638c3f71b90e3a78993f66d87b1afb7b22761de5571c577e3825a5e633f8d91f2c934ed90e0cbdf9a8a252ed9d11f35cae87876fe0a36b3364e62a9be1d8041dff0204ec2b9503b38d2d826862f57c85df518a6549d3e8731b09fc9b400ced0768d9b12b21441b2c6be8a923949bb4cf0154b93c082eac8c8b7fb1c6e657b4d917723160eea9f12164600d71f5dbe02d116c5c802463939a4fecb8f8b4039b0e44098352f85ea1c9723fe08a124ae455d0c9b2d3eaaaac24f7ebba87c4d6fa348a19e22d32f8397f0261c76e80abba00c45d42feabf68b77ca6484dc50bda4d78d2ff34123d29e341a752629fe60ea4baed39e8cf2e8b2a20844ff0de68ce29db7b5f6d72442cf40afde01c03d74d5449b48688b14b4bdc5498e1a34f2d44f3e583f943c5e38eadf3fe63415481b415392f2703bbff947b5c8b217302858159bd0e24512a26b54d33ce9c7e653837b24b741788d540a2b23beea00518e8679c2a0bf97e0094ce7226f8f3121a5c10c7f7ab3f819ac31fe3d09022d497d0af4b52bc9d66ce8dd736309ee54adae0406f07692c13794878445ece824a44785c405e92980805e7368f9c3a778df22cf1041dd4bb9d8d04360fa366fdcc238e2d25761220829c8821249584e56d2358928aca6b8892e5ded5029e976e70640b1561ade81acecd8c2ba2e48205432243c78684dc42edcbb2df6e7a3af9d4646f362383119ab1b3303b6456c2ee62573bec96e76bad4094a569182562ececcb39f6f0865b7c82f219786d3dd64daf166564db838d3db142947a686842e0f6c0f1c04249151f5a63bb1d280d8b4e204a09fba65a3414063a5b369729e6ad3fab1dfdfdeb0f6c3219b9e72b46315c27b6c79f19c48be94ef0c50cb2f581575751a7ed02912c99cf6265a3ba6df5bf", 0x1000}, {&(0x7f0000000400)="057934cb329b7005400e849247a4675a211f5f27b8efcdca83b01636f408799c41b9367638eca5446e68403c032c8ec0fd6792b9e66eb1ceb7fcce2ef83616deda1e3ac1a6e0048650e9db90a154d29ea62302ed81977d85f1ec489f6e8ece230ee67872b11d1506c6d0a1af1290845cf4acc61c127273b5ce769279429af913b5932f1f3ed85b5df38be3126b6ab0c6df3437868e816f183d593f41d8d5f787d902365a8b66415ad0f514862412baf0b2dcad83c250", 0xb6}], 0x4, &(0x7f0000000640)}}], 0x1, 0x800) syz_io_uring_setup(0x3ac6, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) ioctl$FIOCLEX(r5, 0x5451) close(r5) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:33:34 executing program 7: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) io_setup(0x880, &(0x7f0000001440)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) ioctl$FIOCLEX(r5, 0x5451) close(r5) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) ioctl$FIOCLEX(r8, 0x5451) close(r8) r9 = syz_open_dev$loop(&(0x7f0000000840), 0x5890, 0x460400) io_submit(r1, 0xa, &(0x7f0000000980)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0xadb, 0xffffffffffffffff, &(0x7f00000001c0)="dfec97e03c4f507dbe39bd37b92ca23cf60dbcb55c61ba16d636fbf279f8b2c02a25d852000d211909d3dc4afc8ceef8b55972f2be3a3297f9f629b0ca090b1d3b06e5ecd7454a0146ba458f01075a736ceb58f613f0321baf0d0cc47c8ff6b4349e6c62428f8a2c777d374dbb3fd743c3f4ec6f388e28d0bd893fc46669d2c865d5fd9a49c77400ef5a574a1f6b7c782b95a7e4a560aae446cdb0547f801716b31b92684b10ee2cfe892e91642c1f4b557907b24bc072a7537e115af0a2c67861ab55d81361f939087e156079", 0xcd, 0x9, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)="55138960", 0x4, 0xfffffffffffffff8, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x4d2, 0xffffffffffffffff, &(0x7f00000002c0)="139b00508c3a4fc4cf8a9a2b70482aa697789bfb133bd154f46bc47831ac209b3d2fdca14fcf4805f19cce7f2580fbff4dc2929b5655c514a8b3255f61b2227e78f8c6f8205d16aad18d2161af0bf3899d44bb5c718d6cd95affdfa7e446d1685e5ad9ba9c8355ad5c193a90be7f343e80943473df27ecbdec914c94183b8a1ecdd39a178da77b74167bb1e574e4be5a7fe5d427f2eaf3b4c6e351206bb7b35292c9adc51d3ca63ffb7c57c61985606adaf4268deec5e3d9fb2ccbbe233ba755c4a337ea5fc401a86bd926ba402b3d312e4a46", 0xd3, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x100, r0, &(0x7f0000000400)="50a89d1d379cd6093f9557567dda91f26043e04b47f6daa4b123e7b519ad0be04f6eb6ea89282227acb578c6b5031f16b56c524348d9296732f6e4e2734fdf313f7d0cd0a5a97fc2400fc3ccca6b1244adb5558045a91d05ca122878f0afafeeab16c65d118865986e51ad62016ee20a6989ccdc75c3344ebe2f1105493cbc4abeeca6f3c14469276ad594623d5311bd2f943c1c5a5512a470ce0bf73205fe1f88dcf9d7d9d587e7db82e8311ef9519728555f6eb393aaccb456b1120c", 0xbd, 0x4, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3f, r0, &(0x7f0000000500)="2a95ffb0a2a1ee704d17cea0a9c3e0b7e658df6a8db92cda87108ed69a7245826fca6ea8a673e583ddedcd81e515ba673e400568840675710999fb9811f7", 0x3e, 0x7, 0x0, 0x2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x7, r0, &(0x7f0000000580)="c1d9c7910804f82066dd48fd35d3bbbf13a0d85a1af8ecad4efe114c14225fcc1bf74d937284df1a7019652f71aaa114ebc3eabf000b32228aba12b9098edc3ea3bdb1536f7b69abf4e8b549be7cd497e5931210d295591821", 0x59, 0x6, 0x0, 0x1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x60682cf9799fb3a8, 0x1, 0xffffffffffffffff, &(0x7f0000000640)="dd5a66fdbb042af2b045ed1a9fadf7b3b35f27e92d285759ee6f23ff693b46a28fd5c7796fc69dc63b1d986de4ec856ccdd56e502ad58c42ffa3697173e828885fa36baec980db7862a2128e3157e7b5352c3bc4736d06dbb3352bf5a6d80b84c57f795cf4903d981f698dac4d0e53ecc66beef26f555631a614d86ec63547ee492b43520bff6d8f4f2ffdca4e4a9f2a93aedad09f8ba189", 0x98, 0xff, 0x0, 0x2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0xe76, r2, &(0x7f0000001480)="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", 0x1000, 0x40, 0x0, 0x1, r5}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000780)="a886c56780ec578c347f7de0b3f675163c2e0be49d5a8f7559ce71606b6ff0da70fb8dd3d323052bd95c0f7ac0203c55b80236432795324039e67b950a96cb70a304091d8ae668e5cf642a4bd27696171067a19a06fe5ea06216282955717f320a87990cbe07d805cd3fdeb0cb", 0x6d, 0x6, 0x0, 0x1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x83, r9, &(0x7f0000000880)="836adb94b0015e5f8e659dd068b40170de71403268d4547176bcfbae398946e87413fb9e7473da495b702d4f488ab81c7eae77be428e54e8bb9c6ac7b3b1c1e739cca9a894b0585e48bd03b5baec206581dc5ea370538ead32cefcfd2fa42ec610ded7036e8bd620d7224fb5f96d9775ed5d7f0cb3e5acf9e08e8b92efeefd7aa58a271cf8ba86a0de8ccca688b4857d58b88f9a3facc880e014b9a349b9afd7", 0xa0, 0x9a7d, 0x0, 0x3}]) io_setup(0x0, &(0x7f0000000040)=0x0) io_getevents(r10, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000010000001800f44f7b84191ff65d7aef245a0000", @ANYRES32=r0, @ANYBLOB="01010000000000002e2f66696c653000"]) dup(r11) 14:33:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5416, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1625.777846] FAULT_INJECTION: forcing a failure. [ 1625.777846] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.779978] CPU: 1 PID: 10168 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1625.781260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1625.782732] Call Trace: [ 1625.783169] dump_stack+0x107/0x167 [ 1625.783863] should_fail.cold+0x5/0xa [ 1625.784490] ? create_object.isra.0+0x3a/0xa20 [ 1625.785351] should_failslab+0x5/0x20 [ 1625.785941] kmem_cache_alloc+0x5b/0x310 [ 1625.786643] create_object.isra.0+0x3a/0xa20 [ 1625.787290] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1625.788049] kmem_cache_alloc+0x159/0x310 [ 1625.788667] __es_insert_extent+0xed1/0x1370 [ 1625.789340] ? do_raw_read_unlock+0x70/0x70 [ 1625.789984] ? perf_trace_lock+0xac/0x490 [ 1625.790615] ext4_es_insert_extent+0x45d/0xf10 [ 1625.791311] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1625.792104] ? ext4_es_find_extent_range+0x13b/0x3b0 [ 1625.792856] ? lock_downgrade+0x6d0/0x6d0 [ 1625.793494] ? __ext4_handle_dirty_super+0x100/0x100 [ 1625.794252] ? __es_find_extent_range+0x197/0x4b0 [ 1625.794968] ? do_raw_read_unlock+0x3b/0x70 [ 1625.795599] ext4_ext_map_blocks+0x1863/0x5830 [ 1625.796302] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1625.797073] ? SOFTIRQ_verbose+0x10/0x10 [ 1625.797687] ? perf_trace_lock+0xac/0x490 [ 1625.798307] ? SOFTIRQ_verbose+0x10/0x10 [ 1625.798919] ? ext4_ext_release+0x10/0x10 [ 1625.799546] ? lock_release+0x680/0x680 [ 1625.800134] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 1625.800833] ? lock_downgrade+0x6d0/0x6d0 [ 1625.801480] ? down_read+0x10f/0x430 [ 1625.802017] ? down_write+0x160/0x160 [ 1625.802586] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 1625.803290] ext4_map_blocks+0x8e1/0x1910 [ 1625.803921] ? kmem_cache_alloc+0x2a6/0x310 [ 1625.804561] ? __kernel_text_address+0x9/0x40 [ 1625.805241] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1625.805899] ? jbd2__journal_start+0xf3/0x7e0 [ 1625.806572] ? __ext4_journal_start_sb+0x214/0x390 [ 1625.807299] ? __ext4_journal_start_sb+0x1db/0x390 [ 1625.808038] ext4_iomap_begin+0x3ad/0x700 [ 1625.808669] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1625.809396] ? kasan_save_stack+0x1b/0x40 [ 1625.810010] ? ext4_file_write_iter+0xb26/0x18d0 [ 1625.810720] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 1625.811649] ? splice_direct_to_actor+0x387/0x980 [ 1625.812359] ? do_splice_direct+0x1c4/0x290 [ 1625.812970] ? do_sendfile+0x553/0x11e0 [ 1625.813571] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1625.814258] ? do_syscall_64+0x33/0x40 [ 1625.814830] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1625.815631] iomap_apply+0x164/0x810 [ 1625.816184] ? iomap_dio_rw+0x90/0x90 [ 1625.816760] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1625.817636] ? mark_held_locks+0x9e/0xe0 [ 1625.818259] ? filemap_check_errors+0xa5/0x150 [ 1625.818951] __iomap_dio_rw+0x6cd/0x1110 [ 1625.819535] ? iomap_dio_rw+0x90/0x90 [ 1625.820125] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1625.820803] ? ext4_orphan_add+0x253/0x9e0 [ 1625.821444] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1625.822176] ? ext4_empty_dir+0xae0/0xae0 [ 1625.822791] ? jbd2__journal_start+0xf3/0x7e0 [ 1625.823470] iomap_dio_rw+0x31/0x90 [ 1625.824017] ext4_file_write_iter+0xb26/0x18d0 [ 1625.824710] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1625.825397] ? kasan_save_stack+0x32/0x40 [ 1625.826016] ? kasan_save_stack+0x1b/0x40 [ 1625.826629] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1625.827377] ? iter_file_splice_write+0x16d/0xc30 [ 1625.828066] ? direct_splice_actor+0x10f/0x170 [ 1625.828737] ? splice_direct_to_actor+0x387/0x980 [ 1625.829460] ? do_splice_direct+0x1c4/0x290 [ 1625.830103] ? do_sendfile+0x553/0x11e0 [ 1625.830692] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1625.831376] ? do_syscall_64+0x33/0x40 [ 1625.831955] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1625.832758] do_iter_readv_writev+0x476/0x750 [ 1625.833444] ? new_sync_write+0x660/0x660 [ 1625.834060] ? avc_policy_seqno+0x9/0x70 [ 1625.834667] ? selinux_file_permission+0x92/0x520 [ 1625.835395] ? security_file_permission+0xb1/0xe0 [ 1625.836123] do_iter_write+0x191/0x700 [ 1625.836710] ? trace_hardirqs_on+0x5b/0x180 [ 1625.837370] vfs_iter_write+0x70/0xa0 [ 1625.837949] iter_file_splice_write+0x762/0xc30 [ 1625.838665] ? generic_splice_sendpage+0x140/0x140 [ 1625.839428] ? security_file_permission+0xb1/0xe0 [ 1625.840148] ? generic_splice_sendpage+0x140/0x140 [ 1625.840877] direct_splice_actor+0x10f/0x170 [ 1625.841546] splice_direct_to_actor+0x387/0x980 [ 1625.842253] ? pipe_to_sendpage+0x380/0x380 [ 1625.842902] ? do_splice_to+0x160/0x160 [ 1625.843489] ? security_file_permission+0xb1/0xe0 [ 1625.844197] do_splice_direct+0x1c4/0x290 [ 1625.844813] ? splice_direct_to_actor+0x980/0x980 [ 1625.845535] ? avc_policy_seqno+0x9/0x70 [ 1625.846158] ? security_file_permission+0xb1/0xe0 [ 1625.846884] do_sendfile+0x553/0x11e0 [ 1625.847478] ? do_pwritev+0x270/0x270 [ 1625.848049] ? wait_for_completion_io+0x270/0x270 [ 1625.848773] ? rcu_read_lock_any_held+0x75/0xa0 [ 1625.849478] ? vfs_write+0x354/0xb10 [ 1625.850043] __x64_sys_sendfile64+0x1d1/0x210 [ 1625.850718] ? __ia32_sys_sendfile+0x220/0x220 [ 1625.851414] do_syscall_64+0x33/0x40 [ 1625.851964] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1625.852719] RIP: 0033:0x7fe5e9dcbb19 [ 1625.853289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.855889] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1625.857011] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1625.858079] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1625.859127] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1625.860144] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1625.861198] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:33:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20d314) 14:33:34 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000440)) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r2) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) dup(r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, r3, 0x0) r4 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000400)='logon\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)='key_or_keyring:', r4) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r4) r5 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r5) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000880)="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", 0x1000, 0xfffffffffffffff8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) keyctl$search(0xa, 0x0, &(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0) unshare(0x48020200) 14:33:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1626.028668] kauditd_printk_skb: 6 callbacks suppressed [ 1626.028686] audit: type=1326 audit(1722004415.029:567): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10174 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1626.036631] audit: type=1326 audit(1722004415.031:568): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10174 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1626.042745] ISOFS: Unable to identify CD-ROM format. [ 1626.044755] audit: type=1326 audit(1722004415.037:569): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10174 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1626.051885] audit: type=1326 audit(1722004415.052:570): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10174 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1626.058383] audit: type=1326 audit(1722004415.053:571): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10174 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 14:33:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5418, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1626.065352] audit: type=1326 audit(1722004415.053:572): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10174 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1626.078159] audit: type=1326 audit(1722004415.053:573): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10174 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 14:33:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20d314) [ 1626.103678] audit: type=1326 audit(1722004415.072:574): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10174 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1626.129338] EXT4-fs (loop6): bad geometry: block count 256 exceeds size of device (11 blocks) [ 1626.134335] audit: type=1326 audit(1722004415.075:575): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10174 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1626.161886] audit: type=1326 audit(1722004415.075:576): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10174 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 14:33:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:33:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x10}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:33:35 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) [ 1626.494262] ISOFS: Unable to identify CD-ROM format. 14:33:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:33:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:33:51 executing program 7: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f00000000c0)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a08020000010000010101", 0xaa, 0xb800}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="686964f4747403d06ea8aac2c44e09000064b4d1e4785cedc7419b26466fe7b901ab5c96027cf878b27646a40d342e5e"]) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0xffffffff, 0x1, 0x2, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) openat(r3, &(0x7f0000000140)='./file0\x00', 0xc000, 0x10) 14:33:51 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:33:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x541b, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:33:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20d314) 14:33:51 executing program 4: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x229700, 0x90) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_create(0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x2, 0x7, 0x6, 0x4, 0x0, 0xd3, 0x2000, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x20000}, 0x4004, 0x6, 0x9, 0x6, 0x10000, 0x80000000, 0x1, 0x0, 0xff, 0x0, 0xff}, 0xffffffffffffffff, 0x0, r1, 0x9) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000127bd7000fcdbdf25160000002c00098008000100c6030000088302cb975d2e1ac503e683e8374a6e7800020000000000000100000000110008000100adffc49fffff08000200f7ffffff1c00098008000200ff0f00000800020092fe8f7bfd7170c709000000bca4dab18ac7189f89e2ea689bbc885829f48a44488570acaff18abf96363cd76eba7fd6fc57bf209ac04fe5ce8f1e68db5bd21ff55d"], 0x5c}, 0x1, 0x0, 0x0, 0x22040000}, 0x4000800) r5 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000200), &(0x7f0000000300)={'L-', 0x1}, 0x16, 0x3) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 14:33:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 19) [ 1642.194789] FAULT_INJECTION: forcing a failure. [ 1642.194789] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.196491] CPU: 1 PID: 10241 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1642.197321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1642.198316] Call Trace: [ 1642.198645] dump_stack+0x107/0x167 [ 1642.199088] should_fail.cold+0x5/0xa [ 1642.199550] ? ext4_find_extent+0xa3d/0xd30 [ 1642.200074] should_failslab+0x5/0x20 [ 1642.200535] __kmalloc+0x72/0x390 [ 1642.200962] ext4_find_extent+0xa3d/0xd30 [ 1642.201474] ? kfree+0xd7/0x340 [ 1642.201887] ext4_ext_map_blocks+0x1c8/0x5830 [ 1642.202448] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1642.203080] ? SOFTIRQ_verbose+0x10/0x10 [ 1642.203568] ? perf_trace_lock+0xac/0x490 [ 1642.204065] ? SOFTIRQ_verbose+0x10/0x10 [ 1642.204567] ? ext4_ext_release+0x10/0x10 [ 1642.205076] ? ext4_map_blocks+0x5cd/0x1910 [ 1642.205611] ? lock_release+0x680/0x680 [ 1642.206092] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 1642.206662] ? find_held_lock+0x2c/0x110 [ 1642.207169] ? down_write+0xe0/0x160 [ 1642.207625] ? down_write_killable+0x180/0x180 [ 1642.208182] ext4_map_blocks+0x63f/0x1910 [ 1642.208698] ? kmem_cache_alloc+0x2a6/0x310 [ 1642.209215] ? __kernel_text_address+0x9/0x40 [ 1642.209770] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1642.210303] ? jbd2__journal_start+0xf3/0x7e0 [ 1642.210845] ? __ext4_journal_start_sb+0x214/0x390 [ 1642.211420] ? __ext4_journal_start_sb+0x1db/0x390 [ 1642.212003] ext4_iomap_begin+0x3ad/0x700 [ 1642.212508] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1642.213093] ? kasan_save_stack+0x1b/0x40 [ 1642.213632] ? ext4_file_write_iter+0xb26/0x18d0 [ 1642.214246] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 1642.215057] ? splice_direct_to_actor+0x387/0x980 [ 1642.215679] ? do_splice_direct+0x1c4/0x290 [ 1642.216232] ? do_sendfile+0x553/0x11e0 [ 1642.216744] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1642.217338] ? do_syscall_64+0x33/0x40 [ 1642.217809] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.218502] iomap_apply+0x164/0x810 [ 1642.218986] ? iomap_dio_rw+0x90/0x90 [ 1642.219490] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1642.220234] ? mark_held_locks+0x9e/0xe0 [ 1642.220770] ? filemap_check_errors+0xa5/0x150 [ 1642.221366] __iomap_dio_rw+0x6cd/0x1110 [ 1642.221853] ? iomap_dio_rw+0x90/0x90 [ 1642.222330] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1642.222915] ? ext4_orphan_add+0x253/0x9e0 [ 1642.223418] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1642.224052] ? ext4_empty_dir+0xae0/0xae0 [ 1642.224572] ? jbd2__journal_start+0xf3/0x7e0 [ 1642.225153] iomap_dio_rw+0x31/0x90 [ 1642.225629] ext4_file_write_iter+0xb26/0x18d0 [ 1642.226236] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1642.226826] ? kasan_save_stack+0x32/0x40 [ 1642.227359] ? kasan_save_stack+0x1b/0x40 [ 1642.227891] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1642.228529] ? iter_file_splice_write+0x16d/0xc30 [ 1642.229134] ? direct_splice_actor+0x10f/0x170 [ 1642.229716] ? splice_direct_to_actor+0x387/0x980 [ 1642.230307] ? do_splice_direct+0x1c4/0x290 [ 1642.230866] ? do_sendfile+0x553/0x11e0 [ 1642.231371] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1642.231955] ? do_syscall_64+0x33/0x40 [ 1642.232446] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.233127] do_iter_readv_writev+0x476/0x750 [ 1642.233711] ? new_sync_write+0x660/0x660 [ 1642.234239] ? avc_policy_seqno+0x9/0x70 [ 1642.234754] ? selinux_file_permission+0x92/0x520 [ 1642.235373] ? security_file_permission+0xb1/0xe0 [ 1642.235978] do_iter_write+0x191/0x700 [ 1642.236480] ? trace_hardirqs_on+0x5b/0x180 [ 1642.237036] vfs_iter_write+0x70/0xa0 [ 1642.237532] iter_file_splice_write+0x762/0xc30 [ 1642.238139] ? generic_splice_sendpage+0x140/0x140 [ 1642.238787] ? security_file_permission+0xb1/0xe0 [ 1642.239404] ? generic_splice_sendpage+0x140/0x140 [ 1642.240028] direct_splice_actor+0x10f/0x170 [ 1642.240591] splice_direct_to_actor+0x387/0x980 [ 1642.241186] ? pipe_to_sendpage+0x380/0x380 [ 1642.241739] ? do_splice_to+0x160/0x160 [ 1642.242247] ? security_file_permission+0xb1/0xe0 [ 1642.242872] do_splice_direct+0x1c4/0x290 [ 1642.243401] ? splice_direct_to_actor+0x980/0x980 [ 1642.244009] ? avc_policy_seqno+0x9/0x70 [ 1642.244537] ? security_file_permission+0xb1/0xe0 [ 1642.245156] do_sendfile+0x553/0x11e0 [ 1642.245663] ? do_pwritev+0x270/0x270 [ 1642.246155] ? wait_for_completion_io+0x270/0x270 [ 1642.246774] ? rcu_read_lock_any_held+0x75/0xa0 [ 1642.247354] ? vfs_write+0x354/0xb10 [ 1642.247830] __x64_sys_sendfile64+0x1d1/0x210 [ 1642.248396] ? __ia32_sys_sendfile+0x220/0x220 [ 1642.248988] do_syscall_64+0x33/0x40 [ 1642.249463] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.250086] RIP: 0033:0x7fe5e9dcbb19 [ 1642.250557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1642.252822] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1642.253782] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1642.254669] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1642.255559] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1642.256446] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1642.257334] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:33:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x541d, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1642.281316] EXT4-fs (loop6): bad geometry: block count 256 exceeds size of device (11 blocks) 14:33:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x541e, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:33:51 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40005, 0x5}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x2800, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITE={0x17, 0x5, 0x2007, @fd_index=0x6, 0xe30, &(0x7f00000001c0)="f0fb06ad25e6a99d197a24e682ddb5ae989f8538a9f29e7211f3e7d99813ebb570ebfa7d8d42bb9aa5620b5722b598001a35021ada825435a0bb1ce1", 0x3c, 0x8}, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) syz_io_uring_complete(0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x2501, 0x8) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000280)={0x16f, 0xb, &(0x7f0000000340)}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) close(0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) fallocate(r4, 0x20, 0x0, 0x8000) sendfile(r0, r1, 0x0, 0x20d315) 14:33:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240), 0x0) sendfile(r0, r1, 0x0, 0x20d314) [ 1642.397054] ISOFS: Logical zone size(0) < hardware blocksize(1024) 14:33:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:33:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:33:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x541e, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:33:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240), 0x0) sendfile(r0, r1, 0x0, 0x20d314) 14:33:51 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:33:51 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r0, &(0x7f00000008c0)='./file1\x00', 0x208200, 0x42) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x122902, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs\x00') openat(r5, &(0x7f0000000380)='./file1\x00', 0x101002, 0x0) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000180)="647732419e007299a0527d51dc496437e692665510d40d35b770fd8d702d121d997dc90d08763cc1ed88ba0f538cb17d600a", 0x32}], 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 14:33:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5421, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:33:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:33:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240), 0x0) sendfile(r0, r1, 0x0, 0x20d314) [ 1642.630418] SELinux: duplicate or incompatible mount options 14:33:51 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x18401) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1) getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8) syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') getdents64(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) lseek(r1, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32]) unshare(0x48020200) r3 = inotify_init1(0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000001e00)={{r3}, "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"}) [ 1642.652503] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. 14:33:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5422, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:33:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 20) 14:33:51 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:33:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:33:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x20d314) [ 1642.749472] FAULT_INJECTION: forcing a failure. [ 1642.749472] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.751092] CPU: 0 PID: 10296 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1642.752026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1642.753127] Call Trace: [ 1642.753501] dump_stack+0x107/0x167 [ 1642.754005] should_fail.cold+0x5/0xa [ 1642.754532] ? __es_insert_extent+0xed1/0x1370 [ 1642.755156] should_failslab+0x5/0x20 [ 1642.755690] kmem_cache_alloc+0x5b/0x310 [ 1642.756260] __es_insert_extent+0xed1/0x1370 [ 1642.756868] ? do_raw_read_unlock+0x70/0x70 [ 1642.757478] ? perf_trace_lock+0xac/0x490 [ 1642.758083] ext4_es_insert_extent+0x45d/0xf10 [ 1642.758708] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1642.759289] ? ext4_es_find_extent_range+0x13b/0x3b0 [ 1642.759962] ? lock_downgrade+0x6d0/0x6d0 [ 1642.760533] ? __ext4_handle_dirty_super+0x100/0x100 [ 1642.761215] ? __es_find_extent_range+0x197/0x4b0 [ 1642.761877] ? do_raw_read_unlock+0x3b/0x70 [ 1642.762463] ext4_ext_map_blocks+0x1863/0x5830 [ 1642.763088] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1642.763820] ? SOFTIRQ_verbose+0x10/0x10 [ 1642.764371] ? perf_trace_lock+0xac/0x490 [ 1642.764929] ? SOFTIRQ_verbose+0x10/0x10 [ 1642.765500] ? ext4_ext_release+0x10/0x10 [ 1642.766094] ? lock_release+0x680/0x680 [ 1642.766644] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 1642.767282] ? lock_downgrade+0x6d0/0x6d0 [ 1642.767858] ? down_read+0x10f/0x430 [ 1642.768360] ? down_write+0x160/0x160 [ 1642.768872] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 1642.769519] ext4_map_blocks+0x8e1/0x1910 [ 1642.770087] ? kmem_cache_alloc+0x2a6/0x310 [ 1642.770665] ? __kernel_text_address+0x9/0x40 [ 1642.771266] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1642.771870] ? jbd2__journal_start+0xf3/0x7e0 [ 1642.772472] ? __ext4_journal_start_sb+0x214/0x390 [ 1642.773127] ? __ext4_journal_start_sb+0x1db/0x390 [ 1642.773799] ext4_iomap_begin+0x3ad/0x700 14:33:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5423, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1642.774488] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1642.775188] ? kasan_save_stack+0x1b/0x40 [ 1642.775765] ? ext4_file_write_iter+0xb26/0x18d0 [ 1642.776435] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 1642.777321] ? splice_direct_to_actor+0x387/0x980 [ 1642.778006] ? do_splice_direct+0x1c4/0x290 [ 1642.778614] ? do_sendfile+0x553/0x11e0 [ 1642.779173] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1642.779815] ? do_syscall_64+0x33/0x40 [ 1642.780362] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.781119] iomap_apply+0x164/0x810 [ 1642.781657] ? iomap_dio_rw+0x90/0x90 [ 1642.782195] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1642.783012] ? mark_held_locks+0x9e/0xe0 [ 1642.783598] ? filemap_check_errors+0xa5/0x150 [ 1642.784239] __iomap_dio_rw+0x6cd/0x1110 [ 1642.784815] ? iomap_dio_rw+0x90/0x90 [ 1642.785378] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1642.786019] ? ext4_orphan_add+0x253/0x9e0 [ 1642.786606] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1642.787286] ? ext4_empty_dir+0xae0/0xae0 [ 1642.787860] ? jbd2__journal_start+0xf3/0x7e0 [ 1642.788514] iomap_dio_rw+0x31/0x90 [ 1642.789044] ext4_file_write_iter+0xb26/0x18d0 [ 1642.789720] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1642.790363] ? kasan_save_stack+0x32/0x40 [ 1642.790952] ? kasan_save_stack+0x1b/0x40 [ 1642.791543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1642.792268] ? iter_file_splice_write+0x16d/0xc30 [ 1642.792962] ? direct_splice_actor+0x10f/0x170 [ 1642.793627] ? splice_direct_to_actor+0x387/0x980 [ 1642.794320] ? do_splice_direct+0x1c4/0x290 [ 1642.794929] ? do_sendfile+0x553/0x11e0 [ 1642.795505] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1642.796141] ? do_syscall_64+0x33/0x40 [ 1642.796707] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.797491] do_iter_readv_writev+0x476/0x750 [ 1642.798114] ? new_sync_write+0x660/0x660 [ 1642.798708] ? avc_policy_seqno+0x9/0x70 [ 1642.799287] ? selinux_file_permission+0x92/0x520 [ 1642.799985] ? security_file_permission+0xb1/0xe0 14:33:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1642.800683] do_iter_write+0x191/0x700 [ 1642.801298] ? trace_hardirqs_on+0x5b/0x180 [ 1642.801939] vfs_iter_write+0x70/0xa0 [ 1642.802447] iter_file_splice_write+0x762/0xc30 [ 1642.803141] ? generic_splice_sendpage+0x140/0x140 [ 1642.803822] ? security_file_permission+0xb1/0xe0 [ 1642.804513] ? generic_splice_sendpage+0x140/0x140 [ 1642.805162] direct_splice_actor+0x10f/0x170 [ 1642.805814] splice_direct_to_actor+0x387/0x980 [ 1642.806433] ? pipe_to_sendpage+0x380/0x380 [ 1642.807063] ? do_splice_to+0x160/0x160 [ 1642.807597] ? security_file_permission+0xb1/0xe0 [ 1642.808301] do_splice_direct+0x1c4/0x290 [ 1642.808857] ? splice_direct_to_actor+0x980/0x980 [ 1642.809540] ? avc_policy_seqno+0x9/0x70 [ 1642.810089] ? security_file_permission+0xb1/0xe0 [ 1642.810754] do_sendfile+0x553/0x11e0 [ 1642.811275] ? do_pwritev+0x270/0x270 [ 1642.811799] ? wait_for_completion_io+0x270/0x270 [ 1642.812438] ? rcu_read_lock_any_held+0x75/0xa0 [ 1642.813063] ? vfs_write+0x354/0xb10 [ 1642.813568] __x64_sys_sendfile64+0x1d1/0x210 [ 1642.814186] ? __ia32_sys_sendfile+0x220/0x220 [ 1642.814799] do_syscall_64+0x33/0x40 [ 1642.815309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1642.815969] RIP: 0033:0x7fe5e9dcbb19 [ 1642.816486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1642.818841] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1642.819870] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1642.820788] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1642.821764] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1642.822679] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1642.823638] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1642.839714] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1642.857630] SELinux: duplicate or incompatible mount options [ 1642.871805] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1642.873400] EXT4-fs (loop6): get root inode failed [ 1642.873823] EXT4-fs (loop6): mount failed 14:34:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x13}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:34:06 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800"/120, 0x78, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:34:06 executing program 7: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0]) syz_open_dev$vcsn(&(0x7f0000000480), 0x3, 0x100) getdents64(0xffffffffffffffff, &(0x7f00000005c0)=""/27, 0x1b) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000480), 0x0, 0x4000, &(0x7f00000004c0)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) io_setup(0x6, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[0x0]) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2404c000) r4 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1000, 0x10200) openat(r4, &(0x7f0000000440)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) statx(r1, &(0x7f0000000140)='./file0/file0\x00', 0x2000, 0x20, &(0x7f0000000340)) 14:34:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x30}, 0x0, 0x20000040}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1d}, 0x80000001) r4 = socket$inet(0x2, 0x1, 0x0) dup3(r4, r3, 0x0) io_uring_enter(r0, 0x3491, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) 14:34:06 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:34:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x20d314) 14:34:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 21) 14:34:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5424, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1657.784804] FAULT_INJECTION: forcing a failure. [ 1657.784804] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.786733] CPU: 0 PID: 10339 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1657.787886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1657.789107] Call Trace: [ 1657.789515] dump_stack+0x107/0x167 [ 1657.790067] should_fail.cold+0x5/0xa [ 1657.790649] ? ext4_mb_new_blocks+0x698/0x45c0 [ 1657.791343] should_failslab+0x5/0x20 [ 1657.791915] kmem_cache_alloc+0x5b/0x310 [ 1657.792532] ext4_mb_new_blocks+0x698/0x45c0 [ 1657.793206] ? trace_hardirqs_on+0x5b/0x180 [ 1657.793868] ? kasan_unpoison_shadow+0x33/0x50 [ 1657.794554] ? ext4_cache_extents+0x68/0x2d0 [ 1657.795213] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1657.795962] ? ext4_discard_preallocations+0xd80/0xd80 [ 1657.796739] ? ext4_ext_search_right+0x2e3/0xbd0 [ 1657.797442] ? ext4_inode_to_goal_block+0x320/0x430 [ 1657.798200] ext4_ext_map_blocks+0x1d49/0x5830 [ 1657.798899] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1657.799676] ? SOFTIRQ_verbose+0x10/0x10 [ 1657.800280] ? perf_trace_lock+0xac/0x490 [ 1657.800901] ? SOFTIRQ_verbose+0x10/0x10 [ 1657.801519] ? ext4_ext_release+0x10/0x10 [ 1657.802151] ? ext4_map_blocks+0x5cd/0x1910 [ 1657.802799] ? lock_release+0x680/0x680 [ 1657.803395] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 1657.804100] ? find_held_lock+0x2c/0x110 [ 1657.804728] ? down_write_killable+0x180/0x180 [ 1657.805424] ext4_map_blocks+0x63f/0x1910 [ 1657.806059] ? kmem_cache_alloc+0x2a6/0x310 [ 1657.806699] ? __kernel_text_address+0x9/0x40 [ 1657.807368] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1657.808036] ? jbd2__journal_start+0xf3/0x7e0 [ 1657.808718] ? __ext4_journal_start_sb+0x214/0x390 [ 1657.809448] ? __ext4_journal_start_sb+0x1db/0x390 [ 1657.810195] ext4_iomap_begin+0x3ad/0x700 [ 1657.810830] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1657.811560] ? kasan_save_stack+0x1b/0x40 [ 1657.812180] ? ext4_file_write_iter+0xb26/0x18d0 [ 1657.812889] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 1657.813842] ? splice_direct_to_actor+0x387/0x980 [ 1657.814561] ? do_splice_direct+0x1c4/0x290 [ 1657.815204] ? do_sendfile+0x553/0x11e0 [ 1657.815798] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1657.816487] ? do_syscall_64+0x33/0x40 [ 1657.817066] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1657.817878] iomap_apply+0x164/0x810 [ 1657.818439] ? iomap_dio_rw+0x90/0x90 [ 1657.819011] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1657.819880] ? mark_held_locks+0x9e/0xe0 [ 1657.820507] ? filemap_check_errors+0xa5/0x150 [ 1657.821194] __iomap_dio_rw+0x6cd/0x1110 [ 1657.821808] ? iomap_dio_rw+0x90/0x90 [ 1657.822403] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1657.823081] ? ext4_orphan_add+0x253/0x9e0 [ 1657.823712] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1657.824460] ? ext4_empty_dir+0xae0/0xae0 [ 1657.825075] ? jbd2__journal_start+0xf3/0x7e0 [ 1657.825767] iomap_dio_rw+0x31/0x90 [ 1657.826319] ext4_file_write_iter+0xb26/0x18d0 [ 1657.827019] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1657.827697] ? kasan_save_stack+0x32/0x40 [ 1657.828316] ? kasan_save_stack+0x1b/0x40 [ 1657.828931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1657.829695] ? iter_file_splice_write+0x16d/0xc30 [ 1657.830411] ? direct_splice_actor+0x10f/0x170 [ 1657.831092] ? splice_direct_to_actor+0x387/0x980 [ 1657.831804] ? do_splice_direct+0x1c4/0x290 [ 1657.832449] ? do_sendfile+0x553/0x11e0 [ 1657.833047] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1657.833750] ? do_syscall_64+0x33/0x40 [ 1657.834340] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1657.835150] do_iter_readv_writev+0x476/0x750 [ 1657.835826] ? new_sync_write+0x660/0x660 [ 1657.836446] ? avc_policy_seqno+0x9/0x70 [ 1657.837058] ? selinux_file_permission+0x92/0x520 [ 1657.837806] ? security_file_permission+0xb1/0xe0 [ 1657.838537] do_iter_write+0x191/0x700 [ 1657.839123] ? trace_hardirqs_on+0x5b/0x180 [ 1657.839778] vfs_iter_write+0x70/0xa0 [ 1657.840354] iter_file_splice_write+0x762/0xc30 [ 1657.841072] ? generic_splice_sendpage+0x140/0x140 [ 1657.841842] ? security_file_permission+0xb1/0xe0 [ 1657.842569] ? generic_splice_sendpage+0x140/0x140 [ 1657.843307] direct_splice_actor+0x10f/0x170 [ 1657.843969] splice_direct_to_actor+0x387/0x980 [ 1657.844677] ? pipe_to_sendpage+0x380/0x380 [ 1657.845334] ? do_splice_to+0x160/0x160 [ 1657.845944] ? security_file_permission+0xb1/0xe0 [ 1657.846674] do_splice_direct+0x1c4/0x290 [ 1657.847293] ? splice_direct_to_actor+0x980/0x980 [ 1657.848009] ? avc_policy_seqno+0x9/0x70 [ 1657.848628] ? security_file_permission+0xb1/0xe0 [ 1657.849359] do_sendfile+0x553/0x11e0 [ 1657.849952] ? do_pwritev+0x270/0x270 [ 1657.850527] ? wait_for_completion_io+0x270/0x270 [ 1657.851246] ? rcu_read_lock_any_held+0x75/0xa0 [ 1657.851946] ? vfs_write+0x354/0xb10 [ 1657.852500] __x64_sys_sendfile64+0x1d1/0x210 [ 1657.853176] ? __ia32_sys_sendfile+0x220/0x220 [ 1657.853869] do_syscall_64+0x33/0x40 [ 1657.854426] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1657.855173] RIP: 0033:0x7fe5e9dcbb19 [ 1657.855732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.858387] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1657.859537] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1657.860572] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1657.861634] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.862685] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1657.863742] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1657.866595] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1657.881676] EXT4-fs (loop6): get root inode failed [ 1657.882456] EXT4-fs (loop6): mount failed 14:34:06 executing program 7: prctl$PR_SET_SECUREBITS(0x1c, 0x4) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg$unix(r0, &(0x7f0000000540)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/107, 0x6b}], 0x1}}, {{&(0x7f00000001c0), 0x6e, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/143, 0x8f}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/98, 0x62}], 0x3, &(0x7f00000004c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x68}}], 0x2, 0x40010021, &(0x7f00000005c0)) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@getpolicy={0x50, 0x15, 0x300, 0x70bd28, 0x25dfdbfb, {{@in=@local, @in6=@loopback, 0x4e23, 0x952, 0x4e22, 0x0, 0x8, 0x20, 0xc0, 0x62, 0x0, r3}}}, 0x50}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x5) r4 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r4, 0x76d3, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = accept4$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10, 0x80000) dup2(r5, r6) close_range(r4, 0xffffffffffffffff, 0x2) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r7, 0x29, 0x3b, 0x0, 0x0) fallocate(r7, 0x20, 0x9, 0x7) dup2(0xffffffffffffffff, 0xffffffffffffffff) 14:34:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x20d314) 14:34:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20d314) 14:34:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5425, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1657.984672] ISOFS: Logical zone size(0) < hardware blocksize(1024) 14:34:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20d314) 14:34:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 22) 14:34:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:34:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 1658.098178] FAULT_INJECTION: forcing a failure. [ 1658.098178] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.099606] CPU: 1 PID: 10360 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1658.100370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.101271] Call Trace: [ 1658.101573] dump_stack+0x107/0x167 [ 1658.101992] should_fail.cold+0x5/0xa [ 1658.102425] ? create_object.isra.0+0x3a/0xa20 [ 1658.102928] should_failslab+0x5/0x20 [ 1658.103348] kmem_cache_alloc+0x5b/0x310 [ 1658.103806] create_object.isra.0+0x3a/0xa20 [ 1658.104287] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1658.104853] kmem_cache_alloc+0x159/0x310 [ 1658.105322] ext4_mb_new_blocks+0x698/0x45c0 [ 1658.105827] ? trace_hardirqs_on+0x5b/0x180 [ 1658.106304] ? kasan_unpoison_shadow+0x33/0x50 [ 1658.106808] ? ext4_cache_extents+0x68/0x2d0 [ 1658.107293] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1658.107847] ? ext4_discard_preallocations+0xd80/0xd80 [ 1658.108417] ? ext4_ext_search_right+0x2e3/0xbd0 [ 1658.108940] ? ext4_inode_to_goal_block+0x320/0x430 [ 1658.109497] ext4_ext_map_blocks+0x1d49/0x5830 [ 1658.110022] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1658.110600] ? SOFTIRQ_verbose+0x10/0x10 [ 1658.111046] ? perf_trace_lock+0xac/0x490 [ 1658.111495] ? SOFTIRQ_verbose+0x10/0x10 [ 1658.111940] ? ext4_ext_release+0x10/0x10 [ 1658.112398] ? ext4_map_blocks+0x5cd/0x1910 [ 1658.112865] ? lock_release+0x680/0x680 [ 1658.113296] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 1658.113819] ? find_held_lock+0x2c/0x110 [ 1658.114281] ? down_write_killable+0x180/0x180 [ 1658.114793] ext4_map_blocks+0x63f/0x1910 [ 1658.115256] ? kmem_cache_alloc+0x2a6/0x310 [ 1658.115723] ? __kernel_text_address+0x9/0x40 [ 1658.116218] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1658.116710] ? jbd2__journal_start+0xf3/0x7e0 [ 1658.117207] ? __ext4_journal_start_sb+0x214/0x390 [ 1658.117741] ? __ext4_journal_start_sb+0x1db/0x390 [ 1658.118280] ext4_iomap_begin+0x3ad/0x700 [ 1658.118741] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1658.119273] ? kasan_save_stack+0x1b/0x40 [ 1658.119721] ? ext4_file_write_iter+0xb26/0x18d0 [ 1658.120239] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 1658.120926] ? splice_direct_to_actor+0x387/0x980 [ 1658.121449] ? do_splice_direct+0x1c4/0x290 [ 1658.121927] ? do_sendfile+0x553/0x11e0 [ 1658.122352] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1658.122850] ? do_syscall_64+0x33/0x40 [ 1658.123277] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1658.123863] iomap_apply+0x164/0x810 [ 1658.124261] ? iomap_dio_rw+0x90/0x90 [ 1658.124670] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1658.125296] ? mark_held_locks+0x9e/0xe0 [ 1658.125760] ? filemap_check_errors+0xa5/0x150 [ 1658.126251] __iomap_dio_rw+0x6cd/0x1110 [ 1658.126682] ? iomap_dio_rw+0x90/0x90 [ 1658.127112] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1658.127608] ? ext4_orphan_add+0x253/0x9e0 [ 1658.128056] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1658.128581] ? ext4_empty_dir+0xae0/0xae0 [ 1658.129022] ? jbd2__journal_start+0xf3/0x7e0 [ 1658.129510] iomap_dio_rw+0x31/0x90 [ 1658.129920] ext4_file_write_iter+0xb26/0x18d0 [ 1658.130422] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1658.130909] ? kasan_save_stack+0x32/0x40 [ 1658.131352] ? kasan_save_stack+0x1b/0x40 [ 1658.131795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1658.132329] ? iter_file_splice_write+0x16d/0xc30 [ 1658.132844] ? direct_splice_actor+0x10f/0x170 [ 1658.133323] ? splice_direct_to_actor+0x387/0x980 [ 1658.133856] ? do_splice_direct+0x1c4/0x290 [ 1658.134321] ? do_sendfile+0x553/0x11e0 [ 1658.134744] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1658.135242] ? do_syscall_64+0x33/0x40 [ 1658.135660] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1658.136234] do_iter_readv_writev+0x476/0x750 [ 1658.136713] ? new_sync_write+0x660/0x660 [ 1658.137159] ? avc_policy_seqno+0x9/0x70 [ 1658.137596] ? selinux_file_permission+0x92/0x520 [ 1658.138123] ? security_file_permission+0xb1/0xe0 [ 1658.138648] do_iter_write+0x191/0x700 [ 1658.139067] ? trace_hardirqs_on+0x5b/0x180 [ 1658.139536] vfs_iter_write+0x70/0xa0 [ 1658.139945] iter_file_splice_write+0x762/0xc30 [ 1658.140456] ? generic_splice_sendpage+0x140/0x140 [ 1658.141004] ? security_file_permission+0xb1/0xe0 [ 1658.141522] ? generic_splice_sendpage+0x140/0x140 [ 1658.142046] direct_splice_actor+0x10f/0x170 [ 1658.142519] splice_direct_to_actor+0x387/0x980 [ 1658.143022] ? pipe_to_sendpage+0x380/0x380 [ 1658.143484] ? do_splice_to+0x160/0x160 [ 1658.143910] ? security_file_permission+0xb1/0xe0 [ 1658.144433] do_splice_direct+0x1c4/0x290 [ 1658.144877] ? splice_direct_to_actor+0x980/0x980 [ 1658.145382] ? avc_policy_seqno+0x9/0x70 [ 1658.145831] ? security_file_permission+0xb1/0xe0 [ 1658.146356] do_sendfile+0x553/0x11e0 [ 1658.146783] ? do_pwritev+0x270/0x270 [ 1658.147191] ? wait_for_completion_io+0x270/0x270 [ 1658.147710] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.148198] ? vfs_write+0x354/0xb10 [ 1658.148601] __x64_sys_sendfile64+0x1d1/0x210 [ 1658.149079] ? __ia32_sys_sendfile+0x220/0x220 [ 1658.149578] do_syscall_64+0x33/0x40 [ 1658.149980] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1658.150533] RIP: 0033:0x7fe5e9dcbb19 [ 1658.150930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.152870] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1658.153686] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1658.154452] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1658.155201] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.155939] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1658.156681] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:34:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800"/120, 0x78, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) [ 1673.850298] FAULT_INJECTION: forcing a failure. [ 1673.850298] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.851549] CPU: 0 PID: 10382 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1673.852220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1673.852889] Call Trace: [ 1673.853112] dump_stack+0x107/0x167 [ 1673.853417] should_fail.cold+0x5/0xa [ 1673.853734] ? __es_insert_extent+0xed1/0x1370 [ 1673.854120] should_failslab+0x5/0x20 [ 1673.854445] kmem_cache_alloc+0x5b/0x310 [ 1673.854858] __es_insert_extent+0xed1/0x1370 [ 1673.855237] ext4_es_insert_extent+0x45d/0xf10 [ 1673.855632] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1673.855990] ? down_write_killable+0x180/0x180 [ 1673.856388] ext4_map_blocks+0x80b/0x1910 [ 1673.856748] ? __kernel_text_address+0x9/0x40 [ 1673.857126] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1673.857506] ? jbd2__journal_start+0xf3/0x7e0 [ 1673.857885] ? __ext4_journal_start_sb+0x214/0x390 [ 1673.858282] ? __ext4_journal_start_sb+0x1db/0x390 [ 1673.858691] ext4_iomap_begin+0x3ad/0x700 [ 1673.859037] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1673.859448] ? kasan_save_stack+0x1b/0x40 [ 1673.859787] ? ext4_file_write_iter+0xb26/0x18d0 [ 1673.860174] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 1673.860695] ? splice_direct_to_actor+0x387/0x980 [ 1673.861080] ? do_splice_direct+0x1c4/0x290 [ 1673.861444] ? do_sendfile+0x553/0x11e0 [ 1673.861766] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1673.862146] ? do_syscall_64+0x33/0x40 [ 1673.862475] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1673.862913] iomap_apply+0x164/0x810 [ 1673.863219] ? iomap_dio_rw+0x90/0x90 [ 1673.863541] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1673.864015] ? mark_held_locks+0x9e/0xe0 [ 1673.864358] ? filemap_check_errors+0xa5/0x150 [ 1673.864741] __iomap_dio_rw+0x6cd/0x1110 [ 1673.865073] ? iomap_dio_rw+0x90/0x90 [ 1673.865405] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1673.865790] ? ext4_orphan_add+0x253/0x9e0 [ 1673.866138] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1673.866554] ? ext4_empty_dir+0xae0/0xae0 [ 1673.866890] ? jbd2__journal_start+0xf3/0x7e0 [ 1673.867261] iomap_dio_rw+0x31/0x90 [ 1673.867570] ext4_file_write_iter+0xb26/0x18d0 [ 1673.867994] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1673.868377] ? kasan_save_stack+0x32/0x40 [ 1673.868730] ? kasan_save_stack+0x1b/0x40 [ 1673.869070] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1673.869493] ? iter_file_splice_write+0x16d/0xc30 [ 1673.869890] ? direct_splice_actor+0x10f/0x170 [ 1673.870262] ? splice_direct_to_actor+0x387/0x980 [ 1673.870664] ? do_splice_direct+0x1c4/0x290 [ 1673.871017] ? do_sendfile+0x553/0x11e0 [ 1673.871340] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1673.871722] ? do_syscall_64+0x33/0x40 [ 1673.872040] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1673.872485] do_iter_readv_writev+0x476/0x750 [ 1673.872853] ? new_sync_write+0x660/0x660 [ 1673.873196] ? avc_policy_seqno+0x9/0x70 [ 1673.873534] ? selinux_file_permission+0x92/0x520 [ 1673.873943] ? security_file_permission+0xb1/0xe0 [ 1673.874340] do_iter_write+0x191/0x700 [ 1673.874675] ? trace_hardirqs_on+0x5b/0x180 [ 1673.875032] vfs_iter_write+0x70/0xa0 [ 1673.875345] iter_file_splice_write+0x762/0xc30 [ 1673.875755] ? generic_splice_sendpage+0x140/0x140 [ 1673.876169] ? security_file_permission+0xb1/0xe0 [ 1673.876570] ? generic_splice_sendpage+0x140/0x140 [ 1673.876971] direct_splice_actor+0x10f/0x170 [ 1673.877331] splice_direct_to_actor+0x387/0x980 [ 1673.877721] ? pipe_to_sendpage+0x380/0x380 [ 1673.878082] ? do_splice_to+0x160/0x160 [ 1673.878422] ? security_file_permission+0xb1/0xe0 [ 1673.878824] do_splice_direct+0x1c4/0x290 [ 1673.879164] ? splice_direct_to_actor+0x980/0x980 [ 1673.879563] ? avc_policy_seqno+0x9/0x70 [ 1673.879900] ? security_file_permission+0xb1/0xe0 [ 1673.880302] do_sendfile+0x553/0x11e0 [ 1673.880630] ? do_pwritev+0x270/0x270 [ 1673.880944] ? wait_for_completion_io+0x270/0x270 [ 1673.881341] ? rcu_read_lock_any_held+0x75/0xa0 [ 1673.881723] ? vfs_write+0x354/0xb10 [ 1673.882041] __x64_sys_sendfile64+0x1d1/0x210 [ 1673.882423] ? __ia32_sys_sendfile+0x220/0x220 [ 1673.882805] do_syscall_64+0x33/0x40 [ 1673.883107] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1673.883530] RIP: 0033:0x7fe5e9dcbb19 [ 1673.883839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1673.885306] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1673.885936] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1673.886529] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1673.887102] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1673.887682] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1673.888257] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:34:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5427, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:34:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 23) 14:34:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20d314) 14:34:22 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r5 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x124}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_getfd(0xffffffffffffffff, r8, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x1, {0x0, r9}}, 0xfffeffff) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r10, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r10, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x6, 0x80000000, 0x0, 0x80}, 0x1f) 14:34:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {0x0, 0x0, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:34:22 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMRESET(r0, 0x5312) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x5327) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x802, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)=ANY=[@ANYBLOB="010000220100000018000000", @ANYRES32=r0, @ANYBLOB="ee0100000000100000076530000000000200f2c5a57f6d6faff0712374e8d68f911952a514d195c47de0e2e015732e6d800b"]) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0x7}, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x20, 0x0, 0x0) 14:34:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:34:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5428, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1673.934161] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1673.935868] EXT4-fs (loop6): get root inode failed [ 1673.936404] EXT4-fs (loop6): mount failed 14:34:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x0) [ 1673.978317] ISOFS: Logical zone size(0) < hardware blocksize(1024) 14:34:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {0x0, 0x0, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:34:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5429, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1674.117659] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1674.120658] EXT4-fs (loop6): get root inode failed [ 1674.121574] EXT4-fs (loop6): mount failed 14:34:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 24) 14:34:38 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f00000001c0)=0x1) setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000180), 0x804, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,nodevmap,fscontext=system_u,euid=', @ANYRESDEC, @ANYBLOB="17657569643d", @ANYRESDEC=0xee01, @ANYBLOB=',euid>', @ANYRESOCT=r1, @ANYBLOB=',seclabel,dont_measure,subj_user=,\x00']) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001380)={{r3}, "5107e757e146d5b33272e26ff51797c6cd1a0af398dfbf725f15a74f8f79e33679d482ee3ba3c6eb568b0455db0471346da1bb502a0560a828f6b51c30cf394c14879a79202798e1e132695c26a3f5b76454aa2b7388103ec32c74a137850b29e9ca14777f9f8e0d244a5f2fa8c6e420bc3a122237d6b77f4bc35f04ca1bbea8646a16043e6b608d8a266d673e12e5680e49d68699f952ba31df15e7fa30c022896b45139b2358c5dc40ef180f165a5eff1d703cf9a2bca9db751655da2ce71d965067399942c7348cee2e00657c4fe3b25b7f8fe4121bcd5b769405048b2e119b281e0e1ba0f2b8ac9b7f4e073fc7178a38b28a0d548e437789f789e80999297578e872d32712285cd442663317a07c68732a96182584fa892570dc1a4739b982f5e5366b7ab4872eb4db91723aeb4f719ffd40bfe12c2837d6b63a2fe601dcb911ab37ab4ef6bbcc51fb24e48799620ca3ea06551631f540fe21aa7ebf754eb1d5ce4f7f8546600130b9ac1a74d32d08083bcf335a39184f36d906ef511d0e4c6f1839dcb5d23cc10fcc0a7568b8f551b42cee9bee653d972776466a74a104b9a9354d5f5555f5676c50fbb251ee0b79ffd65dbef59f3460089fd4f48187ca1e88afb26d87c5070478145141073ef28d45b3cf48088e25ae0287853ebd496091387536c9f366e656b24e95f5d2c7b00bb794d35c33d2c49b6efe3793fa3eebe62472718e8d3f8c228cc3a9f5f39b2921f1e2ee4f119a4e6c6307123ceda3dc0640e5f2a1139ae4ed7e36a3bf8a74bcee5fb5a69041578a791351ac480fa369fe5d7eb57bea3f06dbec0cb39fd08c8acc31131cac6e1b757ebbd065c453aaea69f3facb4c2bca6367226e17c216864269bbc8662f3ff7a676a8804925feaa4c018bf77673f9458fa4548bb40b61858bb008c0423e3d5dfb32772bfddaaeb4cc7dec2e4c1633cf476f00839ce9602b055864d4a8d66f941822dc0e8880bd7bd7d58d7656fc4c02c37ebf37479bd8a2430531abe688250611cb637dde6cffb0a25ca34af23aa995184b1c69c698242557a968be0e2f1cad97c66b9948c5b5f4501c50ca30f6b4f8af058a860d4eed593e0956606c144a361a0239e19ed6dc10317a892b7b301746273c9b636d8e8cd1553785d0ca04bde1f65b82833b2eee9b0fe40c6dd04682fa0425f86259ec10272da1b0e88c090a2db790d276f5bc39fa0103b4a4e743be96784ac022037d65d0135e948a12f0d0265388d8ff885efccf09384ef233e1e3c7265a513af384114e1cecffccb758a0227d665a8fbb9a0d3d3e9c5b3f6c9134f8294d2e9b10857310c06f67f2836347290f4591ab025c5eaeddda27b3542e1dd09649dc8829fc53eb83e0105da9b0366552fa57c62798b8e7efb31d6a879c5a61c821976ef24624f401568992e6e0a0e62d40c162d43a3928df01deb51e648512150417664c99b3c06d4ff2ae892595e859b7a45f7a8fd5b877c7b808cef3d9523b93178a23a514cf9e772d587383be3cf529c420a12ad7ec638eadbc9abe6ba437a8a917790df69fa7c779dfca03194795722430f5532afc0d521422761a48964f43547c6be857631bf3e5a2f3f9de0d03db52d25ef12041d65344862b268bb513d1bf7bbe13d2b8bd68edf48275386d4039acfe8302277a4d796bb447a197a6fd69730d2e8b27970970af77ecdbadaa76e51d936063305e7ab469333eae2dab9132b3a96d18e2a11899a28de39426c3473eca25ae28a7a0ed0ed787d0a3f5c509a7850bd2881e4397f77360a8c4f95694404c9548a0fbf071ed84d6a819afe7562ec45e4c34663e8143d5868c8ef99e34f2139fe709148a96fbc648abd528596719efebfa533119bda9729e90f4faea1d9f10f5f72255b62c42c11f931c19d78811938ab8c6502f95cb4cbbecb66c036ba242f2dd2e0146bbf892a9d67ffcc84c20f9317ee3ac680564b38036c15163998825f25347f989dda51e60d30b3f054a9e3ebf60ebc276795c240e8be80781119655faaaadafe29ccad6bd3b056f3d93399c05ea932a551cfe61f8be51ce4e37d0e068c96885299abe1497baaa7125f436072111c53443bd0e3e7c230fd4803469313c0869e8ebd9668bd66ec65b4c1e9879bdaabf76c38decda8edf70c6732c643641a6e0c65de0f237e0f1ddbd22a3c2db5d1bbcb1bc60d9df0839f043bf2ce8d9c6baabe34318a8f72ab5a95e8fe8107a3d9c3bf4976ba75970f8e13a7b53bedf1784b33a21cddb13fa3aeb55c30bb50d023c1b17560db5d4a800330346174a7367c5f1ef2f3073816b2071c9810882098e8b90ef6f96aea71bcf6c685580f17f73c0549b242fbd6d817410138cf6b0134897671798010afd91e49148342e0ebfe0ea38d725042618beccf78c3e2abbadce07a04c56aa16aaa1c1554d05afb7699258148f37a83120d71206e81d918b4c4b5121cba11c8060089098b875004709651231060a9701956aa2afc4e852f3e4f04fdb21a654c65b0e4ba7349c86ca97fcc0d139c33cf8a122307617c3dd9f7165cdce77cfcd906a23bb9e883308c1563bc14b1a2c70c90c1eb7679bd4f2e09246df9c4cfbddbb36dabedc6da5ceb236296543dce1a6422e2913eea74422d9cab29fa2f7d219403bbcbe3442e903584a55a3370c8944928c7dc2b01a5974dba8bf9b2c30707306fa0df91a10fe741c22f197a01b856a5cf752f0f8c6cf6e70dc79c7f26e59cda25cfd756ffa312b07a50a6aed1e43dac32a91aefd68d045c19978a63a686df051e2047538faf7e16cad8bfd09e7084f3cc08020be1e9925a9e9e875057d959b5bb15699636a82a6b67d9f934aaba8473be03313d09e02143f066a51d5a77f66bb0f2052aa31d57fa8ee8e9dfebdbe702b849714bbe4c8d523cf8190ea2756c29ef05f74fec54e93bd073bcd53f7128de12725ce2dc47c6a0fe36701f58fd83aaf45302d8be8cf3e241c9ab0c88826626992a5a119298b3e4870e0e8dc0669ce81d10e9ad962d3a8581b71926500d7c451202d9a7c57e6acdeb6651155f36d62249ac66d056f47424ea2626b7f7049196a30b0b758a9f80eef59be2c8c38872cc3ccf0342b73198d4e87612d02133b34e19c97e9cb3206e6380ae12581442cf9ae6b2bc5b144801ab9295f6a956999e172bc03763eba037aebfa381bec787db7f65790ec88149e8ba51ca93d1129ad5208dd2667acef6132b9ff1507aae2acb345cdc5c55b04cd10d41ff1a328faaca67e79dc18dfe85b902c76f62fea5568d51bcc45ec61c194803fb528962022d087e27602665c1c56d9e009585d99f51492eeeab8bd86a2c5c37375f69907ff27d9cf19e8dff1743bc322146c75d26eddedbd77de4dd6b6b056d64530b222a0436170a30185b29d3f721abee93f0a35cd672f74dbcc22af5fa8031a77b12c8164366e42512e08da6228d49581ffb87b4d055045ef8c24fe78ab4518bf01086ddec95bede0dfdc6f95f35801270424d42d7b709d5bcb2bb5365f318eae19320a88be852b2ddbe00bb95cc378c58b9a06dc9fdb7fb51d863c2f1f9cdc92d93771e3d9ae494788b257830e671fe49bab6af750af06539561de1a69d8c4690226edbc6fded67bc22e2c4a8eaa4cc62b0b95ebfd8882ef1512d6cac83db774ff16f3a5a4959bed040afbe63d69282a2d14b5be2b39390f65d1dfc30d577f9ca308413c4f7322fd885c88b704cadec6cc418765e2e9f06c9211c7f3e3b1b1b26b3391df0972558c9a329e8cd32557d51bda7862e152cf18004a0131fd7a558c3d361cc3af8e544308909f196e8b6a1b6c4105bc147c9e6fdd16d81886456e454a87deddb697f5e609b6b03dc01b26019c08713c609b6988ba41af18ee0fc9938c04fb997e9c9e37d7221162151597a0030c9f6dac594c98324b274d07fe25e344fbe32047d08c370ec77f4b1e795b091e11be9ea7a69f7e73fbcce5d196c94ce6afe69fd8ec46f01fc868c55373baeaeb4752e76bdb099b2d07ae4703b80ab65b95a5765eba8bf82dd01651b5c276d3607893aa9cfb25887518a9868c5a12653c57c108c7095fa0bc5532117d0c6c874786b5f5811c38e7598d29998c24bc81efc7ed2ee45cc6084b7b6c58205aa7e09dc19b66fad6b841ed5bc61ecb884deef63daa0044585536751ca0db1106d3b325324bafb1994712caab56638de48204236c68de8b2d657d6052519b3b9bb1e318b865cc9b2e7642bcbf660613054cd9233c4bd3ac039dee3a57812232adf8099ec2d162c8f3786b598782ba652f8d49cc8571d6dbefab7aa10cad4f229d80249bc049e8708dbf195c0c3f2a9036395d128cf088fa94867e5ae291c03ed3bdcd70badd62107548121bd4fec8f6e121d31cf6d0116d9708e47c38c00a0a7c7d955161724452de70a97f6aff36ee92544f0bd25b6d59e643ad3bcd9bb8eeab3eae10a74e11b7ce5cf5029a6f9cea41766fad354325d35898fb1685d7b844d8eae78d85b3ebb6674bdb1b22453496d8cea7f790673ffb96c3bc4ce9420487f4b37b02abfbd6397e67bb0854dfae3291a376bb676f9a23d397d06e53635a2d6caa4e45abd24ac87c9af88e2846344cec4d1d16a9976f3ef0bb10745b4b392c6adb67b39c9e2d257c1b9d393c887e9c87393540bb8581f11c3781fcf8a1f045d04bfa8ad1418553795e88907925349591e2caac7a9dff806674c8cf0c490046b737d56583c85024631d41c009fa80d008674ad16c535bffaead1f352d3713de8e8125e0bc637d6ab9303b2fa386c8092f60c2913482ba15de157e70feb51db0499b7361ca710214f864b7a908b36d4eb7f7255ef74626fefebe7bbd6b5fc20fa42b62b6001caf00dcf4c503c4ccdb704e8f457d32fc11a5425f79ac3174fbf70cac2f1f8b3a033b211e39d4f570ce5f9a59efd2c4b4c3e0991e24103b655cbb9f18eafd715cf1b65cbbf05d97ecef7ee9ed991532d9b6a78e84e673fb80678ff4cdebdfb20f9245f632a86b3b7a17c17a59d1a55e9ce3857bb390bada1799856f3a5f688b6b361b392f012d525b2ed4c8d46f67f2b0cdb3b8f7bfdbe21560cf4774fa831247392ef6a8318835135c0593905b11b1577554c2525898412c2d2dc811050ca3cf1c4f771907a6b7e79c436bd74eab51933f6c1534d148ddf3a9658a54fc82da1df247d4f8718ab0294654e9a7adff51536b979b76be9a3bc8f1400b8568df3b59569c4610da50bc3356a4317848588611894609c170fec4cfd757ede3e1a7f0774eef15ebdfe4ab68628d4b5cb8017af893e97fcf5a066fad5e7a9d496a9621d66b913c8e21bf80d74f9e310ec620409630494f58d176354f31c868d17b1ec91d901df36a9f08b830163f5d9bc57b46f20b2808b37f92ae3f010b75f55c7ca135d661ed36bbe59a88492b28e6f6c6d8258e0ab2099d5490ac899a7f17191b393d79494db086e72117624c1d648ba41b81852ae9071d8cd36f40c7e1fa44f7b0de7df170608b9421c0c8b466fe51c09125c03986f915ff47a82d6d8f666220edd6e6b8ca9ec54b6d11883a485400761fda9d58bb9dc77ed4b070fe8bbe0c31c8a177cfb4dc37c895bb98f9a75656d5339758054a66450888d011e525565904bc037c437645f114858cd906b7b0751529aa8c2d04935bde9ac918ab29bebd82727d0d8c4e367962badcfc1672c2a761dd48d56a4fb84c8c1e43e6f4c993c5c63cef970d3d145b964310c07f58ad4fae1adac3d27d6d16d17cb42723ec8dba50b6492d2d47428774027c9f9c"}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000006280)=ANY=[], 0x16a0}}, 0x800) write(r1, &(0x7f0000000240)="01", 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, &(0x7f0000000280)=0x10000, 0xc3a, 0x0) open(&(0x7f00000002c0)='./file1\x00', 0x8201, 0x0) 14:34:38 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800"/120, 0x78, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:34:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x0) 14:34:38 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) fcntl$setsig(r0, 0xa, 0x3d) close(r3) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$FS_IOC_RESVSP(r5, 0x40305828, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 14:34:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x16}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:34:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5437, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:34:38 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {0x0, 0x0, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1689.207742] FAULT_INJECTION: forcing a failure. [ 1689.207742] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.209582] CPU: 1 PID: 10426 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1689.210695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.212014] Call Trace: [ 1689.212443] dump_stack+0x107/0x167 [ 1689.213036] should_fail.cold+0x5/0xa [ 1689.213655] ? create_object.isra.0+0x3a/0xa20 [ 1689.214398] should_failslab+0x5/0x20 [ 1689.215011] kmem_cache_alloc+0x5b/0x310 [ 1689.215675] create_object.isra.0+0x3a/0xa20 [ 1689.216380] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1689.217198] kmem_cache_alloc+0x159/0x310 [ 1689.217870] __es_insert_extent+0xed1/0x1370 [ 1689.218606] ext4_es_insert_extent+0x45d/0xf10 [ 1689.219354] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1689.220078] ? down_write_killable+0x180/0x180 [ 1689.220827] ext4_map_blocks+0x80b/0x1910 [ 1689.221504] ? __kernel_text_address+0x9/0x40 [ 1689.222222] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1689.222932] ? jbd2__journal_start+0xf3/0x7e0 [ 1689.223651] ? __ext4_journal_start_sb+0x214/0x390 [ 1689.224425] ? __ext4_journal_start_sb+0x1db/0x390 [ 1689.225201] ext4_iomap_begin+0x3ad/0x700 [ 1689.225877] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1689.226655] ? kasan_save_stack+0x1b/0x40 [ 1689.227315] ? ext4_file_write_iter+0xb26/0x18d0 [ 1689.228071] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 1689.229066] ? splice_direct_to_actor+0x387/0x980 [ 1689.229826] ? do_splice_direct+0x1c4/0x290 [ 1689.230510] ? do_sendfile+0x553/0x11e0 [ 1689.231142] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1689.231874] ? do_syscall_64+0x33/0x40 [ 1689.232489] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1689.233342] iomap_apply+0x164/0x810 [ 1689.233936] ? iomap_dio_rw+0x90/0x90 [ 1689.234550] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1689.235476] ? mark_held_locks+0x9e/0xe0 [ 1689.236140] ? filemap_check_errors+0xa5/0x150 [ 1689.236863] __iomap_dio_rw+0x6cd/0x1110 [ 1689.237501] ? iomap_dio_rw+0x90/0x90 [ 1689.238137] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1689.238866] ? ext4_orphan_add+0x253/0x9e0 [ 1689.239538] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1689.240325] ? ext4_empty_dir+0xae0/0xae0 [ 1689.240973] ? jbd2__journal_start+0xf3/0x7e0 [ 1689.241693] iomap_dio_rw+0x31/0x90 [ 1689.242278] ext4_file_write_iter+0xb26/0x18d0 [ 1689.243020] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1689.243736] ? kasan_save_stack+0x32/0x40 [ 1689.244389] ? kasan_save_stack+0x1b/0x40 [ 1689.245042] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1689.245833] ? iter_file_splice_write+0x16d/0xc30 [ 1689.246594] ? direct_splice_actor+0x10f/0x170 [ 1689.247303] ? splice_direct_to_actor+0x387/0x980 [ 1689.248048] ? do_splice_direct+0x1c4/0x290 [ 1689.248720] ? do_sendfile+0x553/0x11e0 [ 1689.249343] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1689.250073] ? do_syscall_64+0x33/0x40 [ 1689.250680] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1689.251520] do_iter_readv_writev+0x476/0x750 [ 1689.252226] ? new_sync_write+0x660/0x660 [ 1689.252874] ? avc_policy_seqno+0x9/0x70 [ 1689.253510] ? selinux_file_permission+0x92/0x520 [ 1689.254280] ? security_file_permission+0xb1/0xe0 [ 1689.255046] do_iter_write+0x191/0x700 [ 1689.255661] ? trace_hardirqs_on+0x5b/0x180 [ 1689.256346] vfs_iter_write+0x70/0xa0 [ 1689.256948] iter_file_splice_write+0x762/0xc30 [ 1689.257702] ? generic_splice_sendpage+0x140/0x140 [ 1689.258507] ? security_file_permission+0xb1/0xe0 [ 1689.259264] ? generic_splice_sendpage+0x140/0x140 [ 1689.260027] direct_splice_actor+0x10f/0x170 [ 1689.260709] splice_direct_to_actor+0x387/0x980 [ 1689.261436] ? pipe_to_sendpage+0x380/0x380 [ 1689.262117] ? do_splice_to+0x160/0x160 [ 1689.262739] ? security_file_permission+0xb1/0xe0 [ 1689.263498] do_splice_direct+0x1c4/0x290 [ 1689.264141] ? splice_direct_to_actor+0x980/0x980 [ 1689.264881] ? avc_policy_seqno+0x9/0x70 [ 1689.265524] ? security_file_permission+0xb1/0xe0 [ 1689.266290] do_sendfile+0x553/0x11e0 [ 1689.266902] ? do_pwritev+0x270/0x270 [ 1689.267495] ? wait_for_completion_io+0x270/0x270 [ 1689.268248] ? rcu_read_lock_any_held+0x75/0xa0 [ 1689.268962] ? vfs_write+0x354/0xb10 [ 1689.269550] __x64_sys_sendfile64+0x1d1/0x210 [ 1689.270258] ? __ia32_sys_sendfile+0x220/0x220 [ 1689.270980] do_syscall_64+0x33/0x40 [ 1689.271557] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1689.272346] RIP: 0033:0x7fe5e9dcbb19 [ 1689.272924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.275730] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1689.276904] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1689.278006] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1689.279095] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.280185] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1689.281267] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:34:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5441, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:34:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5450, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1689.344258] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1689.348283] EXT4-fs (loop6): get root inode failed [ 1689.349005] EXT4-fs (loop6): mount failed 14:34:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x0) [ 1689.426103] ISOFS: Logical zone size(0) < hardware blocksize(1024) 14:34:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 25) 14:34:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) fcntl$setsig(r0, 0xa, 0x3d) close(r3) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$FS_IOC_RESVSP(r5, 0x40305828, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 14:34:55 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:34:55 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000095) 14:34:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x17}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:34:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00), 0x0, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:34:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5451, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:34:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 1) [ 1706.465934] FAULT_INJECTION: forcing a failure. [ 1706.465934] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.467973] CPU: 0 PID: 10465 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1706.469154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1706.470601] Call Trace: [ 1706.471075] dump_stack+0x107/0x167 [ 1706.471724] should_fail.cold+0x5/0xa [ 1706.472404] ? alloc_pipe_info+0x10a/0x590 [ 1706.473147] should_failslab+0x5/0x20 [ 1706.473816] kmem_cache_alloc_trace+0x55/0x320 [ 1706.474642] alloc_pipe_info+0x10a/0x590 [ 1706.475367] splice_direct_to_actor+0x774/0x980 [ 1706.476193] ? _cond_resched+0x12/0x80 [ 1706.476883] ? inode_security+0x107/0x140 [ 1706.477611] ? pipe_to_sendpage+0x380/0x380 [ 1706.478382] ? avc_policy_seqno+0x9/0x70 14:34:55 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000012900)=ANY=[]) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000110}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x28281, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x4008240b, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x94bf) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x80, 0x1, 0x9, 0x2, 0x0, 0x998f, 0x41804, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x14410, 0x80000000, 0xbe34, 0x4, 0x9, 0x2ee2, 0x313f, 0x0, 0x3, 0x0, 0x81}, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x1, 0x8d, 0x3, 0x0, 0x377f, 0x44099, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x6040, 0x6, 0x20, 0x9, 0x8000, 0x8, 0x1e, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x1, r4, 0x8) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00') [ 1706.479099] ? selinux_file_permission+0x92/0x520 [ 1706.480079] ? do_splice_to+0x160/0x160 [ 1706.480781] ? security_file_permission+0xb1/0xe0 [ 1706.481635] do_splice_direct+0x1c4/0x290 [ 1706.482388] ? splice_direct_to_actor+0x980/0x980 [ 1706.483227] ? avc_policy_seqno+0x9/0x70 [ 1706.483955] ? security_file_permission+0xb1/0xe0 [ 1706.484813] do_sendfile+0x553/0x11e0 [ 1706.485497] ? do_pwritev+0x270/0x270 [ 1706.486180] ? wait_for_completion_io+0x270/0x270 [ 1706.487013] ? rcu_read_lock_any_held+0x75/0xa0 [ 1706.487824] ? vfs_write+0x354/0xb10 [ 1706.488091] FAULT_INJECTION: forcing a failure. [ 1706.488091] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.488492] __x64_sys_sendfile64+0x1d1/0x210 [ 1706.488520] ? __ia32_sys_sendfile+0x220/0x220 [ 1706.488560] do_syscall_64+0x33/0x40 [ 1706.492110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1706.493252] RIP: 0033:0x7f1b0b8ffb19 [ 1706.493957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1706.497949] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1706.499207] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1706.500476] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1706.501555] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1706.502832] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000001 [ 1706.503907] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 [ 1706.505218] CPU: 1 PID: 10476 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1706.506014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1706.506908] Call Trace: [ 1706.507201] dump_stack+0x107/0x167 [ 1706.507587] should_fail.cold+0x5/0xa [ 1706.507994] ? __es_insert_extent+0xed1/0x1370 [ 1706.508483] should_failslab+0x5/0x20 [ 1706.508894] kmem_cache_alloc+0x5b/0x310 [ 1706.509333] __es_insert_extent+0xed1/0x1370 [ 1706.509817] ext4_es_insert_extent+0x45d/0xf10 [ 1706.510330] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1706.510810] ? down_write_killable+0x180/0x180 [ 1706.511305] ext4_map_blocks+0x80b/0x1910 [ 1706.511751] ? __kernel_text_address+0x9/0x40 [ 1706.512231] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1706.512702] ? jbd2__journal_start+0xf3/0x7e0 [ 1706.513179] ? __ext4_journal_start_sb+0x214/0x390 [ 1706.513688] ? __ext4_journal_start_sb+0x1db/0x390 [ 1706.514222] ext4_iomap_begin+0x3ad/0x700 [ 1706.514671] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1706.515183] ? kasan_save_stack+0x1b/0x40 [ 1706.515618] ? ext4_file_write_iter+0xb26/0x18d0 [ 1706.516120] ? truncate_exceptional_pvec_entries.part.0+0x510/0x510 [ 1706.516781] ? splice_direct_to_actor+0x387/0x980 [ 1706.517279] ? do_splice_direct+0x1c4/0x290 [ 1706.517729] ? do_sendfile+0x553/0x11e0 [ 1706.518142] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1706.518640] ? do_syscall_64+0x33/0x40 [ 1706.519047] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1706.519610] iomap_apply+0x164/0x810 [ 1706.519999] ? iomap_dio_rw+0x90/0x90 [ 1706.520402] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1706.521014] ? mark_held_locks+0x9e/0xe0 [ 1706.521454] ? filemap_check_errors+0xa5/0x150 [ 1706.521936] __iomap_dio_rw+0x6cd/0x1110 [ 1706.522374] ? iomap_dio_rw+0x90/0x90 [ 1706.522798] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1706.523280] ? ext4_orphan_add+0x253/0x9e0 [ 1706.523726] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1706.524241] ? ext4_empty_dir+0xae0/0xae0 [ 1706.524674] ? jbd2__journal_start+0xf3/0x7e0 [ 1706.525151] iomap_dio_rw+0x31/0x90 [ 1706.525545] ext4_file_write_iter+0xb26/0x18d0 [ 1706.526033] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1706.526522] ? kasan_save_stack+0x32/0x40 [ 1706.526954] ? kasan_save_stack+0x1b/0x40 [ 1706.527383] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1706.527908] ? iter_file_splice_write+0x16d/0xc30 [ 1706.528402] ? direct_splice_actor+0x10f/0x170 [ 1706.528875] ? splice_direct_to_actor+0x387/0x980 [ 1706.529372] ? do_splice_direct+0x1c4/0x290 [ 1706.529817] ? do_sendfile+0x553/0x11e0 [ 1706.530252] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1706.530734] ? do_syscall_64+0x33/0x40 [ 1706.531137] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1706.531697] do_iter_readv_writev+0x476/0x750 [ 1706.532168] ? new_sync_write+0x660/0x660 [ 1706.532603] ? avc_policy_seqno+0x9/0x70 [ 1706.533021] ? selinux_file_permission+0x92/0x520 [ 1706.533544] ? security_file_permission+0xb1/0xe0 [ 1706.534050] do_iter_write+0x191/0x700 [ 1706.534488] ? trace_hardirqs_on+0x5b/0x180 [ 1706.534942] vfs_iter_write+0x70/0xa0 [ 1706.535348] iter_file_splice_write+0x762/0xc30 [ 1706.535849] ? generic_splice_sendpage+0x140/0x140 [ 1706.536385] ? security_file_permission+0xb1/0xe0 [ 1706.536888] ? generic_splice_sendpage+0x140/0x140 [ 1706.537402] direct_splice_actor+0x10f/0x170 [ 1706.537862] splice_direct_to_actor+0x387/0x980 [ 1706.538381] ? pipe_to_sendpage+0x380/0x380 [ 1706.538834] ? do_splice_to+0x160/0x160 [ 1706.539253] ? security_file_permission+0xb1/0xe0 [ 1706.539760] do_splice_direct+0x1c4/0x290 [ 1706.540193] ? splice_direct_to_actor+0x980/0x980 [ 1706.540692] ? avc_policy_seqno+0x9/0x70 [ 1706.541124] ? security_file_permission+0xb1/0xe0 [ 1706.541637] do_sendfile+0x553/0x11e0 [ 1706.542046] ? do_pwritev+0x270/0x270 [ 1706.542465] ? wait_for_completion_io+0x270/0x270 [ 1706.542971] ? rcu_read_lock_any_held+0x75/0xa0 [ 1706.543458] ? vfs_write+0x354/0xb10 [ 1706.543847] __x64_sys_sendfile64+0x1d1/0x210 [ 1706.544315] ? __ia32_sys_sendfile+0x220/0x220 [ 1706.544803] do_syscall_64+0x33/0x40 [ 1706.545192] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1706.545727] RIP: 0033:0x7fe5e9dcbb19 [ 1706.546114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1706.548030] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1706.548819] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1706.549558] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1706.550313] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1706.551046] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1706.551788] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:34:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5452, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1706.596570] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1706.618635] isofs_fill_super: get root inode failed [ 1706.638283] EXT4-fs (loop6): get root inode failed [ 1706.639040] EXT4-fs (loop6): mount failed 14:34:55 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:34:55 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) syz_io_uring_setup(0x512a, &(0x7f0000000100)={0x0, 0x21e8, 0x0, 0x2, 0x56, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x1b0d, &(0x7f0000000340)={0x0, 0x6354, 0x2, 0x2, 0x2e7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000003c0)=0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000400), 0x4, 0x30000) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r5, 0x6, 0x0, 0x6, 0x5, 0x1, {0x2}}, 0x8c390) ioctl$FIOCLEX(r2, 0x5451) close(r2) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0x88fb}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @mcast2, @local, @mcast1}}, 0x38) 14:34:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 2) [ 1706.764900] FAULT_INJECTION: forcing a failure. [ 1706.764900] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.766135] CPU: 1 PID: 10496 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1706.766960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1706.767722] Call Trace: [ 1706.767976] dump_stack+0x107/0x167 [ 1706.768347] should_fail.cold+0x5/0xa [ 1706.768817] ? create_object.isra.0+0x3a/0xa20 [ 1706.769406] should_failslab+0x5/0x20 [ 1706.769765] kmem_cache_alloc+0x5b/0x310 [ 1706.770140] create_object.isra.0+0x3a/0xa20 [ 1706.770568] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1706.771174] kmem_cache_alloc_trace+0x151/0x320 [ 1706.771607] alloc_pipe_info+0x10a/0x590 [ 1706.772021] splice_direct_to_actor+0x774/0x980 [ 1706.772583] ? _cond_resched+0x12/0x80 [ 1706.772962] ? inode_security+0x107/0x140 [ 1706.773493] ? pipe_to_sendpage+0x380/0x380 [ 1706.774025] ? avc_policy_seqno+0x9/0x70 [ 1706.774507] ? selinux_file_permission+0x92/0x520 [ 1706.774954] ? do_splice_to+0x160/0x160 [ 1706.775327] ? security_file_permission+0xb1/0xe0 [ 1706.775773] do_splice_direct+0x1c4/0x290 [ 1706.776150] ? splice_direct_to_actor+0x980/0x980 [ 1706.776585] ? avc_policy_seqno+0x9/0x70 [ 1706.776966] ? security_file_permission+0xb1/0xe0 [ 1706.777408] do_sendfile+0x553/0x11e0 [ 1706.777765] ? do_pwritev+0x270/0x270 [ 1706.778119] ? wait_for_completion_io+0x270/0x270 [ 1706.778578] ? rcu_read_lock_any_held+0x75/0xa0 [ 1706.779000] ? vfs_write+0x354/0xb10 [ 1706.779346] __x64_sys_sendfile64+0x1d1/0x210 [ 1706.779765] ? __ia32_sys_sendfile+0x220/0x220 [ 1706.780201] do_syscall_64+0x33/0x40 [ 1706.780546] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1706.781021] RIP: 0033:0x7f1b0b8ffb19 [ 1706.781367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1706.783062] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1706.783761] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1706.784419] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1706.785077] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1706.785735] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000001 [ 1706.786405] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 [ 1706.855232] isofs_fill_super: get root inode failed 14:35:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 3) 14:35:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:35:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x545d, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:35:10 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x7) mkdirat(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(r0, &(0x7f0000000180)='./file2\x00', 0x0) rmdir(&(0x7f0000000140)='./file2\x00') syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:35:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00), 0x0, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:35:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 26) 14:35:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:35:10 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xb30717fe31629887, @multicast, @remote, @remote, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x34) [ 1721.568805] FAULT_INJECTION: forcing a failure. [ 1721.568805] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.571193] CPU: 0 PID: 10515 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1721.572500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1721.574074] Call Trace: [ 1721.574602] dump_stack+0x107/0x167 [ 1721.575301] should_fail.cold+0x5/0xa [ 1721.576033] ? create_object.isra.0+0x3a/0xa20 [ 1721.576908] should_failslab+0x5/0x20 [ 1721.577646] kmem_cache_alloc+0x5b/0x310 [ 1721.578447] ? quarantine_put+0x8b/0x1a0 [ 1721.579233] create_object.isra.0+0x3a/0xa20 [ 1721.580072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1721.581048] kmem_cache_alloc+0x159/0x310 [ 1721.581857] ? mempool_free_pages+0x20/0x20 [ 1721.582706] mempool_alloc+0x148/0x360 [ 1721.583471] ? mempool_resize+0x7d0/0x7d0 [ 1721.584268] ? lock_downgrade+0x6d0/0x6d0 [ 1721.585093] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1721.586074] bio_alloc_bioset+0x36e/0x600 [ 1721.586899] ? bvec_alloc+0x2f0/0x2f0 [ 1721.587640] ? iov_iter_npages+0x1fd/0xa70 [ 1721.588486] iomap_dio_bio_actor+0x518/0xef0 [ 1721.589360] iomap_dio_actor+0x36f/0x560 [ 1721.590162] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1721.591082] ? do_syscall_64+0x33/0x40 [ 1721.591836] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1721.592891] iomap_apply+0x289/0x810 [ 1721.593634] ? iomap_dio_rw+0x90/0x90 [ 1721.594411] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1721.595518] ? mark_held_locks+0x9e/0xe0 [ 1721.596256] ? filemap_check_errors+0xa5/0x150 [ 1721.597039] __iomap_dio_rw+0x6cd/0x1110 [ 1721.597722] ? iomap_dio_rw+0x90/0x90 [ 1721.598401] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1721.599170] ? ext4_orphan_add+0x253/0x9e0 [ 1721.599924] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1721.600759] ? ext4_empty_dir+0xae0/0xae0 [ 1721.601456] ? jbd2__journal_start+0xf3/0x7e0 [ 1721.602226] iomap_dio_rw+0x31/0x90 [ 1721.602886] ext4_file_write_iter+0xb26/0x18d0 [ 1721.603686] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1721.604453] ? kasan_save_stack+0x32/0x40 [ 1721.605187] ? kasan_save_stack+0x1b/0x40 [ 1721.605909] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1721.606769] ? iter_file_splice_write+0x16d/0xc30 [ 1721.607588] ? direct_splice_actor+0x10f/0x170 [ 1721.608355] ? splice_direct_to_actor+0x387/0x980 [ 1721.609157] ? do_splice_direct+0x1c4/0x290 [ 1721.609835] ? do_sendfile+0x553/0x11e0 [ 1721.610441] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1721.611122] ? do_syscall_64+0x33/0x40 [ 1721.611696] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1721.612476] do_iter_readv_writev+0x476/0x750 [ 1721.613133] ? new_sync_write+0x660/0x660 [ 1721.613751] ? avc_policy_seqno+0x9/0x70 [ 1721.614351] ? selinux_file_permission+0x92/0x520 [ 1721.615064] ? security_file_permission+0xb1/0xe0 [ 1721.615452] FAULT_INJECTION: forcing a failure. [ 1721.615452] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.615773] do_iter_write+0x191/0x700 [ 1721.617870] ? trace_hardirqs_on+0x5b/0x180 [ 1721.618514] vfs_iter_write+0x70/0xa0 [ 1721.619073] iter_file_splice_write+0x762/0xc30 [ 1721.619796] ? generic_splice_sendpage+0x140/0x140 [ 1721.620542] ? security_file_permission+0xb1/0xe0 [ 1721.621254] ? generic_splice_sendpage+0x140/0x140 [ 1721.621983] direct_splice_actor+0x10f/0x170 [ 1721.622637] splice_direct_to_actor+0x387/0x980 [ 1721.623343] ? pipe_to_sendpage+0x380/0x380 [ 1721.623982] ? do_splice_to+0x160/0x160 [ 1721.624568] ? security_file_permission+0xb1/0xe0 [ 1721.625283] do_splice_direct+0x1c4/0x290 [ 1721.625896] ? splice_direct_to_actor+0x980/0x980 [ 1721.626603] ? avc_policy_seqno+0x9/0x70 [ 1721.627210] ? security_file_permission+0xb1/0xe0 [ 1721.627927] do_sendfile+0x553/0x11e0 [ 1721.628507] ? do_pwritev+0x270/0x270 [ 1721.629080] ? wait_for_completion_io+0x270/0x270 [ 1721.629815] ? rcu_read_lock_any_held+0x75/0xa0 [ 1721.630517] ? vfs_write+0x354/0xb10 [ 1721.631076] __x64_sys_sendfile64+0x1d1/0x210 [ 1721.631754] ? __ia32_sys_sendfile+0x220/0x220 [ 1721.632450] do_syscall_64+0x33/0x40 [ 1721.633000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1721.633756] RIP: 0033:0x7fe5e9dcbb19 [ 1721.634307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1721.637019] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1721.638151] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1721.639212] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1721.640261] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1721.641316] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1721.642376] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1721.643475] CPU: 1 PID: 10520 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1721.644421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1721.645523] Call Trace: [ 1721.645892] dump_stack+0x107/0x167 [ 1721.646411] should_fail.cold+0x5/0xa [ 1721.646933] ? alloc_pipe_info+0x1e5/0x590 [ 1721.647509] should_failslab+0x5/0x20 [ 1721.648043] __kmalloc+0x72/0x390 [ 1721.648532] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1721.649231] alloc_pipe_info+0x1e5/0x590 [ 1721.649794] splice_direct_to_actor+0x774/0x980 [ 1721.650432] ? _cond_resched+0x12/0x80 [ 1721.650966] ? inode_security+0x107/0x140 [ 1721.651523] ? pipe_to_sendpage+0x380/0x380 [ 1721.652110] ? avc_policy_seqno+0x9/0x70 [ 1721.652667] ? selinux_file_permission+0x92/0x520 [ 1721.653317] ? do_splice_to+0x160/0x160 [ 1721.653908] ? security_file_permission+0xb1/0xe0 [ 1721.654586] do_splice_direct+0x1c4/0x290 [ 1721.655150] ? splice_direct_to_actor+0x980/0x980 [ 1721.655798] ? avc_policy_seqno+0x9/0x70 [ 1721.656357] ? security_file_permission+0xb1/0xe0 [ 1721.657020] do_sendfile+0x553/0x11e0 [ 1721.657555] ? do_pwritev+0x270/0x270 [ 1721.658086] ? wait_for_completion_io+0x270/0x270 [ 1721.658755] ? rcu_read_lock_any_held+0x75/0xa0 [ 1721.659385] ? vfs_write+0x354/0xb10 [ 1721.659896] __x64_sys_sendfile64+0x1d1/0x210 [ 1721.660505] ? __ia32_sys_sendfile+0x220/0x220 [ 1721.661135] do_syscall_64+0x33/0x40 [ 1721.661641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1721.662338] RIP: 0033:0x7f1b0b8ffb19 [ 1721.662848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1721.665293] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1721.666319] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1721.667291] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1721.668257] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1721.669214] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000001 [ 1721.670172] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 14:35:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x5460, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1721.689498] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1721.710076] EXT4-fs (loop6): get root inode failed [ 1721.710830] EXT4-fs (loop6): mount failed [ 1721.738854] isofs_fill_super: get root inode failed 14:35:10 executing program 4: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) ioprio_set$uid(0x3, 0x0, 0x4004) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x5}) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)={0x0, 0x7, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @generic={0x80, 0x1f, "0cacffcea1f7b795fdbaa80886125edc047c2d4267aee1f430771c961ead21"}]}, 0x48) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x5, 0x10001}}, './file0\x00'}) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e21, 0x7, @empty, 0xff}, 0x1c) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000140)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @broadcast, @from_mac, {0x8, 0x3f}}, 0x3f, @val={0x8c, 0x18, {0x531, "b86ded07d97d", @long="c877eae542f1c169f00408e66a61e099"}}}, 0x34) 14:35:10 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa0002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x10000}, 0x26, 0x82000000, 0x0, 0x1, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r1, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)="3ac7f3d506651c360ff291acb668a2cf6d88e66fee17e33e7105647c736b30bbe98d0f953ebf0305e489d498be95be3169231b9aebd858e2208bc448cef1c2d6653f06ba396baa76514743ea7aa012941195ddebff10ca4cc637d40327fb36de0aff4ad115d97d0bacfe98d0", 0x6c}, {&(0x7f0000000180)}], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_seq', 0x40302, 0x40) fork() ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)=0x7) 14:35:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x40049409, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:35:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000", 0x96, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:35:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00), 0x0, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1721.910001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:35:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 4) [ 1721.942093] FAULT_INJECTION: forcing a failure. [ 1721.942093] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.943806] CPU: 0 PID: 10547 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1721.944812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1721.946017] Call Trace: [ 1721.946421] dump_stack+0x107/0x167 [ 1721.946962] should_fail.cold+0x5/0xa [ 1721.947529] ? create_object.isra.0+0x3a/0xa20 [ 1721.948203] should_failslab+0x5/0x20 [ 1721.948771] kmem_cache_alloc+0x5b/0x310 [ 1721.949377] create_object.isra.0+0x3a/0xa20 [ 1721.950029] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1721.950786] __kmalloc+0x16e/0x390 [ 1721.951315] alloc_pipe_info+0x1e5/0x590 [ 1721.951919] splice_direct_to_actor+0x774/0x980 [ 1721.952606] ? _cond_resched+0x12/0x80 [ 1721.953175] ? inode_security+0x107/0x140 [ 1721.953779] ? pipe_to_sendpage+0x380/0x380 [ 1721.954424] ? avc_policy_seqno+0x9/0x70 [ 1721.955015] ? selinux_file_permission+0x92/0x520 [ 1721.955716] ? do_splice_to+0x160/0x160 [ 1721.956292] ? security_file_permission+0xb1/0xe0 [ 1721.956995] do_splice_direct+0x1c4/0x290 [ 1721.957592] ? splice_direct_to_actor+0x980/0x980 [ 1721.958281] ? avc_policy_seqno+0x9/0x70 [ 1721.958893] ? security_file_permission+0xb1/0xe0 [ 1721.959613] do_sendfile+0x553/0x11e0 [ 1721.960186] ? do_pwritev+0x270/0x270 [ 1721.960746] ? wait_for_completion_io+0x270/0x270 [ 1721.961464] ? rcu_read_lock_any_held+0x75/0xa0 [ 1721.962140] ? vfs_write+0x354/0xb10 [ 1721.962705] __x64_sys_sendfile64+0x1d1/0x210 [ 1721.963364] ? __ia32_sys_sendfile+0x220/0x220 [ 1721.964048] do_syscall_64+0x33/0x40 [ 1721.964595] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1721.965358] RIP: 0033:0x7f1b0b8ffb19 [ 1721.965920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1721.968653] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1721.969792] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1721.970864] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1721.971923] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1721.972991] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000001 [ 1721.974053] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 14:35:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:35:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 5) [ 1722.020665] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1722.032497] EXT4-fs (loop6): get root inode failed [ 1722.033106] EXT4-fs (loop6): mount failed 14:35:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x40086602, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:35:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 27) [ 1722.131357] FAULT_INJECTION: forcing a failure. [ 1722.131357] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.132996] CPU: 1 PID: 10563 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1722.133819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1722.134805] Call Trace: [ 1722.135132] dump_stack+0x107/0x167 [ 1722.135575] should_fail.cold+0x5/0xa [ 1722.136035] ? jbd2__journal_start+0x190/0x7e0 [ 1722.136583] should_failslab+0x5/0x20 [ 1722.137046] kmem_cache_alloc+0x5b/0x310 [ 1722.137545] jbd2__journal_start+0x190/0x7e0 [ 1722.138082] __ext4_journal_start_sb+0x214/0x390 [ 1722.138664] ext4_dirty_inode+0xbc/0x130 [ 1722.139149] ? ext4_setattr+0x2160/0x2160 [ 1722.139638] __mark_inode_dirty+0x492/0xd40 [ 1722.140157] touch_atime+0x5ea/0x6e0 [ 1722.140607] ? atime_needs_update+0x600/0x600 [ 1722.141145] ? pagecache_get_page+0x243/0xc80 [ 1722.141686] generic_file_buffered_read+0x191a/0x2920 [ 1722.142330] ? pagecache_get_page+0xc80/0xc80 [ 1722.142870] ? kasan_save_stack+0x32/0x40 [ 1722.143360] ? kasan_save_stack+0x1b/0x40 [ 1722.143852] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1722.144455] ? alloc_pipe_info+0x1e5/0x590 [ 1722.144965] ? splice_direct_to_actor+0x774/0x980 [ 1722.145535] ? do_splice_direct+0x1c4/0x290 [ 1722.146040] ? do_sendfile+0x553/0x11e0 [ 1722.146518] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1722.147069] ? do_syscall_64+0x33/0x40 [ 1722.147538] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1722.148165] ? perf_trace_lock+0xac/0x490 [ 1722.148659] ? lock_chain_count+0x20/0x20 [ 1722.149160] generic_file_read_iter+0x33f/0x490 [ 1722.149711] ? __fsnotify_parent+0x498/0xa60 [ 1722.150235] ext4_file_read_iter+0x184/0x4c0 [ 1722.150794] generic_file_splice_read+0x455/0x6d0 [ 1722.151377] ? pipe_to_user+0x170/0x170 [ 1722.151886] ? fsnotify_perm.part.0+0x22d/0x620 [ 1722.152445] ? security_file_permission+0xb1/0xe0 [ 1722.153032] ? pipe_to_user+0x170/0x170 [ 1722.153510] do_splice_to+0x10e/0x160 [ 1722.153962] splice_direct_to_actor+0x2fe/0x980 [ 1722.154529] ? pipe_to_sendpage+0x380/0x380 [ 1722.155049] ? do_splice_to+0x160/0x160 [ 1722.155518] ? security_file_permission+0xb1/0xe0 [ 1722.156102] do_splice_direct+0x1c4/0x290 [ 1722.156589] ? splice_direct_to_actor+0x980/0x980 [ 1722.157149] ? avc_policy_seqno+0x9/0x70 [ 1722.157648] ? security_file_permission+0xb1/0xe0 [ 1722.158226] do_sendfile+0x553/0x11e0 [ 1722.158693] ? do_pwritev+0x270/0x270 [ 1722.159141] ? wait_for_completion_io+0x270/0x270 [ 1722.159708] ? rcu_read_lock_any_held+0x75/0xa0 [ 1722.160248] ? vfs_write+0x354/0xb10 [ 1722.160695] __x64_sys_sendfile64+0x1d1/0x210 [ 1722.161241] ? __ia32_sys_sendfile+0x220/0x220 [ 1722.161796] do_syscall_64+0x33/0x40 [ 1722.162245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1722.162850] RIP: 0033:0x7f1b0b8ffb19 [ 1722.163300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1722.165412] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1722.166306] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1722.167142] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1722.167985] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1722.168806] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000001 [ 1722.169621] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 [ 1722.183216] EXT4-fs warning (device sda): ext4_group_extend:1805: can't shrink FS - resize aborted 14:35:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x1a}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 1722.195225] isofs_fill_super: get root inode failed 14:35:11 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f465", 0xf, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:35:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x40087602, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1722.262868] FAULT_INJECTION: forcing a failure. [ 1722.262868] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.264524] CPU: 0 PID: 10570 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1722.265525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1722.266733] Call Trace: [ 1722.267128] dump_stack+0x107/0x167 [ 1722.267666] should_fail.cold+0x5/0xa [ 1722.268229] ? bvec_alloc+0x148/0x2f0 [ 1722.268792] should_failslab+0x5/0x20 [ 1722.269364] kmem_cache_alloc+0x5b/0x310 [ 1722.269972] bvec_alloc+0x148/0x2f0 [ 1722.270523] bio_alloc_bioset+0x40a/0x600 [ 1722.271138] ? bvec_alloc+0x2f0/0x2f0 [ 1722.271707] ? iov_iter_npages+0x1fd/0xa70 [ 1722.272340] iomap_dio_bio_actor+0x518/0xef0 [ 1722.273013] iomap_dio_actor+0x36f/0x560 [ 1722.273627] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1722.274302] ? do_syscall_64+0x33/0x40 [ 1722.274886] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1722.275679] iomap_apply+0x289/0x810 [ 1722.275841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1722.276228] ? iomap_dio_rw+0x90/0x90 [ 1722.276255] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1722.278587] ? mark_held_locks+0x9e/0xe0 [ 1722.279200] ? filemap_check_errors+0xa5/0x150 [ 1722.279875] __iomap_dio_rw+0x6cd/0x1110 [ 1722.280461] ? iomap_dio_rw+0x90/0x90 [ 1722.281047] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1722.281716] ? ext4_orphan_add+0x253/0x9e0 [ 1722.282323] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1722.283038] ? ext4_empty_dir+0xae0/0xae0 [ 1722.283635] ? jbd2__journal_start+0xf3/0x7e0 [ 1722.284304] iomap_dio_rw+0x31/0x90 [ 1722.284843] ext4_file_write_iter+0xb26/0x18d0 [ 1722.285521] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1722.286184] ? kasan_save_stack+0x32/0x40 [ 1722.286786] ? kasan_save_stack+0x1b/0x40 [ 1722.287390] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1722.288121] ? iter_file_splice_write+0x16d/0xc30 [ 1722.288813] ? direct_splice_actor+0x10f/0x170 [ 1722.289475] ? splice_direct_to_actor+0x387/0x980 [ 1722.290168] ? do_splice_direct+0x1c4/0x290 [ 1722.290800] ? do_sendfile+0x553/0x11e0 [ 1722.291382] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1722.292052] ? do_syscall_64+0x33/0x40 [ 1722.292617] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1722.293402] do_iter_readv_writev+0x476/0x750 [ 1722.294059] ? new_sync_write+0x660/0x660 [ 1722.294693] ? avc_policy_seqno+0x9/0x70 [ 1722.295287] ? selinux_file_permission+0x92/0x520 [ 1722.295998] ? security_file_permission+0xb1/0xe0 [ 1722.296720] do_iter_write+0x191/0x700 [ 1722.297288] ? trace_hardirqs_on+0x5b/0x180 [ 1722.297926] vfs_iter_write+0x70/0xa0 [ 1722.298495] iter_file_splice_write+0x762/0xc30 [ 1722.299198] ? generic_splice_sendpage+0x140/0x140 [ 1722.299942] ? security_file_permission+0xb1/0xe0 [ 1722.300648] ? generic_splice_sendpage+0x140/0x140 [ 1722.301369] direct_splice_actor+0x10f/0x170 [ 1722.302012] splice_direct_to_actor+0x387/0x980 [ 1722.302694] ? pipe_to_sendpage+0x380/0x380 [ 1722.303329] ? do_splice_to+0x160/0x160 [ 1722.303914] ? security_file_permission+0xb1/0xe0 [ 1722.304623] do_splice_direct+0x1c4/0x290 [ 1722.305235] ? splice_direct_to_actor+0x980/0x980 [ 1722.305933] ? avc_policy_seqno+0x9/0x70 [ 1722.306537] ? security_file_permission+0xb1/0xe0 [ 1722.307253] do_sendfile+0x553/0x11e0 [ 1722.307826] ? do_pwritev+0x270/0x270 [ 1722.308385] ? wait_for_completion_io+0x270/0x270 [ 1722.309084] ? rcu_read_lock_any_held+0x75/0xa0 [ 1722.309758] ? vfs_write+0x354/0xb10 [ 1722.310306] __x64_sys_sendfile64+0x1d1/0x210 [ 1722.310970] ? __ia32_sys_sendfile+0x220/0x220 [ 1722.311644] do_syscall_64+0x33/0x40 [ 1722.312185] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1722.312914] RIP: 0033:0x7fe5e9dcbb19 [ 1722.313457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1722.316097] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1722.317207] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1722.318240] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1722.319258] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1722.320273] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1722.321292] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1722.362777] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1722.364419] EXT4-fs (loop6): get root inode failed [ 1722.364936] EXT4-fs (loop6): mount failed 14:35:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 28) 14:35:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000", 0x96, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:35:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f465", 0xf, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:35:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 6) 14:35:26 executing program 4: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x40, 0x4, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0xad, 0x6, 0x8000, 0x1f, 0x20}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 14:35:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x1b}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:35:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4020940d, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:35:26 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x2, 0x0, 0x2, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000000) [ 1737.561573] FAULT_INJECTION: forcing a failure. [ 1737.561573] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.562780] CPU: 1 PID: 10594 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1737.563455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1737.564271] Call Trace: [ 1737.564539] dump_stack+0x107/0x167 [ 1737.564899] should_fail.cold+0x5/0xa [ 1737.565283] ? kmem_cache_alloc+0x2a6/0x310 [ 1737.565715] ? create_object.isra.0+0x3a/0xa20 [ 1737.566171] should_failslab+0x5/0x20 [ 1737.566558] kmem_cache_alloc+0x5b/0x310 [ 1737.566964] ? mempool_alloc+0x155/0x360 [ 1737.567370] create_object.isra.0+0x3a/0xa20 [ 1737.567805] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1737.568319] kmem_cache_alloc+0x159/0x310 [ 1737.568744] bvec_alloc+0x148/0x2f0 [ 1737.569110] bio_alloc_bioset+0x40a/0x600 [ 1737.569525] ? bvec_alloc+0x2f0/0x2f0 [ 1737.569912] ? iov_iter_npages+0x1fd/0xa70 [ 1737.570341] iomap_dio_bio_actor+0x518/0xef0 [ 1737.570799] iomap_dio_actor+0x36f/0x560 [ 1737.571208] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1737.571668] ? do_syscall_64+0x33/0x40 [ 1737.572054] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1737.572583] iomap_apply+0x289/0x810 [ 1737.572955] ? iomap_dio_rw+0x90/0x90 [ 1737.573339] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1737.573915] ? mark_held_locks+0x9e/0xe0 [ 1737.574332] ? filemap_check_errors+0xa5/0x150 [ 1737.574803] __iomap_dio_rw+0x6cd/0x1110 [ 1737.575210] ? iomap_dio_rw+0x90/0x90 [ 1737.575601] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1737.576055] ? ext4_orphan_add+0x253/0x9e0 [ 1737.576475] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1737.576962] ? ext4_empty_dir+0xae0/0xae0 [ 1737.577370] ? jbd2__journal_start+0xf3/0x7e0 [ 1737.577831] iomap_dio_rw+0x31/0x90 [ 1737.578198] ext4_file_write_iter+0xb26/0x18d0 [ 1737.578670] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1737.579121] ? kasan_save_stack+0x32/0x40 [ 1737.579529] ? kasan_save_stack+0x1b/0x40 [ 1737.579939] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1737.580445] ? iter_file_splice_write+0x16d/0xc30 [ 1737.580918] ? direct_splice_actor+0x10f/0x170 [ 1737.581368] ? splice_direct_to_actor+0x387/0x980 [ 1737.581841] ? do_splice_direct+0x1c4/0x290 [ 1737.582271] ? do_sendfile+0x553/0x11e0 [ 1737.582672] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1737.583127] ? do_syscall_64+0x33/0x40 [ 1737.583509] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1737.584033] do_iter_readv_writev+0x476/0x750 [ 1737.584482] ? new_sync_write+0x660/0x660 [ 1737.584888] ? avc_policy_seqno+0x9/0x70 [ 1737.585287] ? selinux_file_permission+0x92/0x520 [ 1737.585770] ? security_file_permission+0xb1/0xe0 [ 1737.586255] do_iter_write+0x191/0x700 [ 1737.586648] ? trace_hardirqs_on+0x5b/0x180 [ 1737.587082] vfs_iter_write+0x70/0xa0 [ 1737.587461] iter_file_splice_write+0x762/0xc30 [ 1737.587930] ? generic_splice_sendpage+0x140/0x140 [ 1737.588431] ? security_file_permission+0xb1/0xe0 [ 1737.588911] ? generic_splice_sendpage+0x140/0x140 [ 1737.589397] direct_splice_actor+0x10f/0x170 [ 1737.589834] splice_direct_to_actor+0x387/0x980 [ 1737.590297] ? pipe_to_sendpage+0x380/0x380 [ 1737.590732] ? do_splice_to+0x160/0x160 [ 1737.591126] ? security_file_permission+0xb1/0xe0 [ 1737.591606] do_splice_direct+0x1c4/0x290 [ 1737.592017] ? splice_direct_to_actor+0x980/0x980 [ 1737.592487] ? avc_policy_seqno+0x9/0x70 [ 1737.592897] ? security_file_permission+0xb1/0xe0 [ 1737.593383] do_sendfile+0x553/0x11e0 [ 1737.593767] ? do_pwritev+0x270/0x270 [ 1737.594148] ? wait_for_completion_io+0x270/0x270 [ 1737.594635] ? rcu_read_lock_any_held+0x75/0xa0 [ 1737.595091] ? vfs_write+0x354/0xb10 [ 1737.595466] __x64_sys_sendfile64+0x1d1/0x210 [ 1737.595914] ? __ia32_sys_sendfile+0x220/0x220 [ 1737.596369] do_syscall_64+0x33/0x40 [ 1737.596736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1737.597238] RIP: 0033:0x7fe5e9dcbb19 [ 1737.597606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.599396] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1737.600142] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1737.600836] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1737.601534] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.602233] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1737.602937] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1737.607766] isofs_fill_super: get root inode failed [ 1737.626870] FAULT_INJECTION: forcing a failure. [ 1737.626870] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.628097] CPU: 1 PID: 10601 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1737.628758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1737.629544] Call Trace: [ 1737.629803] dump_stack+0x107/0x167 [ 1737.630157] should_fail.cold+0x5/0xa [ 1737.630539] ? create_object.isra.0+0x3a/0xa20 [ 1737.630983] should_failslab+0x5/0x20 [ 1737.631354] kmem_cache_alloc+0x5b/0x310 [ 1737.631762] create_object.isra.0+0x3a/0xa20 [ 1737.632190] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1737.632685] kmem_cache_alloc+0x159/0x310 [ 1737.633093] jbd2__journal_start+0x190/0x7e0 [ 1737.633527] __ext4_journal_start_sb+0x214/0x390 [ 1737.633992] ext4_dirty_inode+0xbc/0x130 [ 1737.634390] ? ext4_setattr+0x2160/0x2160 [ 1737.634804] __mark_inode_dirty+0x492/0xd40 [ 1737.635231] touch_atime+0x5ea/0x6e0 [ 1737.635594] ? atime_needs_update+0x600/0x600 [ 1737.636036] ? pagecache_get_page+0x243/0xc80 [ 1737.636480] generic_file_buffered_read+0x191a/0x2920 [ 1737.636996] ? pagecache_get_page+0xc80/0xc80 [ 1737.637430] ? kasan_save_stack+0x32/0x40 [ 1737.637831] ? kasan_save_stack+0x1b/0x40 [ 1737.638233] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1737.638731] ? alloc_pipe_info+0x1e5/0x590 [ 1737.639141] ? splice_direct_to_actor+0x774/0x980 [ 1737.639605] ? do_splice_direct+0x1c4/0x290 [ 1737.640023] ? do_sendfile+0x553/0x11e0 [ 1737.640414] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1737.640859] ? do_syscall_64+0x33/0x40 [ 1737.641236] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1737.641750] ? perf_trace_lock+0xac/0x490 [ 1737.642154] ? lock_chain_count+0x20/0x20 [ 1737.642567] generic_file_read_iter+0x33f/0x490 [ 1737.643022] ? __fsnotify_parent+0x498/0xa60 [ 1737.643451] ext4_file_read_iter+0x184/0x4c0 [ 1737.643881] generic_file_splice_read+0x455/0x6d0 [ 1737.644352] ? pipe_to_user+0x170/0x170 [ 1737.644747] ? fsnotify_perm.part.0+0x22d/0x620 [ 1737.645203] ? security_file_permission+0xb1/0xe0 [ 1737.645672] ? pipe_to_user+0x170/0x170 [ 1737.646056] do_splice_to+0x10e/0x160 [ 1737.646430] splice_direct_to_actor+0x2fe/0x980 [ 1737.646888] ? pipe_to_sendpage+0x380/0x380 [ 1737.647308] ? do_splice_to+0x160/0x160 [ 1737.647694] ? security_file_permission+0xb1/0xe0 [ 1737.648167] do_splice_direct+0x1c4/0x290 [ 1737.648570] ? splice_direct_to_actor+0x980/0x980 [ 1737.649033] ? avc_policy_seqno+0x9/0x70 [ 1737.649433] ? security_file_permission+0xb1/0xe0 [ 1737.649908] do_sendfile+0x553/0x11e0 [ 1737.650291] ? do_pwritev+0x270/0x270 [ 1737.650670] ? wait_for_completion_io+0x270/0x270 [ 1737.651140] ? rcu_read_lock_any_held+0x75/0xa0 [ 1737.651588] ? vfs_write+0x354/0xb10 [ 1737.651957] __x64_sys_sendfile64+0x1d1/0x210 [ 1737.652395] ? __ia32_sys_sendfile+0x220/0x220 [ 1737.652848] do_syscall_64+0x33/0x40 [ 1737.653209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1737.653705] RIP: 0033:0x7f1b0b8ffb19 [ 1737.654064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.655812] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1737.656544] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1737.657226] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1737.657912] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.658601] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000001 [ 1737.659278] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 [ 1737.675136] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1737.677430] EXT4-fs (loop6): get root inode failed [ 1737.677939] EXT4-fs (loop6): mount failed 14:35:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000", 0x96, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) [ 1737.879229] isofs_fill_super: get root inode failed 14:35:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x80045432, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:35:43 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}], 0x3) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)=ANY=[@ANYRES32, @ANYBLOB="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"]) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(0x0, &(0x7f00000002c0), &(0x7f0000000480)=ANY=[@ANYBLOB="02d86430a42f9a1cffcb"], 0x15, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001e00)={{}, 0x0, 0x1e, @unused=[0xffff, 0x9, 0x3ff, 0x8], @name="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"}) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x900, 0x0) getdents64(r3, &(0x7f0000001500)=""/125, 0x7d) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)={'L+', 0x100000000}, 0x16, 0x3) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x837013, 0x0) unshare(0x48020200) 14:35:43 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000440)='./file1\x00', 0x1000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') getdents(r0, &(0x7f00000000c0)=""/79, 0x4f) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) 14:35:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 29) 14:35:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x1c}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:35:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 7) 14:35:43 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000", 0x9b, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:35:43 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f465", 0xf, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1754.820059] FAULT_INJECTION: forcing a failure. [ 1754.820059] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.821844] CPU: 0 PID: 10633 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1754.822867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1754.824081] Call Trace: [ 1754.824481] dump_stack+0x107/0x167 [ 1754.825026] should_fail.cold+0x5/0xa [ 1754.825596] ? create_task_io_context+0x2c/0x430 [ 1754.826300] should_failslab+0x5/0x20 [ 1754.826882] kmem_cache_alloc_node+0x55/0x330 [ 1754.827551] create_task_io_context+0x2c/0x430 [ 1754.828232] submit_bio_checks+0x1382/0x1730 [ 1754.828888] ? __lockdep_reset_lock+0x180/0x180 [ 1754.829574] ? lock_acquire+0x197/0x470 [ 1754.830179] ? trace_event_raw_event_block_rq_requeue+0x560/0x560 [ 1754.831113] ? lock_release+0x680/0x680 [ 1754.831708] ? find_held_lock+0x2c/0x110 [ 1754.832321] ? __bio_add_page+0x328/0x430 [ 1754.832945] submit_bio_noacct+0x82/0x1010 [ 1754.833585] ? blk_queue_enter+0xc30/0xc30 [ 1754.834238] submit_bio+0xf3/0x4e0 [ 1754.834787] ? submit_bio_noacct+0x1010/0x1010 [ 1754.835462] ? bio_alloc_bioset+0x2a1/0x600 [ 1754.836108] ? bio_add_pc_page+0x100/0x100 [ 1754.836744] ? bvec_alloc+0x2f0/0x2f0 [ 1754.837325] iomap_dio_submit_bio+0x295/0x360 [ 1754.838009] iomap_dio_bio_actor+0x4b3/0xef0 [ 1754.838691] iomap_dio_actor+0x36f/0x560 [ 1754.839310] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1754.840001] ? do_syscall_64+0x33/0x40 [ 1754.840584] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1754.841385] iomap_apply+0x289/0x810 [ 1754.841946] ? iomap_dio_rw+0x90/0x90 [ 1754.842523] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1754.843402] ? mark_held_locks+0x9e/0xe0 [ 1754.844028] ? filemap_check_errors+0xa5/0x150 [ 1754.844717] __iomap_dio_rw+0x6cd/0x1110 [ 1754.845317] ? iomap_dio_rw+0x90/0x90 [ 1754.845912] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1754.846596] ? ext4_orphan_add+0x253/0x9e0 [ 1754.847235] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1754.847977] ? ext4_empty_dir+0xae0/0xae0 [ 1754.848597] ? jbd2__journal_start+0xf3/0x7e0 [ 1754.849270] iomap_dio_rw+0x31/0x90 [ 1754.849818] ext4_file_write_iter+0xb26/0x18d0 [ 1754.850513] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1754.851198] ? kasan_save_stack+0x32/0x40 [ 1754.851811] ? kasan_save_stack+0x1b/0x40 [ 1754.852425] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1754.853175] ? iter_file_splice_write+0x16d/0xc30 [ 1754.853887] ? direct_splice_actor+0x10f/0x170 [ 1754.854557] ? splice_direct_to_actor+0x387/0x980 [ 1754.855286] ? do_splice_direct+0x1c4/0x290 [ 1754.855917] ? do_sendfile+0x553/0x11e0 [ 1754.856505] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1754.857173] ? do_syscall_64+0x33/0x40 [ 1754.857747] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1754.858543] do_iter_readv_writev+0x476/0x750 [ 1754.859216] ? new_sync_write+0x660/0x660 [ 1754.859814] ? avc_policy_seqno+0x9/0x70 [ 1754.860423] ? selinux_file_permission+0x92/0x520 [ 1754.861158] ? security_file_permission+0xb1/0xe0 [ 1754.861895] do_iter_write+0x191/0x700 [ 1754.862485] ? trace_hardirqs_on+0x5b/0x180 [ 1754.863152] vfs_iter_write+0x70/0xa0 [ 1754.863711] iter_file_splice_write+0x762/0xc30 [ 1754.864425] ? generic_splice_sendpage+0x140/0x140 [ 1754.865160] ? security_file_permission+0xb1/0xe0 [ 1754.865878] ? generic_splice_sendpage+0x140/0x140 [ 1754.866603] direct_splice_actor+0x10f/0x170 [ 1754.867268] splice_direct_to_actor+0x387/0x980 [ 1754.867960] ? pipe_to_sendpage+0x380/0x380 [ 1754.868612] ? do_splice_to+0x160/0x160 [ 1754.869190] ? security_file_permission+0xb1/0xe0 [ 1754.869916] do_splice_direct+0x1c4/0x290 [ 1754.870536] ? splice_direct_to_actor+0x980/0x980 [ 1754.871253] ? avc_policy_seqno+0x9/0x70 [ 1754.871874] ? security_file_permission+0xb1/0xe0 [ 1754.872617] do_sendfile+0x553/0x11e0 [ 1754.873206] ? do_pwritev+0x270/0x270 [ 1754.873786] ? wait_for_completion_io+0x270/0x270 [ 1754.874512] ? rcu_read_lock_any_held+0x75/0xa0 [ 1754.875216] ? vfs_write+0x354/0xb10 [ 1754.875782] __x64_sys_sendfile64+0x1d1/0x210 [ 1754.876451] ? __ia32_sys_sendfile+0x220/0x220 [ 1754.877152] do_syscall_64+0x33/0x40 [ 1754.877705] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1754.878460] RIP: 0033:0x7fe5e9dcbb19 [ 1754.879024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1754.881648] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1754.882791] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1754.883851] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1754.884911] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1754.885963] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1754.886996] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1754.898747] FAULT_INJECTION: forcing a failure. [ 1754.898747] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.900417] CPU: 1 PID: 10632 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1754.901426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1754.902605] Call Trace: [ 1754.903005] dump_stack+0x107/0x167 [ 1754.903543] should_fail.cold+0x5/0xa [ 1754.904108] ? iter_file_splice_write+0x16d/0xc30 [ 1754.904820] should_failslab+0x5/0x20 [ 1754.905374] __kmalloc+0x72/0x390 [ 1754.905896] iter_file_splice_write+0x16d/0xc30 [ 1754.906580] ? atime_needs_update+0x600/0x600 [ 1754.907249] ? generic_splice_sendpage+0x140/0x140 [ 1754.907962] ? pipe_to_user+0x170/0x170 [ 1754.908558] ? security_file_permission+0xb1/0xe0 [ 1754.909270] ? generic_splice_sendpage+0x140/0x140 [ 1754.909989] direct_splice_actor+0x10f/0x170 [ 1754.910626] splice_direct_to_actor+0x387/0x980 [ 1754.911315] ? pipe_to_sendpage+0x380/0x380 14:35:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x80045440, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1754.911942] ? do_splice_to+0x160/0x160 [ 1754.912632] ? security_file_permission+0xb1/0xe0 [ 1754.913343] do_splice_direct+0x1c4/0x290 [ 1754.913947] ? splice_direct_to_actor+0x980/0x980 [ 1754.914644] ? avc_policy_seqno+0x9/0x70 [ 1754.915257] ? security_file_permission+0xb1/0xe0 [ 1754.915976] do_sendfile+0x553/0x11e0 [ 1754.916552] ? do_pwritev+0x270/0x270 [ 1754.917114] ? wait_for_completion_io+0x270/0x270 [ 1754.917831] ? rcu_read_lock_any_held+0x75/0xa0 [ 1754.918507] ? vfs_write+0x354/0xb10 [ 1754.919069] __x64_sys_sendfile64+0x1d1/0x210 [ 1754.919721] ? __ia32_sys_sendfile+0x220/0x220 [ 1754.920400] do_syscall_64+0x33/0x40 [ 1754.920945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1754.921685] RIP: 0033:0x7f1b0b8ffb19 [ 1754.922231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1754.924887] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1754.926008] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1754.927050] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1754.928092] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1754.929119] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000001 [ 1754.930154] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 [ 1754.952551] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1754.955784] EXT4-fs (loop6): get root inode failed [ 1754.956591] EXT4-fs (loop6): mount failed 14:35:43 executing program 4: unshare(0x28020600) semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000008000000000076da76c4e4f082c1048dcc22006b31f3c8f0cb3949f8e9ccfd62c5cd5a3d3529c729dea673951fd9f47eef68869bd87eb9f92a2e3dbfd87e33bfa61489c7740f139df0e8ab708cb3c4ff274f3a1d34ef2f4ccc48"]) r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x3, 0xee01, 0x0, 0x0, 0xee01}}) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000180)=""/4096) unshare(0x48020200) 14:35:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x80086601, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:35:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:35:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 8) [ 1755.140761] FAULT_INJECTION: forcing a failure. [ 1755.140761] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.142458] CPU: 1 PID: 10657 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1755.143458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1755.144637] Call Trace: [ 1755.145024] dump_stack+0x107/0x167 [ 1755.145568] should_fail.cold+0x5/0xa [ 1755.146120] ? create_object.isra.0+0x3a/0xa20 [ 1755.146803] should_failslab+0x5/0x20 [ 1755.147357] kmem_cache_alloc+0x5b/0x310 [ 1755.147947] ? igrab+0xc0/0xc0 [ 1755.148422] create_object.isra.0+0x3a/0xa20 [ 1755.149069] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1755.149804] __kmalloc+0x16e/0x390 [ 1755.150334] iter_file_splice_write+0x16d/0xc30 [ 1755.151007] ? atime_needs_update+0x600/0x600 [ 1755.151682] ? generic_splice_sendpage+0x140/0x140 [ 1755.152391] ? pipe_to_user+0x170/0x170 [ 1755.153001] ? security_file_permission+0xb1/0xe0 [ 1755.153697] ? generic_splice_sendpage+0x140/0x140 [ 1755.154413] direct_splice_actor+0x10f/0x170 [ 1755.155058] splice_direct_to_actor+0x387/0x980 [ 1755.155736] ? pipe_to_sendpage+0x380/0x380 [ 1755.156375] ? do_splice_to+0x160/0x160 [ 1755.156949] ? security_file_permission+0xb1/0xe0 [ 1755.157674] do_splice_direct+0x1c4/0x290 [ 1755.158276] ? splice_direct_to_actor+0x980/0x980 [ 1755.158981] ? avc_policy_seqno+0x9/0x70 [ 1755.159577] ? security_file_permission+0xb1/0xe0 [ 1755.160294] do_sendfile+0x553/0x11e0 [ 1755.160860] ? do_pwritev+0x270/0x270 [ 1755.161421] ? wait_for_completion_io+0x270/0x270 [ 1755.162147] ? rcu_read_lock_any_held+0x75/0xa0 [ 1755.162837] ? vfs_write+0x354/0xb10 [ 1755.163386] __x64_sys_sendfile64+0x1d1/0x210 [ 1755.164055] ? __ia32_sys_sendfile+0x220/0x220 [ 1755.164744] do_syscall_64+0x33/0x40 [ 1755.165284] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1755.166038] RIP: 0033:0x7f1b0b8ffb19 [ 1755.166597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1755.169267] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1755.170370] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1755.171424] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1755.172472] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1755.173503] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000001 [ 1755.174545] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 [ 1755.184459] isofs_fill_super: get root inode failed [ 1755.198060] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1755.200201] EXT4-fs (loop6): get root inode failed [ 1755.200884] EXT4-fs (loop6): mount failed 14:35:44 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000", 0x9b, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:35:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x1d}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:35:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:35:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x80087601, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1755.448617] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1755.473988] EXT4-fs (loop6): get root inode failed [ 1755.474826] EXT4-fs (loop6): mount failed [ 1755.486964] isofs_fill_super: get root inode failed 14:35:58 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x7ffffffff000, 0xf0ff1f00000000) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="06000001", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf25820000000c009900050000006b000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote, 0xffff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x41) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000000c0)=0x4, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800e04b29aaa5db801d000000000100000000000500000024386a562b5020abc1940f00800c00008008150d00ac041400"], 0x28}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r2 = syz_open_dev$mouse(&(0x7f0000000300), 0xfff, 0xca843) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf00030000001b4000006c00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x95}, 0x40000) ioctl$FICLONE(r2, 0x40049409, r0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x698}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x40, 0xaeec, 0x1, &(0x7f0000000100)={[0x3ff]}, 0x8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) openat2(r3, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x800, 0x1b9}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e24, 0x6, @mcast2, 0x4}, 0x1c) pread64(r4, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) 14:35:58 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000", 0x9b, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:35:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 30) 14:35:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 9) 14:35:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0xc0045878, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:35:58 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:35:58 executing program 7: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES16=r6], 0xffffffffffffff05) fallocate(r1, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0xfffffff0, 0x0, 0x10000000}) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 14:35:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x21}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 1769.916031] FAULT_INJECTION: forcing a failure. [ 1769.916031] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.918070] CPU: 1 PID: 10689 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1769.919294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1769.920735] Call Trace: [ 1769.921212] dump_stack+0x107/0x167 [ 1769.921857] should_fail.cold+0x5/0xa [ 1769.922534] ? create_object.isra.0+0x3a/0xa20 [ 1769.923350] should_failslab+0x5/0x20 [ 1769.924019] kmem_cache_alloc+0x5b/0x310 [ 1769.924739] ? __lock_acquire+0x1657/0x5b00 [ 1769.925510] create_object.isra.0+0x3a/0xa20 [ 1769.926285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1769.927196] kmem_cache_alloc_node+0x169/0x330 [ 1769.928012] create_task_io_context+0x2c/0x430 [ 1769.928817] submit_bio_checks+0x1382/0x1730 [ 1769.929590] ? __lockdep_reset_lock+0x180/0x180 [ 1769.930407] ? lock_acquire+0x197/0x470 [ 1769.931127] ? trace_event_raw_event_block_rq_requeue+0x560/0x560 [ 1769.932209] ? lock_release+0x680/0x680 [ 1769.932904] ? find_held_lock+0x2c/0x110 [ 1769.933618] ? __bio_add_page+0x328/0x430 [ 1769.934352] submit_bio_noacct+0x82/0x1010 [ 1769.935119] ? blk_queue_enter+0xc30/0xc30 [ 1769.935889] submit_bio+0xf3/0x4e0 [ 1769.936033] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1769.936513] ? submit_bio_noacct+0x1010/0x1010 [ 1769.936541] ? bio_alloc_bioset+0x2a1/0x600 [ 1769.937913] EXT4-fs (loop6): get root inode failed [ 1769.938414] ? bio_add_pc_page+0x100/0x100 [ 1769.938439] ? bvec_alloc+0x2f0/0x2f0 [ 1769.938473] iomap_dio_submit_bio+0x295/0x360 [ 1769.938897] EXT4-fs (loop6): mount failed [ 1769.939730] iomap_dio_bio_actor+0x4b3/0xef0 [ 1769.939780] iomap_dio_actor+0x36f/0x560 [ 1769.943697] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1769.944506] ? do_syscall_64+0x33/0x40 [ 1769.945186] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1769.946121] iomap_apply+0x289/0x810 [ 1769.946782] ? iomap_dio_rw+0x90/0x90 [ 1769.947469] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1769.948488] ? mark_held_locks+0x9e/0xe0 [ 1769.949223] ? filemap_check_errors+0xa5/0x150 [ 1769.950031] __iomap_dio_rw+0x6cd/0x1110 [ 1769.950743] ? iomap_dio_rw+0x90/0x90 [ 1769.951447] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1769.952130] ? ext4_orphan_add+0x253/0x9e0 [ 1769.952762] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1769.953484] ? ext4_empty_dir+0xae0/0xae0 [ 1769.954100] ? jbd2__journal_start+0xf3/0x7e0 [ 1769.954780] iomap_dio_rw+0x31/0x90 [ 1769.955339] ext4_file_write_iter+0xb26/0x18d0 [ 1769.956042] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1769.956726] ? kasan_save_stack+0x32/0x40 [ 1769.957353] ? lock_chain_count+0x20/0x20 [ 1769.957969] ? direct_splice_actor+0x10f/0x170 [ 1769.958649] ? splice_direct_to_actor+0x387/0x980 [ 1769.959358] ? do_splice_direct+0x1c4/0x290 [ 1769.959998] ? do_sendfile+0x553/0x11e0 [ 1769.960592] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1769.961281] ? do_syscall_64+0x33/0x40 [ 1769.961862] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1769.962661] do_iter_readv_writev+0x476/0x750 [ 1769.963342] ? new_sync_write+0x660/0x660 [ 1769.963959] ? avc_policy_seqno+0x9/0x70 [ 1769.964563] ? selinux_file_permission+0x92/0x520 [ 1769.965276] ? security_file_permission+0xb1/0xe0 [ 1769.966005] do_iter_write+0x191/0x700 [ 1769.966609] vfs_iter_write+0x70/0xa0 [ 1769.967188] iter_file_splice_write+0x762/0xc30 [ 1769.967903] ? generic_splice_sendpage+0x140/0x140 [ 1769.968663] ? security_file_permission+0xb1/0xe0 [ 1769.969384] ? generic_splice_sendpage+0x140/0x140 [ 1769.970115] direct_splice_actor+0x10f/0x170 [ 1769.970776] splice_direct_to_actor+0x387/0x980 [ 1769.971486] ? pipe_to_sendpage+0x380/0x380 [ 1769.972136] ? do_splice_to+0x160/0x160 [ 1769.972734] ? security_file_permission+0xb1/0xe0 [ 1769.973448] do_splice_direct+0x1c4/0x290 [ 1769.974068] ? splice_direct_to_actor+0x980/0x980 [ 1769.974784] ? avc_policy_seqno+0x9/0x70 [ 1769.975411] ? security_file_permission+0xb1/0xe0 [ 1769.976130] do_sendfile+0x553/0x11e0 [ 1769.976702] ? do_pwritev+0x270/0x270 [ 1769.977278] ? wait_for_completion_io+0x270/0x270 [ 1769.978001] ? rcu_read_lock_any_held+0x75/0xa0 [ 1769.978691] ? vfs_write+0x354/0xb10 [ 1769.979270] __x64_sys_sendfile64+0x1d1/0x210 [ 1769.979942] ? __ia32_sys_sendfile+0x220/0x220 [ 1769.980639] do_syscall_64+0x33/0x40 [ 1769.981195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1769.981962] RIP: 0033:0x7fe5e9dcbb19 [ 1769.982524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1769.985235] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1769.986370] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1769.987437] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1769.988492] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1769.989552] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1769.990610] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1770.001099] FAULT_INJECTION: forcing a failure. [ 1770.001099] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.002254] CPU: 0 PID: 10695 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1770.002893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.003673] Call Trace: [ 1770.003929] dump_stack+0x107/0x167 [ 1770.004270] should_fail.cold+0x5/0xa [ 1770.004635] ? jbd2__journal_start+0x190/0x7e0 [ 1770.005069] should_failslab+0x5/0x20 [ 1770.005431] kmem_cache_alloc+0x5b/0x310 [ 1770.005814] jbd2__journal_start+0x190/0x7e0 [ 1770.006234] __ext4_journal_start_sb+0x214/0x390 [ 1770.006679] ext4_dirty_inode+0xbc/0x130 [ 1770.007069] ? ext4_setattr+0x2160/0x2160 [ 1770.007453] __mark_inode_dirty+0x492/0xd40 [ 1770.007860] generic_update_time+0x21c/0x370 [ 1770.008281] file_update_time+0x43a/0x520 [ 1770.008687] ? evict_inodes+0x420/0x420 [ 1770.009068] ? down_write_killable+0x180/0x180 [ 1770.009499] file_modified+0x7d/0xa0 [ 1770.009853] ext4_file_write_iter+0x906/0x18d0 [ 1770.010291] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1770.010712] ? kasan_save_stack+0x32/0x40 [ 1770.011120] ? kasan_save_stack+0x1b/0x40 [ 1770.011505] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.011977] ? iter_file_splice_write+0x16d/0xc30 [ 1770.012420] ? direct_splice_actor+0x10f/0x170 [ 1770.012839] ? splice_direct_to_actor+0x387/0x980 [ 1770.013280] ? do_splice_direct+0x1c4/0x290 [ 1770.013682] ? do_sendfile+0x553/0x11e0 [ 1770.014064] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1770.014491] ? do_syscall_64+0x33/0x40 [ 1770.014849] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.015373] do_iter_readv_writev+0x476/0x750 [ 1770.015789] ? new_sync_write+0x660/0x660 [ 1770.016177] ? avc_policy_seqno+0x9/0x70 [ 1770.016551] ? selinux_file_permission+0x92/0x520 [ 1770.017005] ? security_file_permission+0xb1/0xe0 [ 1770.017461] do_iter_write+0x191/0x700 [ 1770.017824] ? trace_hardirqs_on+0x5b/0x180 [ 1770.018226] vfs_iter_write+0x70/0xa0 [ 1770.018583] iter_file_splice_write+0x762/0xc30 [ 1770.019047] ? generic_splice_sendpage+0x140/0x140 [ 1770.019520] ? security_file_permission+0xb1/0xe0 [ 1770.019963] ? generic_splice_sendpage+0x140/0x140 [ 1770.020423] direct_splice_actor+0x10f/0x170 [ 1770.020838] splice_direct_to_actor+0x387/0x980 [ 1770.021275] ? pipe_to_sendpage+0x380/0x380 [ 1770.021678] ? do_splice_to+0x160/0x160 [ 1770.022047] ? security_file_permission+0xb1/0xe0 [ 1770.022495] do_splice_direct+0x1c4/0x290 [ 1770.022876] ? splice_direct_to_actor+0x980/0x980 [ 1770.023346] ? avc_policy_seqno+0x9/0x70 [ 1770.023732] ? security_file_permission+0xb1/0xe0 [ 1770.024191] do_sendfile+0x553/0x11e0 [ 1770.024556] ? do_pwritev+0x270/0x270 [ 1770.024912] ? wait_for_completion_io+0x270/0x270 [ 1770.025359] ? rcu_read_lock_any_held+0x75/0xa0 [ 1770.025782] ? vfs_write+0x354/0xb10 [ 1770.026130] __x64_sys_sendfile64+0x1d1/0x210 [ 1770.026539] ? __ia32_sys_sendfile+0x220/0x220 [ 1770.026984] do_syscall_64+0x33/0x40 [ 1770.027324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.027791] RIP: 0033:0x7f1b0b8ffb19 [ 1770.028130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.029785] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1770.030476] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1770.031135] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1770.031775] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.032415] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000001 [ 1770.033059] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 14:35:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0xc0045878, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:35:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 10) [ 1770.138831] isofs_fill_super: get root inode failed [ 1770.148775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10703 comm=syz-executor.4 14:35:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1770.176415] FAULT_INJECTION: forcing a failure. [ 1770.176415] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.177429] CPU: 0 PID: 10716 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1770.178034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.178741] Call Trace: [ 1770.178998] dump_stack+0x107/0x167 [ 1770.179322] should_fail.cold+0x5/0xa [ 1770.179663] ? create_object.isra.0+0x3a/0xa20 [ 1770.180058] should_failslab+0x5/0x20 [ 1770.180397] kmem_cache_alloc+0x5b/0x310 [ 1770.180749] create_object.isra.0+0x3a/0xa20 [ 1770.181135] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.181573] kmem_cache_alloc+0x159/0x310 [ 1770.181941] jbd2__journal_start+0x190/0x7e0 [ 1770.182329] __ext4_journal_start_sb+0x214/0x390 [ 1770.182748] ext4_dirty_inode+0xbc/0x130 [ 1770.183116] ? ext4_setattr+0x2160/0x2160 [ 1770.183478] __mark_inode_dirty+0x492/0xd40 [ 1770.183856] generic_update_time+0x21c/0x370 [ 1770.184248] file_update_time+0x43a/0x520 [ 1770.184602] ? evict_inodes+0x420/0x420 [ 1770.184958] ? down_write_killable+0x180/0x180 [ 1770.185356] file_modified+0x7d/0xa0 [ 1770.185687] ext4_file_write_iter+0x906/0x18d0 [ 1770.186087] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1770.186485] ? kasan_save_stack+0x32/0x40 [ 1770.186838] ? kasan_save_stack+0x1b/0x40 [ 1770.187218] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.187648] ? iter_file_splice_write+0x16d/0xc30 [ 1770.188074] ? direct_splice_actor+0x10f/0x170 [ 1770.188463] ? splice_direct_to_actor+0x387/0x980 [ 1770.188882] ? do_splice_direct+0x1c4/0x290 [ 1770.189248] ? do_sendfile+0x553/0x11e0 [ 1770.189596] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1770.189989] ? do_syscall_64+0x33/0x40 [ 1770.190326] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.190781] do_iter_readv_writev+0x476/0x750 [ 1770.191191] ? new_sync_write+0x660/0x660 [ 1770.191546] ? avc_policy_seqno+0x9/0x70 [ 1770.191900] ? selinux_file_permission+0x92/0x520 [ 1770.192320] ? security_file_permission+0xb1/0xe0 [ 1770.192744] do_iter_write+0x191/0x700 [ 1770.193083] ? trace_hardirqs_on+0x5b/0x180 [ 1770.193470] vfs_iter_write+0x70/0xa0 [ 1770.193797] iter_file_splice_write+0x762/0xc30 [ 1770.194224] ? generic_splice_sendpage+0x140/0x140 [ 1770.194657] ? security_file_permission+0xb1/0xe0 [ 1770.195101] ? generic_splice_sendpage+0x140/0x140 [ 1770.195521] direct_splice_actor+0x10f/0x170 [ 1770.195908] splice_direct_to_actor+0x387/0x980 [ 1770.196307] ? pipe_to_sendpage+0x380/0x380 [ 1770.196679] ? do_splice_to+0x160/0x160 [ 1770.197019] ? security_file_permission+0xb1/0xe0 [ 1770.197442] do_splice_direct+0x1c4/0x290 [ 1770.197793] ? splice_direct_to_actor+0x980/0x980 [ 1770.198200] ? avc_policy_seqno+0x9/0x70 [ 1770.198551] ? security_file_permission+0xb1/0xe0 [ 1770.198991] do_sendfile+0x553/0x11e0 [ 1770.199328] ? do_pwritev+0x270/0x270 [ 1770.199654] ? wait_for_completion_io+0x270/0x270 [ 1770.200070] ? rcu_read_lock_any_held+0x75/0xa0 [ 1770.200469] ? vfs_write+0x354/0xb10 [ 1770.200793] __x64_sys_sendfile64+0x1d1/0x210 [ 1770.201182] ? __ia32_sys_sendfile+0x220/0x220 [ 1770.201579] do_syscall_64+0x33/0x40 [ 1770.201896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.202334] RIP: 0033:0x7f1b0b8ffb19 [ 1770.202654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.204227] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1770.204871] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1770.205469] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1770.206067] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.206670] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000002 [ 1770.207289] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 14:35:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x25}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:35:59 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b8000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181300000000000000000000150000000022", 0x9d, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:35:59 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x12) ftruncate(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = creat(0x0, 0x183) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="01480f000000000000000000", @ANYRES64=r0]) pread64(r2, &(0x7f0000000140)=""/254, 0xfe, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=@alg, 0x0, 0x80000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 14:35:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0xc0189436, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:35:59 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0xd}, &(0x7f0000000280)='./file0\x00', 0x18}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$bt_hci(r4, 0x0, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x82d, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xaa4, 0x0, 0xfff}, 0x0, 0x0, r0, 0x0) ptrace$getenv(0x4201, 0x0, 0xba, &(0x7f0000000200)) syz_io_uring_setup(0x3ac4, &(0x7f0000000380)={0x0, 0x488d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) ioctl$FIOCLEX(r8, 0x5451) close(r8) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x8, 0xb1, 0x7, 0x0, 0x7fff, 0x408, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd1f, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80, 0x100, 0x8001, 0x2, 0x9, 0x0, 0x4d, 0x0, 0x7fffffff, 0x0, 0x1}, 0x0, 0xb, r8, 0xa) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1770.307527] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1770.321309] EXT4-fs (loop6): get root inode failed [ 1770.322086] EXT4-fs (loop6): mount failed 14:35:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 11) [ 1770.369511] FAULT_INJECTION: forcing a failure. [ 1770.369511] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.370461] CPU: 0 PID: 10744 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1770.371027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1770.371858] Call Trace: [ 1770.372082] dump_stack+0x107/0x167 [ 1770.372383] should_fail.cold+0x5/0xa [ 1770.372693] ? jbd2__journal_start+0x190/0x7e0 [ 1770.373064] should_failslab+0x5/0x20 [ 1770.373379] kmem_cache_alloc+0x5b/0x310 [ 1770.373715] jbd2__journal_start+0x190/0x7e0 [ 1770.374075] __ext4_journal_start_sb+0x214/0x390 [ 1770.374462] ext4_file_write_iter+0xdbf/0x18d0 [ 1770.374838] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1770.375221] ? kasan_save_stack+0x32/0x40 [ 1770.375555] ? kasan_save_stack+0x1b/0x40 [ 1770.375897] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1770.376309] ? iter_file_splice_write+0x16d/0xc30 [ 1770.376696] ? direct_splice_actor+0x10f/0x170 [ 1770.377065] ? splice_direct_to_actor+0x387/0x980 [ 1770.377447] ? do_splice_direct+0x1c4/0x290 [ 1770.377794] ? do_sendfile+0x553/0x11e0 [ 1770.378116] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1770.378487] ? do_syscall_64+0x33/0x40 [ 1770.378800] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.379275] do_iter_readv_writev+0x476/0x750 [ 1770.379638] ? new_sync_write+0x660/0x660 [ 1770.379975] ? avc_policy_seqno+0x9/0x70 [ 1770.380305] ? selinux_file_permission+0x92/0x520 [ 1770.380698] ? security_file_permission+0xb1/0xe0 [ 1770.381094] do_iter_write+0x191/0x700 [ 1770.381413] ? trace_hardirqs_on+0x5b/0x180 [ 1770.381771] vfs_iter_write+0x70/0xa0 [ 1770.382082] iter_file_splice_write+0x762/0xc30 [ 1770.382473] ? generic_splice_sendpage+0x140/0x140 [ 1770.382889] ? security_file_permission+0xb1/0xe0 [ 1770.383282] ? generic_splice_sendpage+0x140/0x140 [ 1770.383676] direct_splice_actor+0x10f/0x170 [ 1770.384035] splice_direct_to_actor+0x387/0x980 [ 1770.384415] ? pipe_to_sendpage+0x380/0x380 [ 1770.384764] ? do_splice_to+0x160/0x160 [ 1770.385088] ? security_file_permission+0xb1/0xe0 [ 1770.385491] do_splice_direct+0x1c4/0x290 [ 1770.385826] ? splice_direct_to_actor+0x980/0x980 [ 1770.386213] ? avc_policy_seqno+0x9/0x70 [ 1770.386544] ? security_file_permission+0xb1/0xe0 [ 1770.386961] do_sendfile+0x553/0x11e0 [ 1770.387280] ? do_pwritev+0x270/0x270 [ 1770.387598] ? wait_for_completion_io+0x270/0x270 [ 1770.387993] ? rcu_read_lock_any_held+0x75/0xa0 [ 1770.388371] ? vfs_write+0x354/0xb10 [ 1770.388678] __x64_sys_sendfile64+0x1d1/0x210 [ 1770.389039] ? __ia32_sys_sendfile+0x220/0x220 [ 1770.389414] do_syscall_64+0x33/0x40 [ 1770.389720] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1770.390129] RIP: 0033:0x7f1b0b8ffb19 [ 1770.390430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1770.391910] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1770.392523] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1770.393090] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1770.393658] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1770.394226] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000002 [ 1770.394797] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 14:35:59 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="c80000002000210c00100000000000000200000099009680080022000a01010139c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a460c00ff00c8990000000000000000001800ff800a0015002c5c282d9700000008002d00", @ANYRES32=0x0, @ANYBLOB="9235bf52589fcfb726dc9048e261efc2fa9e1e0c8688a302d46f859d8ef0f7003f15829ae33c0898000000001b9e7f280eeea014adac2e971c9a4b134f120d899a54ce82b270430dd9206facb0010b3fbfa7b8950e5c0d0d3267743ee35f2469acc7360b55ab18e368d29d963039bcb228d86c56212086423f1f20e78ffa6d56e809f53a446f9ed73281bef9b19f26e8bbf32c13ea1f006db8c0f4719dc6661f46bb3dc32e84f61392cf1fe95598f138c4afbeb81b21ecc45ed21c2d3cca9c00000000e4162c8e900a7b20c136d6e6157565f2da1d000000000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) [ 1770.473260] isofs_fill_super: get root inode failed [ 1784.503612] FAULT_INJECTION: forcing a failure. [ 1784.503612] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.505739] CPU: 0 PID: 10755 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1784.506963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.508419] Call Trace: [ 1784.508896] dump_stack+0x107/0x167 [ 1784.509556] should_fail.cold+0x5/0xa [ 1784.510235] ? create_object.isra.0+0x3a/0xa20 [ 1784.511087] should_failslab+0x5/0x20 [ 1784.511780] kmem_cache_alloc+0x5b/0x310 [ 1784.512527] ? ext4_dirty_inode+0x107/0x130 [ 1784.512587] FAULT_INJECTION: forcing a failure. [ 1784.512587] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.513296] create_object.isra.0+0x3a/0xa20 [ 1784.513322] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1784.513354] kmem_cache_alloc+0x159/0x310 [ 1784.517075] jbd2__journal_start+0x190/0x7e0 [ 1784.517883] __ext4_journal_start_sb+0x214/0x390 [ 1784.518727] ext4_file_write_iter+0xdbf/0x18d0 [ 1784.519573] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1784.520397] ? kasan_save_stack+0x32/0x40 [ 1784.521128] ? kasan_save_stack+0x1b/0x40 [ 1784.521873] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1784.522762] ? iter_file_splice_write+0x16d/0xc30 [ 1784.523645] ? direct_splice_actor+0x10f/0x170 [ 1784.524448] ? splice_direct_to_actor+0x387/0x980 [ 1784.525316] ? do_splice_direct+0x1c4/0x290 [ 1784.526074] ? do_sendfile+0x553/0x11e0 [ 1784.526797] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1784.527624] ? do_syscall_64+0x33/0x40 [ 1784.528329] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.529273] do_iter_readv_writev+0x476/0x750 [ 1784.530085] ? new_sync_write+0x660/0x660 [ 1784.530807] ? avc_policy_seqno+0x9/0x70 [ 1784.531542] ? selinux_file_permission+0x92/0x520 [ 1784.532426] ? security_file_permission+0xb1/0xe0 [ 1784.533289] do_iter_write+0x191/0x700 [ 1784.533979] ? trace_hardirqs_on+0x5b/0x180 [ 1784.534743] vfs_iter_write+0x70/0xa0 [ 1784.535430] iter_file_splice_write+0x762/0xc30 [ 1784.536263] ? generic_splice_sendpage+0x140/0x140 [ 1784.537150] ? security_file_permission+0xb1/0xe0 [ 1784.538020] ? generic_splice_sendpage+0x140/0x140 [ 1784.538886] direct_splice_actor+0x10f/0x170 [ 1784.539676] splice_direct_to_actor+0x387/0x980 [ 1784.540426] ? pipe_to_sendpage+0x380/0x380 [ 1784.541061] ? do_splice_to+0x160/0x160 [ 1784.541653] ? security_file_permission+0xb1/0xe0 [ 1784.542363] do_splice_direct+0x1c4/0x290 [ 1784.542981] ? splice_direct_to_actor+0x980/0x980 [ 1784.543688] ? avc_policy_seqno+0x9/0x70 [ 1784.544302] ? security_file_permission+0xb1/0xe0 [ 1784.545013] do_sendfile+0x553/0x11e0 [ 1784.545592] ? do_pwritev+0x270/0x270 [ 1784.546154] ? wait_for_completion_io+0x270/0x270 [ 1784.546856] ? rcu_read_lock_any_held+0x75/0xa0 [ 1784.547554] ? vfs_write+0x354/0xb10 [ 1784.548118] __x64_sys_sendfile64+0x1d1/0x210 [ 1784.548790] ? __ia32_sys_sendfile+0x220/0x220 [ 1784.549475] do_syscall_64+0x33/0x40 [ 1784.550015] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.550768] RIP: 0033:0x7f1b0b8ffb19 [ 1784.551323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.553993] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1784.555125] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1784.556151] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1784.557196] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1784.558247] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000002 [ 1784.559291] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 [ 1784.560372] CPU: 1 PID: 10769 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1784.561053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.561858] Call Trace: [ 1784.562127] dump_stack+0x107/0x167 [ 1784.562486] should_fail.cold+0x5/0xa [ 1784.562860] ? mempool_alloc+0x148/0x360 [ 1784.563263] ? mempool_free_pages+0x20/0x20 [ 1784.563682] should_failslab+0x5/0x20 [ 1784.564059] kmem_cache_alloc+0x5b/0x310 [ 1784.564453] ? mempool_free_pages+0x20/0x20 [ 1784.564868] mempool_alloc+0x148/0x360 [ 1784.565254] ? mempool_resize+0x7d0/0x7d0 [ 1784.565662] ? mark_lock+0xf5/0x2df0 [ 1784.566024] ? perf_trace_lock+0xac/0x490 [ 1784.566440] __sg_alloc_table+0x24e/0x390 [ 1784.566853] sg_alloc_table_chained+0x9b/0x1f0 14:36:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x26}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:36:13 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b8000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181300000000000000000000150000000022", 0x9d, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:36:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:36:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0xc020660b, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:36:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 12) 14:36:13 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c460981088f01000000000000000200060001000080b20100000000000040000000000000000f02000000000000018000000010380002000800ff07080003000000c80a0000090000000000000000100000000000000004000000000000000000000000000004000000000000000900000000000000010000004f0400000800000000000000e400000000000000ffffffff00000000a492000000000000ff0100000000000005000000000000004051fc834d71fbf72564c0f007f85eb9f72b84123ab4023f4075e1e6fcfd06281943d9a0493c84b950031c2b593ad274732da78b05f25b9d3cef7ffe1062ad0a409da07705ff156321076d68abac9736a9fbef7f5b5e3adc8ad2e42e78dc2743933ca6beeeabc05bb084e3a27d6fbd7447ce9867d8b20cd465bae1d28a2696e2b08985020337c974e9fef38d8581e6f049183a99b3028c5153548654c8113f250c1baa6bb981500484d097eb109676b4f2181554c8c8070668bd48b0303ef72d"], 0x170) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0, 0x0, 0x801001, 0x0) r2 = openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000f6ffff2d2f66696c653000"]) faccessat(r3, &(0x7f0000000440)='./file0\x00', 0xa8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000580)) r5 = fsmount(r0, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r6, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) clone3(&(0x7f0000000a00)={0x8001000, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0), {0x8}, &(0x7f0000000380)=""/83, 0x53, &(0x7f0000000900)=""/244, &(0x7f0000000480), 0x0, {r6}}, 0x58) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(0xffffffffffffffff, 0x0, 0x4) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000004c0)) 14:36:13 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="c80000002000210c00100000000000000200000099009680080022000a01010139c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a460c00ff00c8990000000000000000001800ff800a0015002c5c282d9700000008002d00", @ANYRES32=0x0, @ANYBLOB="9235bf52589fcfb726dc9048e261efc2fa9e1e0c8688a302d46f859d8ef0f7003f15829ae33c0898000000001b9e7f280eeea014adac2e971c9a4b134f120d899a54ce82b270430dd9206facb0010b3fbfa7b8950e5c0d0d3267743ee35f2469acc7360b55ab18e368d29d963039bcb228d86c56212086423f1f20e78ffa6d56e809f53a446f9ed73281bef9b19f26e8bbf32c13ea1f006db8c0f4719dc6661f46bb3dc32e84f61392cf1fe95598f138c4afbeb81b21ecc45ed21c2d3cca9c00000000e4162c8e900a7b20c136d6e6157565f2da1d000000000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) 14:36:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 31) [ 1784.567310] ? sg_alloc_table_chained+0x1f0/0x1f0 [ 1784.567899] scsi_alloc_sgtables+0x236/0xaf0 [ 1784.568349] ? scsi_cmd_runtime_exceeced+0x1d0/0x1d0 [ 1784.568839] ? lockdep_init_map_type+0x2c7/0x780 [ 1784.569301] sd_init_command+0x516/0x3550 [ 1784.569713] scsi_queue_rq+0xe5e/0x27f0 [ 1784.570120] blk_mq_dispatch_rq_list+0x372/0x1c40 [ 1784.570596] ? elv_rb_del+0x50/0xa0 [ 1784.570945] ? elv_rqhash_del+0x119/0x160 [ 1784.571354] ? blk_mq_dequeue_from_ctx+0x7f0/0x7f0 [ 1784.571826] ? dd_dispatch_request+0x1c0/0x990 [ 1784.572277] blk_mq_do_dispatch_sched+0x7f4/0xa00 [ 1784.572753] ? blk_mq_sched_mark_restart_hctx+0x80/0x80 [ 1784.573260] ? lock_acquire+0x197/0x470 [ 1784.573635] ? hctx_lock+0x7f/0x200 [ 1784.573993] __blk_mq_sched_dispatch_requests+0x2d7/0x450 [ 1784.574519] ? blk_mq_do_dispatch_sched+0xa00/0xa00 [ 1784.575004] blk_mq_sched_dispatch_requests+0xfb/0x180 [ 1784.575514] __blk_mq_run_hw_queue+0x12c/0x290 [ 1784.575960] ? blk_mq_start_request+0x3f0/0x3f0 [ 1784.576409] ? lock_acquire+0x197/0x470 [ 1784.576800] __blk_mq_delay_run_hw_queue+0x4f1/0x550 [ 1784.577292] blk_mq_run_hw_queue+0x170/0x2f0 [ 1784.577713] ? blk_mq_delay_run_hw_queues+0x1a0/0x1a0 [ 1784.578213] ? dd_dispatch_request+0x990/0x990 [ 1784.578649] blk_mq_sched_insert_requests+0x247/0x720 [ 1784.579166] blk_mq_flush_plug_list+0x415/0x6c0 [ 1784.579618] ? blk_mq_insert_requests+0x450/0x450 [ 1784.580087] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1784.580648] blk_flush_plug_list+0x26c/0x3c0 [ 1784.581071] ? mark_held_locks+0x9e/0xe0 [ 1784.581464] ? blk_insert_cloned_request+0x450/0x450 [ 1784.581957] blk_finish_plug+0x50/0xa0 [ 1784.582329] __iomap_dio_rw+0xca0/0x1110 [ 1784.582739] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1784.583187] ? ext4_orphan_add+0x253/0x9e0 [ 1784.583589] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1784.584056] ? ext4_empty_dir+0xae0/0xae0 [ 1784.584447] ? jbd2__journal_start+0xf3/0x7e0 [ 1784.584880] iomap_dio_rw+0x31/0x90 [ 1784.585235] ext4_file_write_iter+0xb26/0x18d0 [ 1784.585683] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1784.586118] ? kasan_save_stack+0x32/0x40 [ 1784.586512] ? kasan_save_stack+0x1b/0x40 [ 1784.586908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1784.587397] ? iter_file_splice_write+0x16d/0xc30 [ 1784.587854] ? direct_splice_actor+0x10f/0x170 [ 1784.588286] ? splice_direct_to_actor+0x387/0x980 [ 1784.588737] ? do_splice_direct+0x1c4/0x290 [ 1784.589154] ? do_sendfile+0x553/0x11e0 [ 1784.589533] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1784.589970] ? do_syscall_64+0x33/0x40 [ 1784.590343] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.590852] do_iter_readv_writev+0x476/0x750 [ 1784.591287] ? new_sync_write+0x660/0x660 [ 1784.591685] ? avc_policy_seqno+0x9/0x70 [ 1784.592070] ? selinux_file_permission+0x92/0x520 [ 1784.592538] ? security_file_permission+0xb1/0xe0 [ 1784.593002] do_iter_write+0x191/0x700 [ 1784.593373] ? trace_hardirqs_on+0x5b/0x180 [ 1784.593788] vfs_iter_write+0x70/0xa0 [ 1784.594154] iter_file_splice_write+0x762/0xc30 [ 1784.594609] ? generic_splice_sendpage+0x140/0x140 [ 1784.595098] ? security_file_permission+0xb1/0xe0 [ 1784.595558] ? generic_splice_sendpage+0x140/0x140 [ 1784.596022] direct_splice_actor+0x10f/0x170 [ 1784.596441] splice_direct_to_actor+0x387/0x980 [ 1784.596890] ? pipe_to_sendpage+0x380/0x380 [ 1784.597305] ? do_splice_to+0x160/0x160 [ 1784.597685] ? security_file_permission+0xb1/0xe0 [ 1784.598151] do_splice_direct+0x1c4/0x290 [ 1784.598539] ? splice_direct_to_actor+0x980/0x980 [ 1784.598989] ? avc_policy_seqno+0x9/0x70 [ 1784.599392] ? security_file_permission+0xb1/0xe0 [ 1784.599856] do_sendfile+0x553/0x11e0 [ 1784.600230] ? do_pwritev+0x270/0x270 [ 1784.600594] ? wait_for_completion_io+0x270/0x270 [ 1784.601052] ? rcu_read_lock_any_held+0x75/0xa0 [ 1784.601488] ? vfs_write+0x354/0xb10 [ 1784.601847] __x64_sys_sendfile64+0x1d1/0x210 [ 1784.602273] ? __ia32_sys_sendfile+0x220/0x220 [ 1784.602709] do_syscall_64+0x33/0x40 [ 1784.603070] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.603555] RIP: 0033:0x7fe5e9dcbb19 [ 1784.603911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.605627] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1784.606346] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1784.607020] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1784.607701] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1784.608366] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1784.609028] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 14:36:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1784.704203] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1784.706744] EXT4-fs (loop6): get root inode failed [ 1784.707621] EXT4-fs (loop6): mount failed [ 1784.710360] isofs_fill_super: get root inode failed 14:36:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 13) 14:36:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x27}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:36:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:36:13 executing program 4: getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/4096, 0x1000) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) ioctl$FIOCLEX(r2, 0x5451) close(r2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200, 0x7}}, './file0\x00'}) clone3(&(0x7f0000000740)={0x4200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:36:13 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b8000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181300000000000000000000150000000022", 0x9d, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) [ 1784.865091] FAULT_INJECTION: forcing a failure. [ 1784.865091] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.866104] CPU: 1 PID: 10793 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1784.866674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.867368] Call Trace: [ 1784.867596] dump_stack+0x107/0x167 [ 1784.867906] should_fail.cold+0x5/0xa 14:36:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1784.868227] ? __iomap_dio_rw+0x1ee/0x1110 [ 1784.868774] should_failslab+0x5/0x20 [ 1784.869131] kmem_cache_alloc_trace+0x55/0x320 [ 1784.869517] __iomap_dio_rw+0x1ee/0x1110 [ 1784.869865] ? jbd2_journal_stop+0x188/0xdc0 [ 1784.870234] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1784.870615] ? ext4_orphan_add+0x253/0x9e0 [ 1784.870970] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1784.871384] ? ext4_empty_dir+0xae0/0xae0 [ 1784.871734] ? jbd2__journal_start+0xf3/0x7e0 [ 1784.872110] iomap_dio_rw+0x31/0x90 [ 1784.872418] ext4_file_write_iter+0xb26/0x18d0 [ 1784.872807] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1784.873182] ? kasan_save_stack+0x32/0x40 [ 1784.873525] ? kasan_save_stack+0x1b/0x40 [ 1784.873866] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1784.874285] ? iter_file_splice_write+0x16d/0xc30 [ 1784.874683] ? direct_splice_actor+0x10f/0x170 [ 1784.875068] ? splice_direct_to_actor+0x387/0x980 [ 1784.875467] ? do_splice_direct+0x1c4/0x290 [ 1784.875824] ? do_sendfile+0x553/0x11e0 [ 1784.876163] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1784.876543] ? do_syscall_64+0x33/0x40 [ 1784.876867] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.877312] do_iter_readv_writev+0x476/0x750 [ 1784.877691] ? new_sync_write+0x660/0x660 [ 1784.878040] ? avc_policy_seqno+0x9/0x70 [ 1784.878381] ? selinux_file_permission+0x92/0x520 [ 1784.878788] ? security_file_permission+0xb1/0xe0 [ 1784.879203] do_iter_write+0x191/0x700 [ 1784.879529] ? trace_hardirqs_on+0x5b/0x180 [ 1784.879893] vfs_iter_write+0x70/0xa0 [ 1784.880209] iter_file_splice_write+0x762/0xc30 [ 1784.880609] ? generic_splice_sendpage+0x140/0x140 [ 1784.881034] ? security_file_permission+0xb1/0xe0 [ 1784.881431] ? generic_splice_sendpage+0x140/0x140 [ 1784.881840] direct_splice_actor+0x10f/0x170 [ 1784.882206] splice_direct_to_actor+0x387/0x980 [ 1784.882598] ? pipe_to_sendpage+0x380/0x380 [ 1784.882953] ? do_splice_to+0x160/0x160 [ 1784.883286] ? security_file_permission+0xb1/0xe0 [ 1784.883689] do_splice_direct+0x1c4/0x290 [ 1784.884033] ? splice_direct_to_actor+0x980/0x980 [ 1784.884426] ? avc_policy_seqno+0x9/0x70 [ 1784.884768] ? security_file_permission+0xb1/0xe0 [ 1784.885179] do_sendfile+0x553/0x11e0 [ 1784.885508] ? do_pwritev+0x270/0x270 [ 1784.885824] ? wait_for_completion_io+0x270/0x270 [ 1784.886231] ? rcu_read_lock_any_held+0x75/0xa0 [ 1784.886608] ? vfs_write+0x354/0xb10 [ 1784.886923] __x64_sys_sendfile64+0x1d1/0x210 [ 1784.887299] ? __ia32_sys_sendfile+0x220/0x220 [ 1784.887683] do_syscall_64+0x33/0x40 [ 1784.887997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.888416] RIP: 0033:0x7f1b0b8ffb19 [ 1784.888728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.890225] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1784.890856] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1784.891446] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1784.892038] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1784.892626] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000002 [ 1784.893215] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 14:36:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 32) [ 1784.932288] isofs_fill_super: get root inode failed 14:36:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0x27f}) [ 1784.977548] FAULT_INJECTION: forcing a failure. [ 1784.977548] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.979254] CPU: 0 PID: 10807 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1784.980259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.981457] Call Trace: [ 1784.981850] dump_stack+0x107/0x167 [ 1784.982388] should_fail.cold+0x5/0xa [ 1784.982949] ? create_object.isra.0+0x3a/0xa20 [ 1784.983630] should_failslab+0x5/0x20 [ 1784.984199] kmem_cache_alloc+0x5b/0x310 [ 1784.984806] create_object.isra.0+0x3a/0xa20 [ 1784.985449] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1784.986189] kmem_cache_alloc+0x159/0x310 [ 1784.986802] ? mempool_free_pages+0x20/0x20 [ 1784.987442] mempool_alloc+0x148/0x360 [ 1784.988022] ? mempool_resize+0x7d0/0x7d0 [ 1784.988634] ? mark_lock+0xf5/0x2df0 [ 1784.989186] ? perf_trace_lock+0xac/0x490 [ 1784.989802] __sg_alloc_table+0x24e/0x390 [ 1784.990429] sg_alloc_table_chained+0x9b/0x1f0 [ 1784.991107] ? sg_alloc_table_chained+0x1f0/0x1f0 [ 1784.991816] scsi_alloc_sgtables+0x236/0xaf0 [ 1784.992464] ? scsi_cmd_runtime_exceeced+0x1d0/0x1d0 [ 1784.993206] ? lockdep_init_map_type+0x2c7/0x780 [ 1784.993905] sd_init_command+0x516/0x3550 [ 1784.994533] scsi_queue_rq+0xe5e/0x27f0 [ 1784.995146] blk_mq_dispatch_rq_list+0x372/0x1c40 [ 1784.995869] ? elv_rb_del+0x50/0xa0 [ 1784.996402] ? elv_rqhash_del+0x119/0x160 [ 1784.997005] ? blk_mq_dequeue_from_ctx+0x7f0/0x7f0 [ 1784.997729] ? dd_dispatch_request+0x1c0/0x990 [ 1784.998402] blk_mq_do_dispatch_sched+0x7f4/0xa00 [ 1784.999125] ? blk_mq_sched_mark_restart_hctx+0x80/0x80 [ 1784.999906] ? lock_acquire+0x197/0x470 [ 1785.000487] ? hctx_lock+0x7f/0x200 [ 1785.001032] __blk_mq_sched_dispatch_requests+0x2d7/0x450 [ 1785.001829] ? blk_mq_do_dispatch_sched+0xa00/0xa00 [ 1785.002574] blk_mq_sched_dispatch_requests+0xfb/0x180 [ 1785.003360] __blk_mq_run_hw_queue+0x12c/0x290 [ 1785.004032] ? blk_mq_start_request+0x3f0/0x3f0 [ 1785.004711] ? lock_acquire+0x197/0x470 [ 1785.005312] __blk_mq_delay_run_hw_queue+0x4f1/0x550 [ 1785.006055] blk_mq_run_hw_queue+0x170/0x2f0 [ 1785.006697] ? blk_mq_delay_run_hw_queues+0x1a0/0x1a0 [ 1785.007466] ? dd_dispatch_request+0x990/0x990 [ 1785.008134] blk_mq_sched_insert_requests+0x247/0x720 [ 1785.008892] blk_mq_flush_plug_list+0x415/0x6c0 [ 1785.009583] ? blk_mq_insert_requests+0x450/0x450 [ 1785.010299] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1785.011150] blk_flush_plug_list+0x26c/0x3c0 [ 1785.011789] ? mark_held_locks+0x9e/0xe0 [ 1785.012391] ? blk_insert_cloned_request+0x450/0x450 [ 1785.013138] blk_finish_plug+0x50/0xa0 [ 1785.013709] __iomap_dio_rw+0xca0/0x1110 [ 1785.014324] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1785.014990] ? ext4_orphan_add+0x253/0x9e0 [ 1785.015620] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1785.016335] ? ext4_empty_dir+0xae0/0xae0 [ 1785.016940] ? jbd2__journal_start+0xf3/0x7e0 [ 1785.017607] iomap_dio_rw+0x31/0x90 [ 1785.018147] ext4_file_write_iter+0xb26/0x18d0 [ 1785.018828] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1785.019500] ? kasan_save_stack+0x32/0x40 [ 1785.020106] ? kasan_save_stack+0x1b/0x40 [ 1785.020711] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1785.021448] ? iter_file_splice_write+0x16d/0xc30 [ 1785.022143] ? direct_splice_actor+0x10f/0x170 [ 1785.022806] ? splice_direct_to_actor+0x387/0x980 [ 1785.023515] ? do_splice_direct+0x1c4/0x290 [ 1785.024143] ? do_sendfile+0x553/0x11e0 [ 1785.024730] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1785.025408] ? do_syscall_64+0x33/0x40 [ 1785.025980] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1785.026766] do_iter_readv_writev+0x476/0x750 [ 1785.027432] ? new_sync_write+0x660/0x660 [ 1785.028039] ? avc_policy_seqno+0x9/0x70 [ 1785.028634] ? selinux_file_permission+0x92/0x520 [ 1785.029351] ? security_file_permission+0xb1/0xe0 [ 1785.030072] do_iter_write+0x191/0x700 [ 1785.030650] ? trace_hardirqs_on+0x5b/0x180 [ 1785.031294] vfs_iter_write+0x70/0xa0 [ 1785.031856] iter_file_splice_write+0x762/0xc30 [ 1785.032555] ? generic_splice_sendpage+0x140/0x140 [ 1785.033301] ? security_file_permission+0xb1/0xe0 [ 1785.034010] ? generic_splice_sendpage+0x140/0x140 [ 1785.034730] direct_splice_actor+0x10f/0x170 [ 1785.035387] splice_direct_to_actor+0x387/0x980 [ 1785.036074] ? pipe_to_sendpage+0x380/0x380 [ 1785.036710] ? do_splice_to+0x160/0x160 [ 1785.037294] ? security_file_permission+0xb1/0xe0 [ 1785.038008] do_splice_direct+0x1c4/0x290 [ 1785.038613] ? splice_direct_to_actor+0x980/0x980 [ 1785.039318] ? avc_policy_seqno+0x9/0x70 [ 1785.039929] ? security_file_permission+0xb1/0xe0 [ 1785.040644] do_sendfile+0x553/0x11e0 [ 1785.041217] ? do_pwritev+0x270/0x270 [ 1785.041782] ? wait_for_completion_io+0x270/0x270 [ 1785.042490] ? rcu_read_lock_any_held+0x75/0xa0 [ 1785.043180] ? vfs_write+0x354/0xb10 [ 1785.043735] __x64_sys_sendfile64+0x1d1/0x210 [ 1785.044392] ? __ia32_sys_sendfile+0x220/0x220 [ 1785.045074] do_syscall_64+0x33/0x40 [ 1785.045624] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1785.046367] RIP: 0033:0x7fe5e9dcbb19 [ 1785.046914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1785.049597] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1785.050707] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1785.051760] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1785.052795] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1785.053840] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1785.054880] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1785.069661] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1785.073977] EXT4-fs (loop6): get root inode failed [ 1785.074406] EXT4-fs (loop6): mount failed 14:36:13 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b4, 0x13, 0x7, 0x201, 0x70bd25, 0x25dfdbfe, {0x3, 0x0, 0x2}, [@nested={0xda, 0x85, 0x0, 0x1, [@typed={0xc, 0x1f, 0x0, 0x0, @u64=0xf2c}, @generic="99fd4a664c92e73259495ef3148fc4bcd12441ad13d9e823d6f6013bc075249ef32b59edba43a9b424fb6bf0ffffdcec5151394dcc99ef569bafb722eb8974ecbded64dffb8559c7afba81d5afc15d8d24082693f2a7878a47f3c0d9eeebf7705caf", @generic="a730b5cf04d8a44d153bfe776c13c75ddf872ae439fba65181c88eba8cad0311371f9d1c19f9512efc81760225953cd158baf7ef388faf65b6867bed739d872cf2154bb3b084a91758bfc035ba94f34ad69fd489868316c7eba368a4b401cedad60ad756", @typed={0x4, 0x8d}]}, @generic="20c70d12c8b942e48645f4a8fb52d74ffddd6ebc0cb3467096929f0419e5b7dcd740cd5707a1c53be07f7df8a6f0642a6445f7b88fb76e39131eb4161ed094afe7a816a759dec070cf36f5f0e0972c68a50930ecc94140e7667e4308815577025bd80c879714f3c9677f2aab7fb946d1b01333675fac5be705fc36f2e39af9a1ce4509e9d5621593388fe0cc7efca59fdb4b662bfbc75c167e8d49892c97d65ba7d2548c631a158dfee6287221688d6e516c6a38d5b95d06db45e6", @typed={0x8, 0x94, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @private=0xa010101}, {0x2, 0x4e24, @multicast2}, 0x21, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)='xfrm0\x00', 0x1, 0x7f2979b9, 0xff80}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={r0, 0xee01, 0xffffffffffffffff}, 0xc) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$nfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x101, 0x9, &(0x7f0000000a00)=[{&(0x7f0000000440)="c3be5c6e13ad30b1c5f9edcf38558050d7af89658b172e2a8276ee7b5b66d7cebabd1ac4793e9185e8829fbf32b144f41c97d6379424a5c5b0e6af7d5581d829445316e23e29589db5b5e260a3f5a1f056e8d1bc0994abbad06dd4ca2d4bf3f2aea10252e81c112b71cc2d0229ca7d515c4fa876968f822e82ba75a6f59d595860a08a569a3d33bbe49c662ff570862f11ee1c04008a7097f195913f6a03a16e17cebe024af8e16eb07f29014a04fbab3d4527cb52f564e95af0", 0xba, 0x2d74}, {&(0x7f0000000500)="ae932f43595bee11832663db19de54c016c0b2d085ec8a7c4d403374043908a770215cb0ccfb7c20c2ee4397e0dd2af0d372beb8fe13c40f09fd3dc29f3a9d4653c881bf351176f3baf19a1fed23a166cb3ce720ff0c0b844f7451e48796327c32700ceaf34525714b476efa226324f46607d2c5d0e81e033a339a6c1ff2af431bbcbab97a4d2fa70000917015042a15a58805f89cbbdf9796d9", 0x9a}, {&(0x7f00000005c0)="cf63a664abf9caf0974d7d4eb814", 0xe, 0x1ff}, {&(0x7f0000000600)="1528b7f67bca23f29c4410b95bcf67bec2e6cff2f6c0d313ed19eb78ac1565f1bf3f706b8da794c8ebc4343896409cd8548572467e63eb9f4af481f3237ac2bcfc3f79dd40e06cb0c17f79bbe6ffc2f1028a9d6ba524a8901d5f53b1af5b4843e7835fa367a0c3cb84eb56f8fff45ab5a93bf0d34475789875939bca4cc747561c13a2729dd3463a1816f98fc0f10e0494749bd1447c74c84807a36e3e7380626e38143bd95ed7002176f7c61cb81cf1bd692621f48b1fa05880211f5f18620bd84e46a57a8affd8954ff740ee015b45f6fdca98ef712314b5eaaff00f7951bbc350cc8417d746574efee56cf33517e7b0ea735e422ef4", 0xf7, 0x2}, {&(0x7f0000000700)="82c784aeb211f78c4999005a27487d6d90a714acfeef8aa070e9a383f38d0edda7910216fdb1301f1970c8a2fc4c1ba2b65547a8102d7521534f985999fe66e1348f86f688c42f9b7417111721831cedf813194be8ef74cf639a337cf420b183591a52a315f405e2576375bac682a720e27754d5a064a4f1105abc197d96630296c8cd78f9f21e3d57e748f4bc9d1451c2f394623b6dc5933830940945d8f4f7a49014f396196bf30fa40ca1639280c299e33e871669fcf01e89d0a66282436af85065c1a32ec864ad7c50", 0xcb, 0x7}, {&(0x7f0000000800)="a2b82c70964efdbe919463bb4ff7ff9907963868de4239a5d3ebfb26e4c96aecdbb1736deae3142e774d0bf1f143a968cc3780a6da759e0007e1cae3504e12f0c1a711d6065d941c5fd043454cb7a12b14339fae33a55c2aa21dd122350fdd3801181b27c7d6a81e68655ddce3b27bf13f405f28f3688c611efb00fda95fab2526d473d67d43b34c9e9a62ddcfcfe50e3bd14263ba98c2ffde443550ef18421c0121950bb4", 0xa5, 0x800}, {&(0x7f00000008c0)="11a1b7c4412d0b39b9fc1ef1", 0xc, 0x408f0209}, {&(0x7f0000000900)="0adda1dbcae7e017d70dbf320d407b4e3144faaf0ec42cd8b6e8a61bb25e3b3d13832d03605313edc80580679d2b7e09bfbba275269e62779d20a18b5595e7a441fc220fecf0c865877823b9452bca44dc8815d58a", 0x55, 0x80000001}, {&(0x7f0000000980)="7ce4520b82ad775a3a99652bd824f0ed4dccc2e335a56f1428a90d3466d2f2597532f915f781290029fcb25aea3f084c8c6105362a6c56113147a8fd9829decb8e1f56ba1215520ee09c86cba189cd9c33fe0d2ef71d4ed15111fb992bdbb39ea156e78579e5dd", 0x67, 0x4}], 0x1000, &(0x7f0000000b00)={[], [{@euid_lt={'euid<', 0xee01}}, {@measure}, {@hash}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000b40)={0x0, 0x0, r2, 0x7fffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc) r3 = dup(r1) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = dup3(r3, r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee01}}, './file0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000c80)={{{@in=@multicast2, @in6=@remote, 0x4e24, 0x1f, 0x4e22, 0x1, 0xa, 0x20, 0x80, 0x3b, r7, r8}, {0x81, 0x8, 0x5, 0xffffffffffffffff, 0x5, 0x2197, 0x3, 0x8}, {0x9, 0x0, 0xc95, 0x1cb5b6ca}, 0x5, 0x6e6bb2, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4d3, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x3500, 0x3, 0x2, 0x59, 0x6, 0x49d, 0x7}}, 0xe8) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68) r9 = dup3(r5, r6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000e40)={{{@in6=@local, @in6=@private1}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000f40)=0xe8) r10 = socket(0x6, 0x5, 0x585e4590) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff7}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) 14:36:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 14) 14:36:14 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200", 0x9e, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) [ 1785.087378] FAULT_INJECTION: forcing a failure. [ 1785.087378] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.088317] CPU: 1 PID: 10817 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1785.088876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1785.089550] Call Trace: [ 1785.089776] dump_stack+0x107/0x167 [ 1785.090082] should_fail.cold+0x5/0xa [ 1785.090403] ? create_object.isra.0+0x3a/0xa20 [ 1785.090783] should_failslab+0x5/0x20 [ 1785.091107] kmem_cache_alloc+0x5b/0x310 [ 1785.091444] create_object.isra.0+0x3a/0xa20 [ 1785.091805] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1785.092223] kmem_cache_alloc_trace+0x151/0x320 [ 1785.092614] __iomap_dio_rw+0x1ee/0x1110 [ 1785.092965] ? jbd2_journal_stop+0x188/0xdc0 [ 1785.093329] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1785.093704] ? ext4_orphan_add+0x253/0x9e0 [ 1785.094043] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1785.094448] ? ext4_empty_dir+0xae0/0xae0 [ 1785.094783] ? jbd2__journal_start+0xf3/0x7e0 [ 1785.095170] iomap_dio_rw+0x31/0x90 [ 1785.095470] ext4_file_write_iter+0xb26/0x18d0 [ 1785.095852] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1785.096233] ? kasan_save_stack+0x32/0x40 [ 1785.096570] ? kasan_save_stack+0x1b/0x40 [ 1785.096909] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1785.097323] ? iter_file_splice_write+0x16d/0xc30 [ 1785.097714] ? direct_splice_actor+0x10f/0x170 [ 1785.098086] ? splice_direct_to_actor+0x387/0x980 [ 1785.098478] ? do_splice_direct+0x1c4/0x290 [ 1785.098827] ? do_sendfile+0x553/0x11e0 [ 1785.099159] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1785.099539] ? do_syscall_64+0x33/0x40 [ 1785.099858] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1785.100300] do_iter_readv_writev+0x476/0x750 [ 1785.100668] ? new_sync_write+0x660/0x660 [ 1785.101012] ? avc_policy_seqno+0x9/0x70 [ 1785.101351] ? selinux_file_permission+0x92/0x520 [ 1785.101753] ? security_file_permission+0xb1/0xe0 [ 1785.102159] do_iter_write+0x191/0x700 [ 1785.102488] ? trace_hardirqs_on+0x5b/0x180 [ 1785.102847] vfs_iter_write+0x70/0xa0 [ 1785.103172] iter_file_splice_write+0x762/0xc30 [ 1785.103560] ? generic_splice_sendpage+0x140/0x140 [ 1785.103978] ? security_file_permission+0xb1/0xe0 [ 1785.104378] ? generic_splice_sendpage+0x140/0x140 [ 1785.104780] direct_splice_actor+0x10f/0x170 [ 1785.105145] splice_direct_to_actor+0x387/0x980 [ 1785.105529] ? pipe_to_sendpage+0x380/0x380 [ 1785.105884] ? do_splice_to+0x160/0x160 [ 1785.106219] ? security_file_permission+0xb1/0xe0 [ 1785.106621] do_splice_direct+0x1c4/0x290 [ 1785.106961] ? splice_direct_to_actor+0x980/0x980 [ 1785.107360] ? avc_policy_seqno+0x9/0x70 [ 1785.107700] ? security_file_permission+0xb1/0xe0 [ 1785.108098] do_sendfile+0x553/0x11e0 [ 1785.108421] ? do_pwritev+0x270/0x270 [ 1785.108739] ? wait_for_completion_io+0x270/0x270 [ 1785.109142] ? rcu_read_lock_any_held+0x75/0xa0 [ 1785.109523] ? vfs_write+0x354/0xb10 [ 1785.109835] __x64_sys_sendfile64+0x1d1/0x210 [ 1785.110202] ? __ia32_sys_sendfile+0x220/0x220 [ 1785.110578] do_syscall_64+0x33/0x40 [ 1785.110881] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1785.111304] RIP: 0033:0x7f1b0b8ffb19 [ 1785.111608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1785.113097] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1785.113732] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1785.114312] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1785.114895] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1785.115484] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000002 [ 1785.116066] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 14:36:14 executing program 7: r0 = syz_io_uring_setup(0x23, &(0x7f0000000080)={0x0, 0x0, 0x20, 0xfffffffd, 0x1ad, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x8, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x80004001) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file1\x00', 0x0, 0x41, 0x12345}, 0x1ff) lseek(r3, 0x7bd6, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) fchownat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x1000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r6, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r7, 0xffff) sendfile(r4, r5, 0x0, 0x20d317) 14:36:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 15) 14:36:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) syz_io_uring_setup(0x1e45, &(0x7f00000002c0)={0x0, 0x2b5, 0x8, 0x0, 0x234}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000000)=0x10000) 14:36:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1785.261011] FAULT_INJECTION: forcing a failure. [ 1785.261011] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.263176] CPU: 0 PID: 10832 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1785.264180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1785.265377] Call Trace: [ 1785.265776] dump_stack+0x107/0x167 [ 1785.266321] should_fail.cold+0x5/0xa [ 1785.266882] ? ext4_init_io_end+0x23/0x180 [ 1785.267509] ? ext4_init_io_end+0x23/0x180 [ 1785.268134] should_failslab+0x5/0x20 [ 1785.268696] kmem_cache_alloc+0x5b/0x310 [ 1785.269308] ? ext4_writepages+0x727/0x3350 [ 1785.269953] ext4_init_io_end+0x23/0x180 [ 1785.270559] ext4_writepages+0x8ec/0x3350 [ 1785.271192] ? unwind_next_frame+0x13ef/0x1a90 [ 1785.271872] ? find_held_lock+0x2c/0x110 [ 1785.272515] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1785.273243] ? __is_insn_slot_addr+0x14c/0x290 [ 1785.273925] ? __kernel_text_address+0x9/0x40 [ 1785.274593] ? unwind_get_return_address+0x55/0xa0 [ 1785.275321] ? create_prof_cpu_mask+0x20/0x20 [ 1785.276014] ? stack_trace_save+0x8c/0xc0 [ 1785.276629] ? stack_trace_consume_entry+0x160/0x160 [ 1785.277403] ? kasan_save_stack+0x32/0x40 [ 1785.278013] ? kasan_save_stack+0x1b/0x40 [ 1785.278629] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1785.279395] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1785.280114] do_writepages+0xee/0x2a0 [ 1785.280684] ? page_writeback_cpu_online+0x20/0x20 [ 1785.281408] ? lock_acquire+0x197/0x470 [ 1785.281999] ? create_object.isra.0+0x3ad/0xa20 [ 1785.282697] ? lock_release+0x680/0x680 [ 1785.283293] ? find_held_lock+0x2c/0x110 [ 1785.283900] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1785.284644] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1785.285431] ? mark_held_locks+0x9e/0xe0 [ 1785.286045] ? trace_hardirqs_on+0x5b/0x180 [ 1785.286696] filemap_write_and_wait_range+0x65/0x100 [ 1785.287459] __iomap_dio_rw+0x552/0x1110 [ 1785.288083] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1785.288756] ? ext4_orphan_add+0x253/0x9e0 [ 1785.289375] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1785.290095] ? ext4_empty_dir+0xae0/0xae0 [ 1785.290700] ? jbd2__journal_start+0xf3/0x7e0 [ 1785.291384] iomap_dio_rw+0x31/0x90 [ 1785.291928] ext4_file_write_iter+0xb26/0x18d0 [ 1785.292621] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1785.293287] ? kasan_save_stack+0x32/0x40 [ 1785.293898] ? kasan_save_stack+0x1b/0x40 [ 1785.294508] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1785.295265] ? iter_file_splice_write+0x16d/0xc30 [ 1785.295967] ? direct_splice_actor+0x10f/0x170 [ 1785.296634] ? splice_direct_to_actor+0x387/0x980 [ 1785.297335] ? do_splice_direct+0x1c4/0x290 [ 1785.297966] ? do_sendfile+0x553/0x11e0 [ 1785.298546] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1785.299229] ? do_syscall_64+0x33/0x40 [ 1785.299800] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1785.300586] do_iter_readv_writev+0x476/0x750 [ 1785.301247] ? new_sync_write+0x660/0x660 [ 1785.301855] ? avc_policy_seqno+0x9/0x70 [ 1785.302455] ? selinux_file_permission+0x92/0x520 [ 1785.303176] ? security_file_permission+0xb1/0xe0 [ 1785.303891] do_iter_write+0x191/0x700 [ 1785.304464] ? trace_hardirqs_on+0x5b/0x180 [ 1785.305109] vfs_iter_write+0x70/0xa0 [ 1785.305675] iter_file_splice_write+0x762/0xc30 [ 1785.306388] ? generic_splice_sendpage+0x140/0x140 [ 1785.307145] ? security_file_permission+0xb1/0xe0 [ 1785.307856] ? generic_splice_sendpage+0x140/0x140 [ 1785.308577] direct_splice_actor+0x10f/0x170 [ 1785.309229] splice_direct_to_actor+0x387/0x980 [ 1785.310032] ? pipe_to_sendpage+0x380/0x380 [ 1785.310734] ? do_splice_to+0x160/0x160 [ 1785.311329] ? security_file_permission+0xb1/0xe0 [ 1785.312039] do_splice_direct+0x1c4/0x290 [ 1785.312644] ? splice_direct_to_actor+0x980/0x980 [ 1785.313342] ? avc_policy_seqno+0x9/0x70 [ 1785.313941] ? security_file_permission+0xb1/0xe0 [ 1785.314654] do_sendfile+0x553/0x11e0 [ 1785.315232] ? do_pwritev+0x270/0x270 [ 1785.315796] ? wait_for_completion_io+0x270/0x270 [ 1785.316505] ? rcu_read_lock_any_held+0x75/0xa0 [ 1785.317178] ? vfs_write+0x354/0xb10 [ 1785.317733] __x64_sys_sendfile64+0x1d1/0x210 [ 1785.318388] ? __ia32_sys_sendfile+0x220/0x220 [ 1785.319072] do_syscall_64+0x33/0x40 [ 1785.319620] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1785.320364] RIP: 0033:0x7f1b0b8ffb19 [ 1785.320910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1785.323536] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1785.324637] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1785.325659] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1785.326682] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1785.327712] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000002 [ 1785.328747] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 [ 1785.379333] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 1785.379931] EXT4-fs (loop6): mount failed 14:36:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 33) 14:36:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x28}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:36:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:36:30 executing program 7: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}}, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[{&(0x7f0000000880)="d2", 0x1}], 0x0, 0x0) 14:36:30 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200", 0x9e, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:36:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:36:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1080, 0x0) io_uring_setup(0x5893, &(0x7f0000000680)={0x0, 0x1470, 0x4, 0x2, 0x20c, 0x0, r0}) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = syz_io_uring_setup(0x6bca, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x16}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) umount2(&(0x7f0000000140)='./file0\x00', 0x4) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r10}, 0x0) ioctl$FIOCLEX(r10, 0x5451) close(r10) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)=""/117, 0x75}, {&(0x7f0000000180)}, {&(0x7f00000003c0)=""/170, 0xaa}, {&(0x7f0000000500)=""/26, 0x1a}, {&(0x7f0000000540)=""/135, 0x87}], 0x5) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 16) [ 1801.613577] FAULT_INJECTION: forcing a failure. [ 1801.613577] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.614253] FAULT_INJECTION: forcing a failure. [ 1801.614253] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.615587] CPU: 0 PID: 10849 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1801.618296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1801.619755] Call Trace: [ 1801.620237] dump_stack+0x107/0x167 [ 1801.620887] should_fail.cold+0x5/0xa [ 1801.621567] ? jbd2__journal_start+0x190/0x7e0 [ 1801.622368] should_failslab+0x5/0x20 [ 1801.623033] kmem_cache_alloc+0x5b/0x310 [ 1801.623773] jbd2__journal_start+0x190/0x7e0 [ 1801.624566] __ext4_journal_start_sb+0x214/0x390 [ 1801.625419] ext4_file_write_iter+0x1138/0x18d0 [ 1801.626259] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1801.627087] ? kasan_save_stack+0x32/0x40 [ 1801.627824] ? kasan_save_stack+0x1b/0x40 [ 1801.628556] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1801.629441] ? iter_file_splice_write+0x16d/0xc30 [ 1801.630303] ? direct_splice_actor+0x10f/0x170 [ 1801.631101] ? splice_direct_to_actor+0x387/0x980 [ 1801.631950] ? do_splice_direct+0x1c4/0x290 [ 1801.632616] ? do_sendfile+0x553/0x11e0 [ 1801.633196] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1801.633868] ? do_syscall_64+0x33/0x40 [ 1801.634432] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1801.635208] do_iter_readv_writev+0x476/0x750 [ 1801.635874] ? new_sync_write+0x660/0x660 [ 1801.636478] ? avc_policy_seqno+0x9/0x70 [ 1801.637070] ? selinux_file_permission+0x92/0x520 [ 1801.637778] ? security_file_permission+0xb1/0xe0 [ 1801.638492] do_iter_write+0x191/0x700 [ 1801.639067] ? trace_hardirqs_on+0x5b/0x180 [ 1801.639716] vfs_iter_write+0x70/0xa0 [ 1801.640280] iter_file_splice_write+0x762/0xc30 [ 1801.640976] ? generic_splice_sendpage+0x140/0x140 [ 1801.641715] ? security_file_permission+0xb1/0xe0 [ 1801.642416] ? generic_splice_sendpage+0x140/0x140 [ 1801.643128] direct_splice_actor+0x10f/0x170 [ 1801.643791] splice_direct_to_actor+0x387/0x980 [ 1801.644474] ? pipe_to_sendpage+0x380/0x380 [ 1801.645112] ? do_splice_to+0x160/0x160 [ 1801.645695] ? security_file_permission+0xb1/0xe0 [ 1801.646411] do_splice_direct+0x1c4/0x290 [ 1801.647018] ? splice_direct_to_actor+0x980/0x980 [ 1801.647730] ? avc_policy_seqno+0x9/0x70 [ 1801.648337] ? security_file_permission+0xb1/0xe0 [ 1801.649056] do_sendfile+0x553/0x11e0 [ 1801.649629] ? do_pwritev+0x270/0x270 [ 1801.650196] ? wait_for_completion_io+0x270/0x270 [ 1801.650903] ? rcu_read_lock_any_held+0x75/0xa0 [ 1801.651581] ? vfs_write+0x354/0xb10 [ 1801.652128] __x64_sys_sendfile64+0x1d1/0x210 [ 1801.652782] ? __ia32_sys_sendfile+0x220/0x220 [ 1801.653455] do_syscall_64+0x33/0x40 [ 1801.653998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1801.654731] RIP: 0033:0x7fe5e9dcbb19 [ 1801.655282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1801.657899] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1801.658992] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1801.660024] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1801.661045] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1801.662077] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1801.663102] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1801.664176] CPU: 1 PID: 10859 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1801.665168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1801.666341] Call Trace: [ 1801.666726] dump_stack+0x107/0x167 [ 1801.667264] should_fail.cold+0x5/0xa [ 1801.667817] ? create_object.isra.0+0x3a/0xa20 [ 1801.668478] should_failslab+0x5/0x20 [ 1801.669028] kmem_cache_alloc+0x5b/0x310 [ 1801.669605] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1801.670260] create_object.isra.0+0x3a/0xa20 [ 1801.670896] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1801.671656] kmem_cache_alloc+0x159/0x310 [ 1801.672269] ext4_init_io_end+0x23/0x180 [ 1801.672856] ext4_writepages+0x8ec/0x3350 [ 1801.673462] ? unwind_next_frame+0x13ef/0x1a90 [ 1801.674131] ? find_held_lock+0x2c/0x110 [ 1801.674754] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1801.675469] ? __is_insn_slot_addr+0x14c/0x290 [ 1801.676138] ? __kernel_text_address+0x9/0x40 [ 1801.676787] ? unwind_get_return_address+0x55/0xa0 [ 1801.677494] ? create_prof_cpu_mask+0x20/0x20 [ 1801.678160] ? stack_trace_save+0x8c/0xc0 [ 1801.678767] ? stack_trace_consume_entry+0x160/0x160 [ 1801.679523] ? kasan_save_stack+0x32/0x40 [ 1801.680123] ? kasan_save_stack+0x1b/0x40 [ 1801.680720] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1801.681463] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1801.682163] do_writepages+0xee/0x2a0 [ 1801.682717] ? page_writeback_cpu_online+0x20/0x20 [ 1801.683444] ? lock_acquire+0x197/0x470 [ 1801.684014] ? create_object.isra.0+0x3ad/0xa20 [ 1801.684694] ? lock_release+0x680/0x680 [ 1801.685273] ? find_held_lock+0x2c/0x110 [ 1801.685872] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1801.686595] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1801.687370] ? mark_held_locks+0x9e/0xe0 [ 1801.687967] ? trace_hardirqs_on+0x5b/0x180 [ 1801.688604] filemap_write_and_wait_range+0x65/0x100 [ 1801.689340] __iomap_dio_rw+0x552/0x1110 [ 1801.689960] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1801.690624] ? ext4_orphan_add+0x253/0x9e0 [ 1801.691239] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1801.691954] ? ext4_empty_dir+0xae0/0xae0 [ 1801.692544] ? jbd2__journal_start+0xf3/0x7e0 [ 1801.693204] iomap_dio_rw+0x31/0x90 [ 1801.693737] ext4_file_write_iter+0xb26/0x18d0 [ 1801.694430] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1801.695088] ? lock_chain_count+0x20/0x20 [ 1801.695702] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1801.696426] ? iter_file_splice_write+0x16d/0xc30 [ 1801.697112] ? direct_splice_actor+0x10f/0x170 [ 1801.697777] ? splice_direct_to_actor+0x387/0x980 [ 1801.698466] ? do_splice_direct+0x1c4/0x290 [ 1801.698856] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 1801.699088] ? do_sendfile+0x553/0x11e0 [ 1801.699117] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1801.701159] ? do_syscall_64+0x33/0x40 [ 1801.701717] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1801.702493] do_iter_readv_writev+0x476/0x750 [ 1801.702587] EXT4-fs (loop6): mount failed [ 1801.703142] ? new_sync_write+0x660/0x660 [ 1801.703167] ? avc_policy_seqno+0x9/0x70 [ 1801.704921] ? selinux_file_permission+0x92/0x520 [ 1801.705627] ? security_file_permission+0xb1/0xe0 [ 1801.706329] do_iter_write+0x191/0x700 [ 1801.706910] vfs_iter_write+0x70/0xa0 [ 1801.707476] iter_file_splice_write+0x762/0xc30 [ 1801.708169] ? generic_splice_sendpage+0x140/0x140 [ 1801.708906] ? security_file_permission+0xb1/0xe0 [ 1801.709598] ? generic_splice_sendpage+0x140/0x140 [ 1801.710310] direct_splice_actor+0x10f/0x170 [ 1801.710947] splice_direct_to_actor+0x387/0x980 [ 1801.711635] ? pipe_to_sendpage+0x380/0x380 [ 1801.712264] ? do_splice_to+0x160/0x160 [ 1801.712839] ? security_file_permission+0xb1/0xe0 [ 1801.713543] do_splice_direct+0x1c4/0x290 [ 1801.714143] ? splice_direct_to_actor+0x980/0x980 [ 1801.714845] ? avc_policy_seqno+0x9/0x70 [ 1801.715450] ? security_file_permission+0xb1/0xe0 [ 1801.716154] do_sendfile+0x553/0x11e0 [ 1801.716724] ? do_pwritev+0x270/0x270 [ 1801.717284] ? wait_for_completion_io+0x270/0x270 [ 1801.717988] ? rcu_read_lock_any_held+0x75/0xa0 [ 1801.718647] ? vfs_write+0x354/0xb10 [ 1801.719198] __x64_sys_sendfile64+0x1d1/0x210 [ 1801.719858] ? __ia32_sys_sendfile+0x220/0x220 [ 1801.720526] do_syscall_64+0x33/0x40 [ 1801.721062] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1801.721792] RIP: 0033:0x7f1b0b8ffb19 [ 1801.722337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1801.724959] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1801.726059] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1801.727100] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1801.728162] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1801.729194] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000002 [ 1801.730218] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 14:36:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 34) 14:36:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x4, 0x64dc2792759be4a7, 0x7, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = syz_io_uring_setup(0x203, &(0x7f0000000080)={0x0, 0xc70b, 0x1, 0x0, 0x370}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x1f, 0x5}}, './file0\x00'}) dup2(r0, r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r7, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000011c0)={r7, 0x7, 0x2, 0x2}) ioctl$BTRFS_IOC_RM_DEV_V2(r8, 0x5000943a, &(0x7f00000001c0)={{r7}, 0x0, 0x2, @inherit={0x88, &(0x7f0000001200)={0x0, 0x8, 0x5, 0x4, {0x2, 0xd24f, 0x58ce, 0x9, 0x2}, [0x2, 0x2babfe70, 0x1, 0x9, 0x80000000, 0x1, 0x3, 0x1]}}, @subvolid=0x100000000}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r3, 0x0) [ 1801.887273] isofs_fill_super: get root inode failed [ 1801.911116] FAULT_INJECTION: forcing a failure. [ 1801.911116] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.912918] CPU: 0 PID: 10878 Comm: syz-executor.3 Not tainted 5.10.222 #1 [ 1801.913931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1801.915151] Call Trace: [ 1801.915559] dump_stack+0x107/0x167 [ 1801.916109] should_fail.cold+0x5/0xa [ 1801.916717] ? create_object.isra.0+0x3a/0xa20 [ 1801.917395] should_failslab+0x5/0x20 [ 1801.917962] kmem_cache_alloc+0x5b/0x310 [ 1801.918580] create_object.isra.0+0x3a/0xa20 [ 1801.919215] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1801.919970] kmem_cache_alloc+0x159/0x310 [ 1801.920583] jbd2__journal_start+0x190/0x7e0 [ 1801.921238] __ext4_journal_start_sb+0x214/0x390 [ 1801.921935] ext4_file_write_iter+0x1138/0x18d0 [ 1801.922634] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1801.923298] ? kasan_save_stack+0x32/0x40 [ 1801.923903] ? kasan_save_stack+0x1b/0x40 [ 1801.924507] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1801.925238] ? iter_file_splice_write+0x16d/0xc30 [ 1801.925929] ? direct_splice_actor+0x10f/0x170 [ 1801.926582] ? splice_direct_to_actor+0x387/0x980 [ 1801.927294] ? do_splice_direct+0x1c4/0x290 [ 1801.927923] ? do_sendfile+0x553/0x11e0 [ 1801.928498] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1801.929170] ? do_syscall_64+0x33/0x40 [ 1801.929733] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1801.930510] do_iter_readv_writev+0x476/0x750 [ 1801.931171] ? new_sync_write+0x660/0x660 [ 1801.931785] ? avc_policy_seqno+0x9/0x70 [ 1801.932385] ? selinux_file_permission+0x92/0x520 [ 1801.933088] ? security_file_permission+0xb1/0xe0 [ 1801.933797] do_iter_write+0x191/0x700 [ 1801.934379] ? trace_hardirqs_on+0x5b/0x180 [ 1801.935014] vfs_iter_write+0x70/0xa0 [ 1801.935607] iter_file_splice_write+0x762/0xc30 [ 1801.936307] ? generic_splice_sendpage+0x140/0x140 [ 1801.937056] ? security_file_permission+0xb1/0xe0 [ 1801.937765] ? generic_splice_sendpage+0x140/0x140 [ 1801.938481] direct_splice_actor+0x10f/0x170 [ 1801.939127] splice_direct_to_actor+0x387/0x980 [ 1801.939828] ? pipe_to_sendpage+0x380/0x380 [ 1801.940465] ? do_splice_to+0x160/0x160 [ 1801.941059] ? security_file_permission+0xb1/0xe0 [ 1801.941775] do_splice_direct+0x1c4/0x290 [ 1801.942385] ? splice_direct_to_actor+0x980/0x980 [ 1801.943086] ? avc_policy_seqno+0x9/0x70 [ 1801.943703] ? security_file_permission+0xb1/0xe0 [ 1801.944435] do_sendfile+0x553/0x11e0 [ 1801.945011] ? do_pwritev+0x270/0x270 [ 1801.945570] ? wait_for_completion_io+0x270/0x270 [ 1801.946294] ? rcu_read_lock_any_held+0x75/0xa0 [ 1801.946976] ? vfs_write+0x354/0xb10 [ 1801.947540] __x64_sys_sendfile64+0x1d1/0x210 [ 1801.948207] ? __ia32_sys_sendfile+0x220/0x220 [ 1801.948885] do_syscall_64+0x33/0x40 [ 1801.949434] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1801.950179] RIP: 0033:0x7fe5e9dcbb19 [ 1801.950723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1801.953386] RSP: 002b:00007fe5e7341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1801.954490] RAX: ffffffffffffffda RBX: 00007fe5e9edef60 RCX: 00007fe5e9dcbb19 [ 1801.955562] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1801.956609] RBP: 00007fe5e73411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1801.957659] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000002 [ 1801.958713] R13: 00007ffed64c386f R14: 00007fe5e7341300 R15: 0000000000022000 [ 1801.974896] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 14:36:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) (fail_nth: 35) 14:36:49 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:36:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 17) 14:36:49 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b800000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200", 0x9e, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:36:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x8, 0xffc}) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000000)={0x3f, 0x0, 0x3}) close_range(r0, r0, 0x2) 14:36:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x2b}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:36:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) 14:36:49 executing program 7: rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getflags(r0, 0x40a) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xfffffffe, 0x6e6bb2, 0x2}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010102}}, 0xe8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x40081, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x603, 0x802) write$binfmt_elf64(r2, &(0x7f0000003600)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xde, 0x20, 0xff, 0x81, 0x2, 0x6, 0x5, 0xc6, 0x40, 0x51, 0x7, 0xfff9, 0x38, 0x1, 0x2c3, 0x20, 0x17c8}, [{0x60000000, 0x7f, 0x8, 0x5, 0x64, 0x8001, 0x80000001, 0x6}], "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", ['\x00']}, 0x1178) ioctl$SG_IO(r1, 0x2285, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ftruncate(r1, 0x1000003) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') preadv2(r3, &(0x7f0000000580)=[{&(0x7f0000000380)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x17) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$binfmt_aout(r4, &(0x7f0000001e00)={{0x10b, 0x0, 0x1, 0x1e8, 0x146, 0x101, 0x2c, 0x1}, "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", ['\x00', '\x00']}, 0x1220) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) unshare(0x11000280) [ 1820.806065] FAULT_INJECTION: forcing a failure. [ 1820.806065] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.807785] CPU: 1 PID: 10899 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1820.808866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1820.810059] Call Trace: [ 1820.810455] dump_stack+0x107/0x167 [ 1820.810995] should_fail.cold+0x5/0xa [ 1820.811571] ? ext4_init_io_end+0x23/0x180 [ 1820.812195] should_failslab+0x5/0x20 [ 1820.812755] kmem_cache_alloc+0x5b/0x310 [ 1820.813361] ext4_init_io_end+0x23/0x180 [ 1820.813957] ext4_writepages+0xee9/0x3350 [ 1820.814578] ? unwind_next_frame+0x13ef/0x1a90 [ 1820.815257] ? find_held_lock+0x2c/0x110 [ 1820.815896] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1820.816617] ? __is_insn_slot_addr+0x14c/0x290 [ 1820.817297] ? __kernel_text_address+0x9/0x40 [ 1820.817956] ? unwind_get_return_address+0x55/0xa0 [ 1820.818671] ? create_prof_cpu_mask+0x20/0x20 [ 1820.819355] ? stack_trace_save+0x8c/0xc0 [ 1820.819975] ? stack_trace_consume_entry+0x160/0x160 [ 1820.820731] ? kasan_save_stack+0x32/0x40 [ 1820.821338] ? kasan_save_stack+0x1b/0x40 [ 1820.821956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1820.822701] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1820.823426] do_writepages+0xee/0x2a0 [ 1820.823999] ? page_writeback_cpu_online+0x20/0x20 [ 1820.824722] ? lock_acquire+0x197/0x470 [ 1820.825304] ? create_object.isra.0+0x3ad/0xa20 [ 1820.825999] ? lock_release+0x680/0x680 [ 1820.826585] ? find_held_lock+0x2c/0x110 [ 1820.827202] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1820.827937] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1820.828725] ? mark_held_locks+0x9e/0xe0 [ 1820.829332] ? trace_hardirqs_on+0x5b/0x180 [ 1820.829990] filemap_write_and_wait_range+0x65/0x100 [ 1820.830734] __iomap_dio_rw+0x552/0x1110 [ 1820.831362] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1820.832037] ? ext4_orphan_add+0x253/0x9e0 [ 1820.832670] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1820.833394] ? ext4_empty_dir+0xae0/0xae0 [ 1820.834008] ? jbd2__journal_start+0xf3/0x7e0 [ 1820.834675] iomap_dio_rw+0x31/0x90 [ 1820.835224] ext4_file_write_iter+0xb26/0x18d0 [ 1820.835918] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1820.836598] ? kasan_save_stack+0x32/0x40 [ 1820.837202] ? kasan_save_stack+0x1b/0x40 [ 1820.837819] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1820.838559] ? iter_file_splice_write+0x16d/0xc30 [ 1820.839275] ? direct_splice_actor+0x10f/0x170 [ 1820.839948] ? splice_direct_to_actor+0x387/0x980 [ 1820.840663] ? do_splice_direct+0x1c4/0x290 [ 1820.841303] ? do_sendfile+0x553/0x11e0 [ 1820.841899] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1820.842572] ? do_syscall_64+0x33/0x40 [ 1820.843154] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1820.843945] do_iter_readv_writev+0x476/0x750 [ 1820.844624] ? new_sync_write+0x660/0x660 [ 1820.845229] ? avc_policy_seqno+0x9/0x70 [ 1820.845833] ? selinux_file_permission+0x92/0x520 [ 1820.846557] ? security_file_permission+0xb1/0xe0 [ 1820.847282] do_iter_write+0x191/0x700 [ 1820.847870] ? trace_hardirqs_on+0x5b/0x180 [ 1820.848521] vfs_iter_write+0x70/0xa0 [ 1820.849091] iter_file_splice_write+0x762/0xc30 [ 1820.849804] ? generic_splice_sendpage+0x140/0x140 [ 1820.850560] ? security_file_permission+0xb1/0xe0 [ 1820.851277] ? generic_splice_sendpage+0x140/0x140 [ 1820.852018] direct_splice_actor+0x10f/0x170 [ 1820.852676] splice_direct_to_actor+0x387/0x980 [ 1820.853372] ? pipe_to_sendpage+0x380/0x380 [ 1820.854018] ? do_splice_to+0x160/0x160 [ 1820.854611] ? security_file_permission+0xb1/0xe0 [ 1820.855334] do_splice_direct+0x1c4/0x290 [ 1820.855958] ? splice_direct_to_actor+0x980/0x980 [ 1820.856668] ? avc_policy_seqno+0x9/0x70 [ 1820.857276] ? security_file_permission+0xb1/0xe0 [ 1820.858006] do_sendfile+0x553/0x11e0 [ 1820.858588] ? do_pwritev+0x270/0x270 [ 1820.859159] ? wait_for_completion_io+0x270/0x270 [ 1820.859891] ? rcu_read_lock_any_held+0x75/0xa0 [ 1820.860574] ? vfs_write+0x354/0xb10 [ 1820.861128] __x64_sys_sendfile64+0x1d1/0x210 [ 1820.861785] ? __ia32_sys_sendfile+0x220/0x220 [ 1820.862466] do_syscall_64+0x33/0x40 [ 1820.863013] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1820.863762] RIP: 0033:0x7f1b0b8ffb19 [ 1820.864308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1820.866927] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1820.868012] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1820.869019] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1820.870048] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1820.871070] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000002 [ 1820.872080] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 [ 1820.880805] isofs_fill_super: get root inode failed [ 1820.891430] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1820.925799] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 1820.926830] EXT4-fs (loop6): mount failed 14:36:50 executing program 4: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0xf78bb000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x4, &(0x7f00000000c0)=[{0x800, 0x7, 0x81}, {0x9, 0x9, 0x7, 0x5}, {0x1ff, 0xec, 0x9, 0x3f6a}, {0x1aa, 0x7, 0x1, 0x7fffffff}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000240)=0x8) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="646508006c6c6f633c01"]) 14:36:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 14:36:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) 14:36:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:36:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 18) 14:36:50 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736602106c00080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="0000000072724161140000000b000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736602106c00080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e20202020202020202020100079e970325132510000e97032510300000000002e2e202020202020202020100079e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200079e970325132510000e970325104001a040000", 0x80, 0x11800}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000011000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 14:36:50 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)="7f83117ad54cfb933ae6167f38ae2012787a879522e44c17babf110dbff2de069c4b0a04a88dc919d3a486793c25b1e414a9a323d0d5e8522bbe0547f2e4c51d44ea706d5f4e2ebca6d56ccd3a7eaf2550837f4f2091df19b996d3594d9eb8be95da5661a30af278582a912135c9f9b1753669c6f6af74238a4621038f10b59bb855e82f0895b34fdae896a88708fe55ab2dbefa9157d6f03f890f1dc117f44d17ff69098026e73d82593fbc85b47189add630eb8539efed28493f38", 0xbc}, {&(0x7f0000000140)="52dadbea260a6e78699a5f7387da3b2e12c0c18c859eefbdab1731483120cb919563b093ef165a83b58e1acd3f7a2fdffd4aa5efec49d66c2e6009360d9c04ec7a9023", 0x43}, {&(0x7f00000001c0)="977e97cdfd0301b5e9b748bea29bf5c6fb4544184212a9028278420be700ed5d325a9cb247557727d7745625fb5445e0a20cc522f0a59a33e45a862d", 0x3c}, {&(0x7f0000000200)="5e87f4c62be27792a67728d6965c92b6c21cc568a108160b7ed7457a63b6339a34", 0x21}], 0x4, 0x0, 0x0, 0x90}, 0x20000001) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x3) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$FIOCLEX(r4, 0x5451) close(r4) syz_io_uring_setup(0x203, &(0x7f0000000080)={0x0, 0xc70b, 0x1, 0x0, 0x370}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r7, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r7, 0x1, 0x1000, 0xfffffffffffffff9}) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:36:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1821.155798] FAULT_INJECTION: forcing a failure. [ 1821.155798] name failslab, interval 1, probability 0, space 0, times 0 [ 1821.157527] CPU: 1 PID: 10931 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1821.158541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1821.159751] Call Trace: [ 1821.160151] dump_stack+0x107/0x167 [ 1821.160693] should_fail.cold+0x5/0xa [ 1821.161261] ? create_object.isra.0+0x3a/0xa20 [ 1821.161920] should_failslab+0x5/0x20 [ 1821.162480] kmem_cache_alloc+0x5b/0x310 [ 1821.163085] create_object.isra.0+0x3a/0xa20 [ 1821.163739] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1821.164480] kmem_cache_alloc+0x159/0x310 [ 1821.165085] ext4_init_io_end+0x23/0x180 [ 1821.165685] ext4_writepages+0xee9/0x3350 [ 1821.166303] ? unwind_next_frame+0x13ef/0x1a90 [ 1821.166975] ? find_held_lock+0x2c/0x110 [ 1821.167599] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1821.168316] ? __is_insn_slot_addr+0x14c/0x290 [ 1821.168999] ? __kernel_text_address+0x9/0x40 [ 1821.169641] ? unwind_get_return_address+0x55/0xa0 [ 1821.170360] ? create_prof_cpu_mask+0x20/0x20 [ 1821.171041] ? stack_trace_save+0x8c/0xc0 [ 1821.171656] ? stack_trace_consume_entry+0x160/0x160 [ 1821.172418] ? kasan_save_stack+0x32/0x40 [ 1821.173023] ? kasan_save_stack+0x1b/0x40 [ 1821.173629] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1821.174387] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1821.175089] do_writepages+0xee/0x2a0 [ 1821.175664] ? page_writeback_cpu_online+0x20/0x20 [ 1821.176378] ? lock_acquire+0x197/0x470 [ 1821.176960] ? create_object.isra.0+0x3ad/0xa20 [ 1821.177647] ? lock_release+0x680/0x680 [ 1821.178229] ? find_held_lock+0x2c/0x110 [ 1821.178842] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1821.179577] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1821.180353] ? mark_held_locks+0x9e/0xe0 [ 1821.180961] ? trace_hardirqs_on+0x5b/0x180 [ 1821.181605] filemap_write_and_wait_range+0x65/0x100 [ 1821.182353] __iomap_dio_rw+0x552/0x1110 [ 1821.182972] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1821.183650] ? ext4_orphan_add+0x253/0x9e0 [ 1821.184270] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1821.184997] ? ext4_empty_dir+0xae0/0xae0 [ 1821.185606] ? jbd2__journal_start+0xf3/0x7e0 [ 1821.186281] iomap_dio_rw+0x31/0x90 [ 1821.186825] ext4_file_write_iter+0xb26/0x18d0 [ 1821.187530] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1821.188196] ? kasan_save_stack+0x32/0x40 [ 1821.188808] ? kasan_save_stack+0x1b/0x40 [ 1821.189417] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1821.190158] ? iter_file_splice_write+0x16d/0xc30 [ 1821.190851] ? direct_splice_actor+0x10f/0x170 [ 1821.191533] ? splice_direct_to_actor+0x387/0x980 [ 1821.192226] ? do_splice_direct+0x1c4/0x290 [ 1821.192854] ? do_sendfile+0x553/0x11e0 [ 1821.193437] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1821.194112] ? do_syscall_64+0x33/0x40 [ 1821.194683] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1821.195478] do_iter_readv_writev+0x476/0x750 [ 1821.196142] ? new_sync_write+0x660/0x660 [ 1821.196752] ? avc_policy_seqno+0x9/0x70 [ 1821.197339] ? selinux_file_permission+0x92/0x520 [ 1821.198060] ? security_file_permission+0xb1/0xe0 [ 1821.198767] do_iter_write+0x191/0x700 [ 1821.199346] ? trace_hardirqs_on+0x5b/0x180 [ 1821.199999] vfs_iter_write+0x70/0xa0 [ 1821.200569] iter_file_splice_write+0x762/0xc30 [ 1821.201274] ? generic_splice_sendpage+0x140/0x140 [ 1821.202020] ? security_file_permission+0xb1/0xe0 [ 1821.202733] ? generic_splice_sendpage+0x140/0x140 [ 1821.203457] direct_splice_actor+0x10f/0x170 [ 1821.204106] splice_direct_to_actor+0x387/0x980 [ 1821.204797] ? pipe_to_sendpage+0x380/0x380 [ 1821.205439] ? do_splice_to+0x160/0x160 [ 1821.206026] ? security_file_permission+0xb1/0xe0 [ 1821.206736] do_splice_direct+0x1c4/0x290 [ 1821.207349] ? splice_direct_to_actor+0x980/0x980 [ 1821.208070] ? avc_policy_seqno+0x9/0x70 [ 1821.208681] ? security_file_permission+0xb1/0xe0 [ 1821.209417] do_sendfile+0x553/0x11e0 [ 1821.209998] ? do_pwritev+0x270/0x270 [ 1821.210571] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1821.211216] ? tick_program_event+0xa8/0x140 [ 1821.211894] __x64_sys_sendfile64+0x1d1/0x210 [ 1821.212556] ? __ia32_sys_sendfile+0x220/0x220 [ 1821.213250] do_syscall_64+0x33/0x40 [ 1821.213796] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1821.214555] RIP: 0033:0x7f1b0b8ffb19 [ 1821.215103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1821.217802] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1821.218913] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1821.219975] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1821.221025] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1821.222063] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000002 [ 1821.223118] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 [ 1821.347938] ISOFS: Unable to identify CD-ROM format. [ 1821.356585] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1821.384344] EXT4-fs (loop6): get root inode failed [ 1821.385215] EXT4-fs (loop6): mount failed 14:37:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 19) 14:37:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000002) 14:37:06 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x401}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x73c54e3e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, 0x3b, 0x18, 0x70bd25, 0x25dfdbfd, {0x1e}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x411e}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x81}, @generic="507ccfdd80e7ff365548f2955ac56615a6c6adb88d6a7725692408807c53ca5bfe19844df0be4eb5815a8f08108b1972b98d3f113c33eb7d74e3c99afb1dabf35b7b697abac3ab1365eb6091007d", @generic="99148d413ae24e05e971981e0055103d1db035ff2efaf33b58a172d80940946a73ebe80147a537015cca07992ce8abbc7a376a79dd79f5de2dfd8a07c1d1df0daef4f8cd4fd90a3a52e1d934071c9b74200d8351d7a3872cf9b98635de707792a7bce9dd44ebbdd8ca94fb4928bf"]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008084) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2, 0x2) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x30, 0x81, 0x9, 0x2, 0x0, 0x80, 0xa, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xb79f, 0xffffffff}, 0x4000, 0x1000, 0x40000000, 0x8, 0xa, 0x9, 0x800, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x6, r3, 0x8) 14:37:06 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:37:06 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a0011cd00000000fdff0000000000000002"], 0x1c}}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x304000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)={0xfffffffd, 0xfe0, 0x81f}) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1) 14:37:06 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x360, 0x1c, 0x200, 0x70bd29, 0x25dfdbfc, {0xa}, [@generic="5223870b42328e809194d8f3e7c266668edeba60c7c7b22a94096534b4ea932d9f6c568a6f4b61e466bf620cea2bd1c10283", @generic="d36347fe02223d364e6c6f6d44086c5e474ef2b7e22a8c4698a6fee2b119fc1b0115f1f4dde2691e447d6346c72a53be7a2bfb138eff717d2a8ab3f557919a5607b0002ff575c261a057872f309ad9517b84215df86b248258658680347e6090365eab269439c5e2cb9e7a6c701baa749fb355dc710b47e44b339efffc8a3da4adf2bb0ff3e9d9d384217780f3195b43816e87daf3f0ca43f2265a2d3b104b135615760c74bda66b010834b41b0e88a2efba9ceb128ab9cb6e3266e5c3f01f67231ec0a239d158229982b939b47c1b8396e443c449ed680ab54f7c1ca5625655bfc2795723cae0eb1fd36754a31e81", @generic="07d9f77dd332848c56ed66f995bbf675785aa146122ee1398c6ddddb9a7b05f5b41dcac9bb92072603f6cef7b1bb4849f8043bc8f3eb9597b8324c2154500e72c6d39397741030dd45d8cde59c383fcfdb3506e089c045abed1ebc9c8ad2e2d2ce1d290d35af8036b02c9e630ef1d2f8907ff0b3339baa49e0f915cf507ebe37f99396a76e80c64230e2a05c9db595f70e2d834927765091790adfe1c612", @typed={0x4, 0x8f}, @nested={0x187, 0x35, 0x0, 0x1, [@typed={0x14, 0xe, 0x0, 0x0, @ipv6=@mcast1}, @generic="d4b68979bdf048e1f528a026d1b1223d9a9944e29eb4e0a80824e403873115e50d215aa3560fffec6a70d15f0655242a50781a4b21cc3f205a4828e36fbdff9f01c782d98422b1956605626082a2a0a560f09761b01db10f129f300cd47188eb42d2954bfc608bca358e162df9dd68468f3a78277dda3ae34ac9da8ddd2fafb651fb", @generic="ade91b033806d038c84b5fa45e7cb12f5755e79a23359a9812cab59106ae7166378c5d3629d1d0406744831cf0a4f5350ac1553fc4af73a97dfacc41a82b911311ea5294af2cd676ffc6b2fe2989f80cf41b18e0900a9c2df4c751000386d09b7938cdc3666ba077797acb1cf15bd3d23542047b5ade4767dec0d7ba023de13e60c2b92877dd5636d04100214e23fa946864e7954b04123118966e703898406cdc598e9bc333d7ed6104990785a14ebdb253805bf24ac54fd1991651aaa5565c6ddf9536d0549ca0162900a7367b9de70dc5a14f03f175ea3b6e0fd8c6d65a52d084d42ed24269de2d94226efc"]}]}, 0x360}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:37:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x2e}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:37:06 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) [ 1837.466227] FAULT_INJECTION: forcing a failure. [ 1837.466227] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.467216] CPU: 0 PID: 10950 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1837.467782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1837.468458] Call Trace: [ 1837.468679] dump_stack+0x107/0x167 [ 1837.468979] should_fail.cold+0x5/0xa [ 1837.469298] ? ext4_init_io_end+0x23/0x180 [ 1837.469648] should_failslab+0x5/0x20 [ 1837.469961] kmem_cache_alloc+0x5b/0x310 [ 1837.470304] ext4_init_io_end+0x23/0x180 [ 1837.470638] ext4_writepages+0xee9/0x3350 [ 1837.471018] ? unwind_next_frame+0x13ef/0x1a90 [ 1837.471416] ? find_held_lock+0x2c/0x110 [ 1837.471773] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1837.472174] ? __is_insn_slot_addr+0x14c/0x290 [ 1837.472550] ? __kernel_text_address+0x9/0x40 [ 1837.472920] ? unwind_get_return_address+0x55/0xa0 [ 1837.473322] ? create_prof_cpu_mask+0x20/0x20 [ 1837.473699] ? stack_trace_save+0x8c/0xc0 [ 1837.474040] ? stack_trace_consume_entry+0x160/0x160 [ 1837.474461] ? kasan_save_stack+0x32/0x40 [ 1837.474798] ? kasan_save_stack+0x1b/0x40 [ 1837.475134] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1837.475552] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1837.475963] do_writepages+0xee/0x2a0 [ 1837.476276] ? page_writeback_cpu_online+0x20/0x20 [ 1837.476674] ? lock_acquire+0x197/0x470 [ 1837.476998] ? create_object.isra.0+0x3ad/0xa20 [ 1837.477378] ? lock_release+0x680/0x680 [ 1837.477700] ? find_held_lock+0x2c/0x110 [ 1837.478040] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1837.478448] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1837.478885] ? mark_held_locks+0x9e/0xe0 [ 1837.479224] ? trace_hardirqs_on+0x5b/0x180 [ 1837.479581] filemap_write_and_wait_range+0x65/0x100 [ 1837.480008] __iomap_dio_rw+0x552/0x1110 [ 1837.480354] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1837.480727] ? ext4_orphan_add+0x253/0x9e0 [ 1837.481072] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1837.481473] ? ext4_empty_dir+0xae0/0xae0 [ 1837.481810] ? jbd2__journal_start+0xf3/0x7e0 [ 1837.482179] iomap_dio_rw+0x31/0x90 [ 1837.482478] ext4_file_write_iter+0xb26/0x18d0 [ 1837.482862] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1837.483232] ? kasan_save_stack+0x32/0x40 [ 1837.483573] ? kasan_save_stack+0x1b/0x40 [ 1837.483918] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1837.484332] ? iter_file_splice_write+0x16d/0xc30 [ 1837.484722] ? direct_splice_actor+0x10f/0x170 [ 1837.485090] ? splice_direct_to_actor+0x387/0x980 [ 1837.485477] ? do_splice_direct+0x1c4/0x290 [ 1837.485835] ? do_sendfile+0x553/0x11e0 [ 1837.486159] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1837.486541] ? do_syscall_64+0x33/0x40 [ 1837.486858] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1837.487297] do_iter_readv_writev+0x476/0x750 [ 1837.487676] ? new_sync_write+0x660/0x660 [ 1837.488016] ? avc_policy_seqno+0x9/0x70 [ 1837.488349] ? selinux_file_permission+0x92/0x520 [ 1837.488750] ? security_file_permission+0xb1/0xe0 [ 1837.489161] do_iter_write+0x191/0x700 [ 1837.489484] ? trace_hardirqs_on+0x5b/0x180 [ 1837.489841] vfs_iter_write+0x70/0xa0 [ 1837.490155] iter_file_splice_write+0x762/0xc30 [ 1837.490550] ? generic_splice_sendpage+0x140/0x140 [ 1837.490963] ? security_file_permission+0xb1/0xe0 [ 1837.491359] ? generic_splice_sendpage+0x140/0x140 [ 1837.491766] direct_splice_actor+0x10f/0x170 [ 1837.492129] splice_direct_to_actor+0x387/0x980 [ 1837.492511] ? pipe_to_sendpage+0x380/0x380 [ 1837.492866] ? do_splice_to+0x160/0x160 [ 1837.493193] ? security_file_permission+0xb1/0xe0 [ 1837.493593] do_splice_direct+0x1c4/0x290 [ 1837.493931] ? splice_direct_to_actor+0x980/0x980 [ 1837.494321] ? avc_policy_seqno+0x9/0x70 [ 1837.494659] ? security_file_permission+0xb1/0xe0 [ 1837.495057] do_sendfile+0x553/0x11e0 [ 1837.495375] ? do_pwritev+0x270/0x270 [ 1837.495701] ? wait_for_completion_io+0x270/0x270 [ 1837.496099] ? rcu_read_lock_any_held+0x75/0xa0 [ 1837.496478] ? vfs_write+0x354/0xb10 [ 1837.496989] __x64_sys_sendfile64+0x1d1/0x210 [ 1837.497408] ? __ia32_sys_sendfile+0x220/0x220 [ 1837.497785] do_syscall_64+0x33/0x40 [ 1837.498089] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1837.498506] RIP: 0033:0x7f1b0b8ffb19 [ 1837.498812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1837.500302] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1837.500923] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1837.501503] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1837.502079] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1837.502655] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000002 [ 1837.503233] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 14:37:06 executing program 7: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1451c2, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1c8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x0, 0x4, 0x7, 0x1, 0x6, 0xb7}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="050100000000000000002b0000000a0001007770616e300000000c0005000000000000000000"], 0x2c}}, 0x0) pwrite64(r2, &(0x7f0000000480)="af", 0x1, 0x1000000) fallocate(r1, 0x8, 0x0, 0x8000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) 14:37:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0xb0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7) [ 1837.548210] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1837.549723] EXT4-fs (loop6): get root inode failed [ 1837.550178] EXT4-fs (loop6): mount failed 14:37:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 20) [ 1837.587352] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1837.600661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=10974 comm=syz-executor.4 [ 1837.601319] ISOFS: Unable to identify CD-ROM format. [ 1837.675444] FAULT_INJECTION: forcing a failure. [ 1837.675444] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.677356] CPU: 1 PID: 10978 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1837.678450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1837.679770] Call Trace: [ 1837.680201] dump_stack+0x107/0x167 [ 1837.680790] should_fail.cold+0x5/0xa [ 1837.681406] ? create_object.isra.0+0x3a/0xa20 [ 1837.682146] should_failslab+0x5/0x20 [ 1837.682765] kmem_cache_alloc+0x5b/0x310 [ 1837.683430] create_object.isra.0+0x3a/0xa20 [ 1837.684151] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1837.684976] kmem_cache_alloc+0x159/0x310 [ 1837.685657] jbd2__journal_start+0x190/0x7e0 [ 1837.686379] __ext4_journal_start_sb+0x214/0x390 [ 1837.687146] ext4_writepages+0x102d/0x3350 [ 1837.687844] ? unwind_next_frame+0x13ef/0x1a90 [ 1837.688588] ? find_held_lock+0x2c/0x110 [ 1837.689288] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1837.690080] ? __is_insn_slot_addr+0x14c/0x290 [ 1837.690822] ? __kernel_text_address+0x9/0x40 [ 1837.691544] ? unwind_get_return_address+0x55/0xa0 [ 1837.692344] ? create_prof_cpu_mask+0x20/0x20 [ 1837.693094] ? stack_trace_save+0x8c/0xc0 [ 1837.693756] ? stack_trace_consume_entry+0x160/0x160 [ 1837.694594] ? kasan_save_stack+0x32/0x40 [ 1837.695264] ? kasan_save_stack+0x1b/0x40 [ 1837.695938] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1837.696763] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1837.697555] do_writepages+0xee/0x2a0 [ 1837.698183] ? page_writeback_cpu_online+0x20/0x20 [ 1837.698981] ? lock_acquire+0x197/0x470 [ 1837.699627] ? create_object.isra.0+0x3ad/0xa20 [ 1837.700390] ? lock_release+0x680/0x680 [ 1837.701042] ? find_held_lock+0x2c/0x110 [ 1837.701713] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1837.702512] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1837.703397] ? mark_held_locks+0x9e/0xe0 [ 1837.704073] ? trace_hardirqs_on+0x5b/0x180 [ 1837.704790] filemap_write_and_wait_range+0x65/0x100 [ 1837.705619] __iomap_dio_rw+0x552/0x1110 [ 1837.706306] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1837.707053] ? ext4_orphan_add+0x253/0x9e0 [ 1837.707751] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1837.708555] ? ext4_empty_dir+0xae0/0xae0 [ 1837.709229] ? jbd2__journal_start+0xf3/0x7e0 [ 1837.709972] iomap_dio_rw+0x31/0x90 [ 1837.710570] ext4_file_write_iter+0xb26/0x18d0 [ 1837.711322] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1837.712063] ? kasan_save_stack+0x32/0x40 [ 1837.712729] ? kasan_save_stack+0x1b/0x40 [ 1837.713435] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1837.714176] ? iter_file_splice_write+0x16d/0xc30 [ 1837.714994] ? direct_splice_actor+0x10f/0x170 [ 1837.715735] ? splice_direct_to_actor+0x387/0x980 [ 1837.716518] ? do_splice_direct+0x1c4/0x290 [ 1837.717214] ? do_sendfile+0x553/0x11e0 [ 1837.717843] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1837.718575] ? do_syscall_64+0x33/0x40 [ 1837.719209] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1837.720090] do_iter_readv_writev+0x476/0x750 [ 1837.720813] ? new_sync_write+0x660/0x660 [ 1837.721502] ? avc_policy_seqno+0x9/0x70 [ 1837.722095] ? selinux_file_permission+0x92/0x520 [ 1837.722923] ? security_file_permission+0xb1/0xe0 [ 1837.723719] do_iter_write+0x191/0x700 [ 1837.724366] ? trace_hardirqs_on+0x5b/0x180 [ 1837.725069] vfs_iter_write+0x70/0xa0 [ 1837.725696] iter_file_splice_write+0x762/0xc30 [ 1837.726468] ? generic_splice_sendpage+0x140/0x140 [ 1837.727295] ? security_file_permission+0xb1/0xe0 [ 1837.728081] ? generic_splice_sendpage+0x140/0x140 [ 1837.728865] direct_splice_actor+0x10f/0x170 [ 1837.729565] splice_direct_to_actor+0x387/0x980 [ 1837.730349] ? pipe_to_sendpage+0x380/0x380 [ 1837.731047] ? do_splice_to+0x160/0x160 [ 1837.731709] ? security_file_permission+0xb1/0xe0 [ 1837.732491] do_splice_direct+0x1c4/0x290 [ 1837.733175] ? splice_direct_to_actor+0x980/0x980 [ 1837.733923] ? avc_policy_seqno+0x9/0x70 [ 1837.734594] ? security_file_permission+0xb1/0xe0 [ 1837.735400] do_sendfile+0x553/0x11e0 [ 1837.736050] ? do_pwritev+0x270/0x270 [ 1837.736676] ? wait_for_completion_io+0x270/0x270 14:37:06 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1837.737496] ? rcu_read_lock_any_held+0x75/0xa0 [ 1837.738495] ? vfs_write+0x354/0xb10 [ 1837.739136] __x64_sys_sendfile64+0x1d1/0x210 [ 1837.739885] ? __ia32_sys_sendfile+0x220/0x220 [ 1837.740639] do_syscall_64+0x33/0x40 [ 1837.741252] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1837.742081] RIP: 0033:0x7f1b0b8ffb19 [ 1837.742697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1837.745630] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1837.746877] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1837.748028] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1837.749197] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1837.750287] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000002 [ 1837.751480] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 14:37:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x30}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:37:06 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']) [ 1837.871040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=10974 comm=syz-executor.4 14:37:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 21) 14:37:06 executing program 4: r0 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x2, 0xfdef, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000), 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@ocfs2_parent={0x18, 0x2, {{0x3648}, {0x3ff}}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000240)=0x1) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x84}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) timer_gettime(0x0, &(0x7f0000000080)) r3 = gettid() socket$nl_xfrm(0x10, 0x3, 0x6) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000340)=0x80) rt_sigqueueinfo(r3, 0x0, &(0x7f0000000600)) capset(&(0x7f0000000140)={0x20080522, r3}, &(0x7f0000000180)={0x4, 0xcba, 0x6, 0x3, 0x800, 0x5}) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1837.964053] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1837.989562] EXT4-fs (loop6): get root inode failed [ 1837.990348] EXT4-fs (loop6): mount failed [ 1838.051498] ISOFS: Unable to identify CD-ROM format. [ 1838.056489] FAULT_INJECTION: forcing a failure. [ 1838.056489] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.058194] CPU: 0 PID: 11002 Comm: syz-executor.0 Not tainted 5.10.222 #1 [ 1838.059222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1838.060453] Call Trace: [ 1838.060850] dump_stack+0x107/0x167 [ 1838.061399] should_fail.cold+0x5/0xa [ 1838.061971] ? jbd2__journal_start+0x246/0x7e0 [ 1838.062654] should_failslab+0x5/0x20 [ 1838.063222] kmem_cache_alloc+0x5b/0x310 [ 1838.063849] jbd2__journal_start+0x246/0x7e0 [ 1838.064508] __ext4_journal_start_sb+0x214/0x390 [ 1838.065214] ext4_writepages+0x102d/0x3350 [ 1838.065838] ? unwind_next_frame+0x13ef/0x1a90 [ 1838.066518] ? find_held_lock+0x2c/0x110 [ 1838.067151] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1838.067878] ? __is_insn_slot_addr+0x14c/0x290 [ 1838.068557] ? __kernel_text_address+0x9/0x40 [ 1838.069218] ? unwind_get_return_address+0x55/0xa0 [ 1838.069935] ? create_prof_cpu_mask+0x20/0x20 [ 1838.070615] ? stack_trace_save+0x8c/0xc0 [ 1838.071227] ? stack_trace_consume_entry+0x160/0x160 [ 1838.071998] ? kasan_save_stack+0x32/0x40 [ 1838.072606] ? kasan_save_stack+0x1b/0x40 [ 1838.073214] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1838.073960] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1838.074676] do_writepages+0xee/0x2a0 [ 1838.075248] ? page_writeback_cpu_online+0x20/0x20 [ 1838.075965] ? lock_acquire+0x197/0x470 [ 1838.076547] ? create_object.isra.0+0x3ad/0xa20 [ 1838.077229] ? lock_release+0x680/0x680 [ 1838.077809] ? find_held_lock+0x2c/0x110 [ 1838.078417] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1838.079148] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1838.079929] ? mark_held_locks+0x9e/0xe0 [ 1838.080532] ? trace_hardirqs_on+0x5b/0x180 [ 1838.081176] filemap_write_and_wait_range+0x65/0x100 [ 1838.081921] __iomap_dio_rw+0x552/0x1110 [ 1838.082542] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1838.083210] ? ext4_orphan_add+0x253/0x9e0 [ 1838.083835] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 1838.084555] ? ext4_empty_dir+0xae0/0xae0 [ 1838.085157] ? jbd2__journal_start+0xf3/0x7e0 [ 1838.085825] iomap_dio_rw+0x31/0x90 [ 1838.086364] ext4_file_write_iter+0xb26/0x18d0 [ 1838.087051] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1838.087725] ? kasan_save_stack+0x32/0x40 [ 1838.088330] ? kasan_save_stack+0x1b/0x40 [ 1838.088936] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1838.089673] ? iter_file_splice_write+0x16d/0xc30 [ 1838.090376] ? direct_splice_actor+0x10f/0x170 [ 1838.091039] ? splice_direct_to_actor+0x387/0x980 [ 1838.091746] ? do_splice_direct+0x1c4/0x290 [ 1838.092376] ? do_sendfile+0x553/0x11e0 [ 1838.092957] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1838.093629] ? do_syscall_64+0x33/0x40 [ 1838.094197] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1838.094979] do_iter_readv_writev+0x476/0x750 [ 1838.095639] ? new_sync_write+0x660/0x660 [ 1838.096250] ? avc_policy_seqno+0x9/0x70 [ 1838.096845] ? selinux_file_permission+0x92/0x520 [ 1838.097558] ? security_file_permission+0xb1/0xe0 [ 1838.098276] do_iter_write+0x191/0x700 [ 1838.098853] ? trace_hardirqs_on+0x5b/0x180 [ 1838.099494] vfs_iter_write+0x70/0xa0 [ 1838.100069] iter_file_splice_write+0x762/0xc30 [ 1838.100768] ? generic_splice_sendpage+0x140/0x140 [ 1838.101509] ? security_file_permission+0xb1/0xe0 [ 1838.102215] ? generic_splice_sendpage+0x140/0x140 [ 1838.102931] direct_splice_actor+0x10f/0x170 [ 1838.103580] splice_direct_to_actor+0x387/0x980 [ 1838.104273] ? pipe_to_sendpage+0x380/0x380 [ 1838.104915] ? do_splice_to+0x160/0x160 [ 1838.105500] ? security_file_permission+0xb1/0xe0 [ 1838.106213] do_splice_direct+0x1c4/0x290 [ 1838.106821] ? splice_direct_to_actor+0x980/0x980 [ 1838.107521] ? avc_policy_seqno+0x9/0x70 [ 1838.108145] ? security_file_permission+0xb1/0xe0 [ 1838.108861] do_sendfile+0x553/0x11e0 [ 1838.109432] ? do_pwritev+0x270/0x270 [ 1838.109995] ? wait_for_completion_io+0x270/0x270 [ 1838.110702] ? rcu_read_lock_any_held+0x75/0xa0 [ 1838.111376] ? vfs_write+0x354/0xb10 [ 1838.111938] __x64_sys_sendfile64+0x1d1/0x210 [ 1838.112596] ? __ia32_sys_sendfile+0x220/0x220 [ 1838.113277] do_syscall_64+0x33/0x40 [ 1838.113822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1838.114564] RIP: 0033:0x7f1b0b8ffb19 [ 1838.115112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.117772] RSP: 002b:00007f1b08e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1838.118881] RAX: ffffffffffffffda RBX: 00007f1b0ba12f60 RCX: 00007f1b0b8ffb19 [ 1838.119925] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1838.120961] RBP: 00007f1b08e751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.121997] R10: 000000000020d314 R11: 0000000000000246 R12: 0000000000000002 [ 1838.123035] R13: 00007fff0e2b742f R14: 00007f1b08e75300 R15: 0000000000022000 [ 1838.124232] EXT4-fs (sda): ext4_writepages: jbd2_start: 9223372036854775807 pages, ino 16062; err -12 14:37:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x31}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:37:26 executing program 7: fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="736563757669ab9a"]) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x684]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7, 0x32}}, './file0\x00'}) sync() sync() 14:37:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x7fff, 0x7, 0x80}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x608400, 0x0) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) clone3(&(0x7f0000001500)={0x10000c00, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000340), {0xf}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000000380)=""/157, &(0x7f0000000440)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9, {r3}}, 0x58) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) ioctl$FIOCLEX(r9, 0x5451) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000001580)={0x10001, 0x7}) close(r9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x2, 0x7, 0xf7, 0x0, 0x1f, 0x4, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f0000000100), 0x3}, 0x240, 0x1ff, 0x17a7171c, 0x9, 0x995, 0x5, 0x8, 0x0, 0x401, 0x0, 0xffff}, r6, 0x9, r9, 0x5) setresuid(r5, r5, r5) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x724, 0x800}, {0x6775, 0x7}], r5}, 0x18, 0x2) 14:37:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, 0x0) 14:37:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:37:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000003) 14:37:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) (fail_nth: 22) 14:37:26 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000a40)={&(0x7f00000004c0), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/36, 0x24}, {&(0x7f0000000580)=""/246, 0xf6}, {&(0x7f0000000680)=""/77, 0x4d}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/113, 0x71}], 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8}, 0x10144) sendmsg$nl_generic(r4, &(0x7f0000000d80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x24, 0x1a, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@typed={0xc, 0x7f, 0x0, 0x0, @u64}, @nested={0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0xc0) getsockopt$packet_int(r3, 0x107, 0x14, 0x0, &(0x7f0000000100)) fcntl$addseals(r1, 0x409, 0x1b) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x10, 0x3f2, 0x20, 0x70bd25, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r5 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x7, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="1d23de7449ee513d0fbbb59dcf0b1bbac60fe6674c12730f11d2e4a1e5f805fa4b51984ac5bc8ca2939f684ddf22e6602e5bd13a291e12eb168fd3a24106088d1c278eafb335beb6e01629099e679c512f7219aa2f120c110a54e373ea9d3aaeb23dde64ff57a34a6b52aa10e55013c177ccf8a58eb34a2f8f5a64e95da56e9e9bb1de581df6f59867fe2d2005abe10959b04704", 0x94, 0x101}], 0x14041, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0x7fff}}, {@dmode={'dmode', 0x3d, 0x2}}, {@map_normal}, {@unhide}, {@block}], [{@smackfsfloor={'smackfsfloor', 0x3d, '^&:^/({%\\#-!'}}]}) dup2(r3, r5) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) read$hiddev(r1, &(0x7f0000000280)=""/175, 0xaf) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x40, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}}, 0x4004844) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 1857.320302] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1857.389562] cgroup: fork rejected by pids controller in /syz2 14:37:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:37:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, 0x0) 14:37:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {0x0, 0x0, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:37:26 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x3c}}}, 0xb8}}, 0x0) r1 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r1, 0x0, 0x800, 0x2}) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r3, r2, 0x0) syz_io_uring_setup(0x5606, &(0x7f0000000040)={0x0, 0xef33, 0x0, 0x0, 0x256}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) pipe2(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) openat(r3, &(0x7f0000000000)='./file1/file0\x00', 0x141e40, 0x182) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={0x0, @l2tp={0x2, 0x0, @loopback}, @ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @nl=@unspec, 0x5, 0x0, 0x0, 0x0, 0xfff8, &(0x7f0000000340)='ip6_vti0\x00', 0x1, 0x5}) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) 14:37:26 executing program 2: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000040)={0x1b5c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x98, 0xfa, "1fee878f141d8efd8220aa8a9d63cdfe28b3ee7a043f16ba4c566561becabcef94dee26e741c0f52ec8c368aee4b7720058ac231a350275cc34edbfd6e1c8fce8dc34bbcea56b723670c71ebd26f0c718d6132bfdef711b6d5925290f6669c4c5639e667b036f59f1e2a66740a4c220f3b92118bb7809c507c8624aaa0d7e16c773258099648f06071d6c44ceadcbe1402aea0f6"}, @NL80211_ATTR_FILS_ERP_REALM={0xfc, 0xfa, "c9c7b09e92f83282e4995fe0e30e41771cd64ba7a0b28c2b9122084e1145fa563deaf0a8cdcef70c0c946c92b1f90320220d4ce6dabd86800e285b27c66cc2642afa45d858fa5d4c7cbb043bfb5420fb596126be82553cc02928d3efd1d1be975822d792a1f0ac262c3e3e7d15e9067ca2c476db0ff33a86c998acd031478db58d27fbe437a2df59b003d0994ed739f9c75d2b3d7fcac8980d73347de1530369a587d9b8da771225ee0a11ec556a1d560bf2a579113822ca4dbbd709d6c87e14f2fc14615ca304f286ba07c3d6c5fcf0d4eb3326aafa32d9216c462117183df6180415aa6e30c80affbaafa03ae62dc0d34ed5973dfafe24"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "d7acaf4d9b2d1ea9ebd4bc"}], @NL80211_ATTR_IE={0x20b, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x40, 0x3c, 0x7f}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @cf={0x4, 0x6, {0x9, 0x3a, 0xdbf, 0x1}}, @fast_bss_trans={0x37, 0x11f, {0x8, 0x7, "1ecb0415aa44d00b10058e7a78c105a7", "fa6d2ac0682a6f409ad7a95734e8e8f4cda86c28d492feff6c3c3193fea33da9", "879b4e5f3bf41a3fdeb8db84c5a7882520d03125df5bf851b604cfd0e16855e8", [{0x1, 0x28, "0e3027a95a61d9660658e8289f8f5fe15f8556f26d8bfa1d7e231c625292b5ef163ed91448958956"}, {0x3, 0x8, "8a3ca30bd6fcfd35"}, {0x2, 0x20, "e0d1ea1057a7641ac27f1e5a0dba7fdcaab2b41bb871127a1c63208b63f6c99f"}, {0x1, 0x16, "120ca22aa10a864bbde52856e704275e59f9e802c027"}, {0x2, 0x12, "0a3b04227637227159986e9c47fb07cd6a7f"}, {0x2, 0x27, "020fd1582fa7cc4d1e1d56ffe4b862b2ad7515ebb2070297521a247360bce4f53e0ea66f74dcd0"}, {0x1, 0x20, "9d9bf6f75445c296a280364e7b669d3b30c086d0b1f910a202e476b31b2949a6"}]}}, @tim={0x5, 0xd1, {0x8, 0x16, 0xfc, "06310bae940e76509a7497843fde07f63d2449f5b71ce4bf7ed034b9dfd7e7887c136aa9766d4afc5bbf2a04dc99a9944e8f60411a5441fc64bc7c9d88950b05b8dbc0d8d6bb5717d6e07afd11ad0696b2768be1b562e765508acb8695cfea0ce4172f6981f2d573ea7abf42d4ad2a5bb92785a413e92a36d9be9b54f80ce8547f754684767be53ea44fc80c91f60fc12c78d3a299e605288b5e9b9686a0c453c55bba56d7979e294b9768a761d7ff72eee3caec1a596b40da3f1d457d085dc53e04857cef7e2a7a13c8469a0a9a"}}, @supported_rates]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "04b7f8ab0585a9e9"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_REALM={0x3c, 0xfa, "b8c3703d4dbaea3255fd529830c3d0a3fd5dee8b47fdf124191799300a1ad0400a4f3eb241ffd81e8e928c8384ead25cc2785954fa6168fd"}, @NL80211_ATTR_FILS_ERP_REALM={0x8, 0xfa, "6fbf0000"}], @NL80211_ATTR_IE={0xc3, 0x2a, [@random_vendor={0xdd, 0x35, "82df447fe30940a0cbacc532ef6cde1ee119c0ff5be677b840ff54041b9191d0f4aefe18b47a1b3fa00a60aa1880963a8a330df674"}, @ssid={0x0, 0x6, @default_ap_ssid}, @tim={0x5, 0x58, {0xff, 0x14, 0x9, "edba3f90cdede8913e645dfe5c838b6da1c276483144b41402684917c29160253dba6c169fb613466c6f7a5da30ad103e186bdabc8f242025d939e343905473e309ecc6ad229b47fd5de1501b051d50ebc5f1b7c81"}}, @supported_rates={0x1, 0x2, [{0x30, 0x1}, {0x24, 0x1}]}, @peer_mgmt={0x75, 0x18, {0x1, 0x6, @val=0x9, @val=0x3a, @val="760b907fb4993b6b94fbbbdac2ec6ab2"}}, @mesh_chsw={0x76, 0x6, {0x20, 0x8, 0x8, 0x1}}]}, @NL80211_ATTR_IE={0x184, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @perr={0x84, 0x108, {0x7, 0x10, [@ext={{}, @device_a, 0x9, @broadcast, 0x1e}, @ext={{}, @device_b, 0x5, @broadcast, 0x12}, @ext={{}, @device_b, 0x6, @device_a, 0xb}, @ext={{}, @device_a, 0x6, @device_b, 0x1f}, @not_ext={{}, @device_a, 0x2, "", 0x15}, @not_ext={{}, @device_a, 0x1b, "", 0x27}, @ext={{}, @broadcast, 0x8001, @device_a, 0x22}, @not_ext={{}, @broadcast, 0xb1, "", 0x1}, @ext={{}, @device_a, 0x101, @broadcast, 0xe}, @ext={{}, @device_a, 0x100, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x6, "", 0x1c}, @ext={{}, @device_a, 0x100, @device_b, 0x27}, @not_ext={{}, @broadcast, 0x101, "", 0x28}, @ext={{}, @broadcast, 0x1, @device_a, 0x26}, @not_ext={{}, @device_b, 0x10000, "", 0x10}, @not_ext={{}, @broadcast, 0x2, "", 0x35}]}}, @tim={0x5, 0x66, {0x4, 0x9f, 0x80, "8fcff3e74668419e340d503b58fde98ce5395faf7e27a5508c9f4b5be8de4f8c43cd4be8706058f3f92bfae9534ffa63c5dea615bebb2358acf5caa2dfeb8926c4771929a2042620cd85d850724b2495242eaf28ff5b169592941efe0279cbc85c5ccf"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x3a8, 0x2a, [@measure_req={0x26, 0x101, {0x1, 0x62, 0x7, "1b788b6099aee8a846310934d32f194183d5621da9c5ee525cb2ff4361f1f3de750a5b1e71bc79f51dd2c47c097ccc1414cf6289c64262fb5395a15748e55f9a0eca11d4dcad5304da997e72c04ebaab96641e2ccda3908abd583cf7f2ac6b628d309f8962bfb96593b1614442633be3d787deb1f567e31100db722120f9001721726d3396a9c9753a3e28c062994d20b745105b873285613ab5143d1be8ccea050317b4cc8e01d56788f3eb0ca1fb48a39ae4370eeb1af976c27c5a80fe66a6d0ec7d0a2e5853e1280f90ed4260f2fa81300a06b6ab6ca4da70eada7a0ad78e60e58c140045350e60c93f5d70e408ec616b4b4f3942cad9258dfd119e43"}}, @rann={0x7e, 0x15, {{0x1, 0x7d}, 0x3f, 0x3, @broadcast, 0x3, 0x800, 0xffffff81}}, @mesh_chsw={0x76, 0x6, {0xfa, 0x9, 0x23, 0x5}}, @tim={0x5, 0x9b, {0x43, 0xac, 0x2, "d8c8ecd8531bc17d3cdbc9b79a8a9988784c22adbedd65922cea4aa6e67d61a7181aa1d05821d11edf611d78dcb4c3dad60d5a05e2e352ee0edf2d6ed8abdbf3c978a4780cca3b67e6727b2b6447cb40ff25d43f17150d1de6ca43d6ef475dca0433cdf7e9351862d8d696b42067051249a12b8f892e5643def48c52f6a5fee56d7f08c64c10b728df71f7037833aaa1912e8f80465eb394"}}, @supported_rates={0x1, 0x5, [{0x1b, 0x1}, {0xc, 0x1}, {0x1, 0x1}, {0x6c}, {0x5}]}, @tim={0x5, 0xf3, {0x0, 0xd8, 0x1, "f036853f00c8b772bdf8c0c06d81c8bf360a112919f61c46a97836e23f75264b99dc508e79dcf0f4069ae2a951ef655bc6dfe1c051544d7202046ac46ee4fd8ac9a3da0c4eaf3f5684ccb8eedee98d08d871401c2275c042149ac63cb2269a825980d7efa66fe3cc25454e41a38185b6be0a7602938a7854ba1d3f427ff0eeecb30176d76343000dbaa597da3e063bc99bb3bf5734d25759a8ef7ef58a38dbf684a2e8e9d07fdc84f1126743b967ad72efa61507dfed3c5cf5da2c621d9ab7651280cb59d63fea0878e415cfae9e52ec82268cb42b33b4fd76feb4fc4a451920c9c919e096cbc47420bc82b3ef1b5eb4"}}, @measure_req={0x26, 0xe7, {0x0, 0x4, 0x0, "2f3218a8bed5d0d0826fd8822ab94aea708ec7c5e5258cdcb7b7f3072089acde38a33ff672956445558973525c703d86c48fab6b5484cbff8cadc13e627cfa730f714bd725b4c64ede9eb5404b0ccad5d8f974110ea4c269bd4b7cdddde711097a5384bb08cccc4997b030af699cd4c7f3f90e833d3eff037fc3fb575da7276c819862e33fee6cdd9416385a1a0c378a78853b79c3f91002de734dd28124e5edb92a43ccdaf9052b782bc7cfe01302148fb95e79f543d662c0d7df204771273f584ee26f8dab58f906985dc09ede48ffff31527ff02d1656001595cadf12858d99494c2b"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_REALM={0x16, 0xfa, "ba0b2555f3cb649a773f421104b2f7a37f40"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x81}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "3675664d9202bfc7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "d2c9393e27c88d73eb"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "f79683c21a5839dc0d"}, @NL80211_ATTR_FILS_ERP_RRK={0xcc, 0xfc, "7d6e4baa506b888d2e364c7fe3423769002ef933a93181ea70ed309b27e5581cebd4d83dfe1eda2ec61e88961ee121d34d4c43fe9590641d1c6c2cc0086f9a4458a3a9daaffd62aa20c43984c81e79cbeba11ae6fb8b1102b888fc39038b571f8ee3e07af93e491a5edfd5e2acda098ba4cf5d17eb1840709b36fbd151a8861180d98ba9470c0dd1fc938e47a988e453ed15912c640ebc672e80aef9063261d2ffc11a53c65bc69631b8383c40ec40cfad4b1fa7db06616a3f687ec6914f6e7e02e4422a58afc085"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x96}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "8e8b27f255837ba8d0e884e497"}]]}, 0x1b5c}}, 0x20000010) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) ioctl$FIOCLEX(r2, 0x5451) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000023c0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002380)={&(0x7f0000001cc0)={0x6b4, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x101, 0x6}}}}, [@NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x6c, 0x1b, 0x9, 0xb, 0x5, 0x18, 0x30, 0x60, 0x36, 0x16, 0xc, 0x3, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x9, 0x30, 0x24, 0xa, 0x2, 0x24, 0x36, 0x68, 0x9, 0x5, 0x5, 0xf36ddd4ec0dfce2e, 0x2, 0x30, 0x24, 0x2, 0x1, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x401, 0x7, 0x0, 0x8, 0x8001, 0x3, 0x624]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x1, 0x30, 0x9, 0x0, 0x6c, 0x36, 0x24, 0x12, 0x5, 0x60, 0x1b, 0x12, 0x5]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x2}, {0x2, 0x5}, {0x1, 0x9}, {0x3, 0x6}, {0x5, 0x7}, {0x7, 0xa}, {0x7, 0x7}, {0x6, 0x6}, {0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x3, 0x5}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x3}, {0x6, 0xa}, {0x4}, {0x7, 0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x1}, {0x4, 0x1}, {0x7, 0x7}, {0x3, 0x5}, {0x3, 0x4}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0x8}, {0x5, 0x1}, {0x6, 0x8}, {0x0, 0x7}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x5}, {0x3, 0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x5}, {0x3, 0x6}, {0x2, 0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x1, 0x8}, {0x0, 0x7}, {0x6, 0x8}, {0x4, 0x6}, {0x3, 0xa}, {0x1}, {0x2, 0x9}, {0x1, 0x4}, {0x1, 0xa}, {0x2, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0x48, 0x16, 0x12, 0x12, 0x16, 0x1b, 0x48, 0x12, 0x60, 0x48, 0x48, 0x16, 0x24, 0x1, 0xc, 0x3, 0x6c, 0x12, 0x12, 0x8d065d330b21f867, 0x48]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x4}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0xa}, {0x4, 0x9}, {0x3, 0x9}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0x4}, {0x5, 0x4}, {0x7}, {0x0, 0x7}, {0x3}, {0x7, 0x9}, {0x1, 0x2}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x150, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0xc, 0x12, 0x5, 0x30, 0x6c, 0x5, 0x3, 0x24, 0x12, 0x24, 0x3, 0x36, 0xc, 0x12, 0x36, 0x5, 0x16, 0x1, 0x9, 0x48]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x5}, {0x4, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x1}, {0x3, 0x9}, {0x6, 0x3}, {0x4, 0x1}, {0x6, 0x2}, {0x4, 0x6}, {0x4, 0x2}, {0x1, 0x1}, {0x5, 0x7}, {0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x5, 0x1}, {0x5, 0x9}, {0x2, 0xa}, {0x2, 0x9}, {0x2, 0x1}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0xa}, {0x1, 0x9}, {0x4, 0x6}, {0x6}, {0x7, 0x6}, {0x5, 0x4}, {0x6, 0x4}, {0x5, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {0x5, 0x9}, {0x7, 0x4}, {0x7, 0x8}, {0x4, 0x1}, {0x4, 0x6}, {0x3, 0x2}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x5}, {0x4}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x20, 0x0, 0x6, 0x2, 0x3, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x8, 0x1000, 0x4, 0xfffd, 0x5, 0x1]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x4}, {0x0, 0x2}, {0x1, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x3, 0x6}, {0x6}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0x8}, {0x5, 0x9}, {0x3, 0x6}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x6}, {0x2, 0x5}, {0x2, 0x8}, {0x5, 0x6}, {0x0, 0x7}, {0x4, 0x4}, {0x6, 0xc}, {0x5, 0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x2}, {0x7, 0x1}, {0x0, 0x4}, {0x7, 0x9}, {0x5, 0x6}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x3, 0x3}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0x6}, {0x0, 0x7}, {0x6}, {0x3, 0x7}, {0x3, 0x1}, {0x3}, {0x1}, {0x2, 0xa}, {0x4, 0x8}, {0x1}, {0x4, 0x7}, {0x2, 0x3}, {0x6, 0x8}, {0x3, 0x7}, {0x4, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x2, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x1, 0x7}, {0x2, 0x3}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0xa}, {0x7, 0x9}, {0x7, 0x1}, {0x3, 0x1}, {0x6, 0x8}, {0x4, 0x1}, {0x7, 0xa}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x1}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x7c, 0x6c, 0x0, 0xb, 0x60, 0x2, 0x1, 0x12, 0x3, 0x6c, 0x4, 0x24, 0x9, 0x9, 0x9, 0x1b, 0x4, 0x3, 0x9, 0x36, 0xc, 0x1b, 0x24, 0x6c, 0x16, 0x16, 0x6c, 0x9, 0x33, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1}, {0x0, 0x7}, {0x7, 0x6}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x7, 0xa}, {0x2}, {0x4, 0x2}, {0x0, 0x9}, {0x7, 0x5}, {0x5, 0x5}, {0x4, 0x1}, {0x0, 0x9}, {0x3, 0x7}, {0x1, 0x9}, {0x6, 0x8}, {0x4, 0x5}, {0x7, 0x8}, {0x2, 0x1}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0xa}, {0x2}, {0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x9}, {0x0, 0x9}, {0x2}, {0x1, 0x4}, {0x1}, {0x6, 0xa}, {0x1, 0x8}, {0x5, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x5}, {0x3, 0x7}, {0x7, 0x9}, {0x4, 0x5}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0x5}, {0x3, 0x9}, {0x4, 0x9}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x7}, {0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x164, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x401, 0x4, 0x7ff, 0x2, 0x3ff, 0x800]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x62, 0xc808ea90da08f6a9, 0x16, 0x4, 0x3, 0x60, 0x2, 0xc, 0x48, 0x56, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x100, 0x4, 0x3, 0x401, 0x6, 0x1, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0x2, 0x2, 0x3]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x30, 0x3, 0x5]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x9}, {0x6, 0x2}, {0x5, 0xa}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x5}, {0x2, 0x2}, {0x7, 0x9}, {0x4, 0x4}, {0x6, 0x8}, {0x6, 0x2}, {0x3, 0x7}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x24, 0x1, 0x36, 0x48, 0xc, 0x60, 0x1, 0x18, 0x24, 0x0, 0x5, 0x5, 0x2, 0x60, 0x18, 0xc, 0x60, 0x18, 0x4, 0x30, 0xb, 0x1b, 0x5, 0x13, 0x60, 0x3, 0x36, 0x4, 0x0]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x4}, {0x1, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x5, 0x5}, {0x7, 0x3}, {0x0, 0x8}, {0x3}, {0x1, 0x7}, {0x6, 0x9}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x4, 0x6}, {0x2, 0xa}, {0x4, 0xa}, {0x7, 0x9}, {0x6, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {}, {0x1, 0x9}, {0x2, 0x2}, {0x3, 0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x1}, {0x4}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0x7}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x8}, {0x6, 0x6}, {0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x5, 0x8}, {0x5, 0x7}, {0x2, 0x7}, {0x3, 0x7}, {0x7, 0x4}, {0x5, 0x5}, {0x1}, {0x4, 0x3}, {0x4, 0x1}, {0x5, 0x6}, {0x4, 0x5}]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x5, 0x6}, {0x3, 0x4}, {0x5, 0x9}, {0x6, 0x6}, {0x4, 0xa}, {0x3, 0x9}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x6}, {0x7, 0x1}, {0x7, 0xa}, {0x0, 0x6}, {0x6}, {0x6, 0x3}, {0x4}, {0x6, 0x8}, {0x4}, {0x5, 0x6}, {}, {}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x1}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x2}, {0x3, 0x1}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x7, 0x3}, {0x2, 0x2}, {0x3, 0xa}, {0x4, 0x2}, {0x3, 0x6}, {0x6, 0x2}, {0x2, 0x9}, {0x4, 0x8}, {0x4, 0xa}, {0x1, 0x9}, {0x7, 0x5}, {0x3, 0x8}, {0x0, 0x8}, {0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x6, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x4, 0x3}, {0x4, 0x2}, {0x3}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x6, 0xa}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x1}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x5, 0x36, 0x3d, 0x1, 0x48, 0x30, 0x30, 0x12, 0x2, 0xb, 0x48, 0x6, 0x9, 0xb, 0x1, 0x5, 0x2, 0x44, 0x1b, 0x3, 0x12, 0x2, 0xa, 0x3, 0x16, 0x1b, 0x6, 0x4, 0x5, 0x1b, 0x12, 0x6]}]}]}, @NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x5, 0x5, 0x36, 0x60, 0x48, 0x4, 0x5, 0x1b, 0x6, 0x6, 0x4, 0x56, 0x89, 0x12, 0x18, 0x48, 0x9, 0x16, 0xc, 0x64]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x30, 0x16, 0x16, 0xb, 0x30, 0xb, 0x3, 0xb, 0x2, 0x36, 0x5f, 0x56, 0x48, 0x24, 0x60, 0x30, 0x9, 0xc, 0x3, 0x4, 0xd8, 0x0, 0x6, 0x5, 0x3, 0x9, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x9, 0x5, 0x8000, 0x0, 0xa1a, 0xa9]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x7}, {0x6, 0xa}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x4, 0x9}, {0x1, 0x9}, {}, {0x3}, {0x7, 0x2}, {0x1, 0x3}, {0x3, 0x8}, {0x2, 0x5}, {0x3, 0xa}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x3, 0x5}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0x1}, {0x7, 0x7}, {0x7}, {0x3}, {0x7, 0x5}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {0x1}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x14}, {0x5, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x7, 0x9}, {0x0, 0x5}, {0x5, 0x9}, {0x2, 0x6}, {0x7, 0x8}, {0x6, 0x2}, {0x7, 0x7}, {0x6}, {0x1, 0x7}, {0x2, 0x5}, {0x5}, {0x3, 0x7}, {0x0, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x3}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x7}, {0x7, 0x3}, {0x4, 0x8}, {0x5, 0x7}, {0x3, 0x7}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x4, 0x2, 0x3, 0x5, 0x30, 0x30, 0x1, 0x73ff09eab8bd23ad, 0x36]}]}]}, @NL80211_ATTR_TX_RATES={0x21c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x3f, 0x400, 0x0, 0x8, 0x4, 0xffff, 0x2b13]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x1, 0x5, 0x5, 0x4]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1}, {0x3, 0x2}, {0x2, 0x8}, {0x5, 0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x1}, {0x6, 0x3}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x2}, {0x6, 0x4}, {0x4, 0xa}, {0x2, 0x3}, {0x6, 0x1}, {}, {0x3, 0x6}, {0x1, 0x6}, {0x1, 0xa}, {0x4}, {0x7, 0x3}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0xa}, {0x6, 0x4}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0xa}, {0x4, 0x2}, {0x4, 0x5}, {0x6, 0x4}, {0x5}, {0x0, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x5}, {0x1, 0x6}, {0x4, 0xa}, {0x4, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x5, 0x2}, {0x6}, {0x2, 0x4}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0x2}, {0x6}, {0x3, 0x2}, {0x3, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x3}, {0x7, 0x9}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x3}, {0x1, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x1b]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x16, 0x4, 0x48, 0x9, 0xe, 0x18, 0x16, 0x3, 0x60, 0x9, 0x1b, 0x4, 0x1b, 0x1b, 0x6c, 0x18, 0x60, 0x3, 0x2, 0x60, 0x60, 0x1b, 0x60, 0xb, 0x12, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xedf6, 0x2, 0x8, 0x1000, 0x0, 0xbf11, 0x8000, 0x2]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x1}, {0x3, 0xa}, {0x5, 0x4}, {0x3, 0x6}, {0x2, 0x6}, {0x6, 0xa}, {0x0, 0x3}, {0x7, 0x1}, {}, {0x1, 0x9}, {0x7}, {0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x9}, {0x5, 0x5}, {0x1, 0x6}, {0x2, 0x4}, {0x6, 0x3}, {0x6, 0x8}, {0x4, 0x3}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x4}, {0x4, 0x3}, {0x4, 0x5}, {0x7, 0x8}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x6}, {0x3, 0x1}, {0x5, 0x8}, {0x3, 0x4}, {0x1, 0x1}, {0x7}, {0x6, 0x7}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x9}, {0x4, 0x9}, {0x5, 0x4}, {0x1, 0xa}, {0x3, 0x6}, {0x2, 0x7}, {0x7}, {0x6, 0x9}, {0x2, 0x8}, {0x4, 0x8}, {0x4, 0x6}, {0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x3}, {0x2, 0x3}, {0x7, 0x1}, {0x2, 0x7}, {0x7, 0x3}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x2}, {0x0, 0x5}, {0x3, 0x2}, {0x4, 0x3}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x6}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x6}, {0x5, 0x9}, {0x7, 0x7}, {0x0, 0x1}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x5, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x5, 0xa}, {0x6, 0x4}, {0x4, 0x8}, {0x6, 0x4}, {0x3, 0x2}, {0x1}, {0x6, 0x2}, {0x3}, {0x4, 0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x7, 0x4}, {0x2, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x2, 0x7}, {0x3, 0x2}, {0x2, 0x3}, {0x1, 0x7}, {0x1, 0x8}, {0x4, 0x1}, {0x1}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x7}, {0x5, 0x6}, {0x0, 0x3}, {0x7, 0x3}, {0x5, 0x2}, {0x2, 0x3}, {0x0, 0x9}, {0x3, 0x5}, {0x4, 0x6}, {0x2, 0x5}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x1000, 0x2, 0x7, 0xd5, 0x7, 0x9, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x48, 0x36, 0x6c, 0x6, 0x48, 0x18, 0x2, 0x2, 0x9, 0x6, 0x36, 0x30, 0x1b, 0x24, 0x60, 0x48, 0xb, 0x24, 0x1, 0x2, 0x30, 0xa, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x326, 0x20, 0x9, 0x3aae, 0x5, 0x0, 0xb9a]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x9}, {0x4, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x2, 0x1}, {0x2, 0x2}, {0x1, 0x8}, {0x6, 0x6}, {0x0, 0x17}, {0x4, 0xa}, {0x5, 0x2}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x4}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x2, 0xfff7, 0x4c, 0x6, 0x0, 0x6]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x4, 0x6}, {0x0, 0x8}, {0x5, 0x2}, {0x6, 0x2}, {0x5, 0x5}, {0x3, 0x2}, {0x5, 0x9}, {0x4, 0x9}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0xa}, {0x3, 0x2}, {0x5, 0x2}, {0x3, 0x9}, {0x7, 0x2}, {0x0, 0x5}, {0x1}, {0x1, 0x2}, {0x5}, {0x1, 0x1}, {0x7, 0x9}, {0x0, 0x7}, {0x7, 0x2}, {0x1, 0x4}, {0x2, 0x4}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x9}, {0x6}, {0x2, 0x6}, {0x4}, {0x6, 0x1}, {0x3, 0x4}, {0x3}, {0x1, 0xa}, {0x1}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x3}, {0x7, 0x1}, {0x7, 0xa}, {0x4, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x2, 0x2}]}]}]}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x8000}, 0x40400) syz_open_dev$tty1(0xc, 0x4, 0x1) 14:37:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, 0x0) [ 1857.722612] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1857.726744] EXT4-fs (loop6): get root inode failed [ 1857.727526] EXT4-fs (loop6): mount failed 14:37:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0xffffffff000) 14:37:44 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x5, 0xfffffffffffffd2d, 0x0, 0x91, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[]) mkdirat(r1, 0x0, 0x2) umount2(&(0x7f0000000080)='./file0\x00', 0x4) lseek(r1, 0xfa2b, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0xf1ce1020965a79b6, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRESOCT, @ANYRES32=r1, @ANYRESDEC=r1]) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)=0x0) symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f, 0x0, &(0x7f00000001c0), 0x2010004, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESDEC=r3, @ANYBLOB="2c726f6f74636f6e746578743d73746166665f752c646f6e745f686173682c0089cd4d8602d6c356b08cb1d65ba5aa95aac3743d4f260cbe8154f2bface0194a45d4a4b7ec0745d124edf72a9c8eb8b93237254e7a41998ecb49169b717217dd454f255f86a73f95606db3b67ab5cdc4c2fe279cb27a819edbe6a85f83871084516130ca79798843c904c765479401c4984df6c632eba2ce2df2f514e8eec05c9b098a34ad1e"]) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) close(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 14:37:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {0x0, 0x0, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:37:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:37:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000004) 14:37:44 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) 14:37:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/48) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r1}, 0x0) ioctl$FIOCLEX(r1, 0x5451) close(r1) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x2, 0x1000, 0x3}) 14:37:44 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x3c}}}, 0xb8}}, 0x0) r1 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r1, 0x0, 0x800, 0x2}) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r3, r2, 0x0) syz_io_uring_setup(0x5606, &(0x7f0000000040)={0x0, 0xef33, 0x0, 0x0, 0x256}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) pipe2(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) openat(r3, &(0x7f0000000000)='./file1/file0\x00', 0x141e40, 0x182) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={0x0, @l2tp={0x2, 0x0, @loopback}, @ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @nl=@unspec, 0x5, 0x0, 0x0, 0x0, 0xfff8, &(0x7f0000000340)='ip6_vti0\x00', 0x1, 0x5}) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) [ 1875.535321] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1875.548018] EXT4-fs (loop6): get root inode failed [ 1875.548888] EXT4-fs (loop6): mount failed 14:37:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) ioctl$TCXONC(r0, 0x540a, 0x0) close(r3) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000000)={0x1, 0x0, 0x5}) 14:37:44 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) close(0xffffffffffffffff) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2e4442, 0x0) r1 = fork() ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$FIOCLEX(r4, 0x5451) close(r4) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1a, 0x84, 0x7, 0x7, 0x0, 0x0, 0x880, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0xa985}, 0x1, 0x9, 0x3, 0x7, 0x1, 0x8000, 0x3, 0x0, 0x3}, r1, 0x9, r4, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20481, 0x0) write(r5, &(0x7f0000000040)="54b4f43b80286d2e56bf0762494a509756618868e45cdecc217ffa5359824c90907fdea2649427113486f4e18d1784147d95b915d43c1956fb23d35baa34e99936ebbb72f623fc25e7ec7dfb8aaa28293102f790ed4908aa6ef2178c95f6666bba0454d4c0fea2ea236c54c024eeef22c72cc40d55ca907e77800658e469c53c", 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x34001, 0x144) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r7, &(0x7f0000000240)="01", 0x1) sendfile(r0, r6, 0x0, 0x20d314) 14:37:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000005) 14:37:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./mnt\x00', 0x0, 0xfffffffffffffe55, 0x0, 0x0, &(0x7f00000001c0)={[{@mode}]}) 14:37:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {0x0, 0x0, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:37:44 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:37:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$FIOCLEX(r4, 0x5451) close(r4) write$P9_RREADLINK(r4, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) sendfile(r0, r1, 0x0, 0x100000001) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:37:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x34}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 1875.881214] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1875.885914] EXT4-fs (loop6): get root inode failed [ 1875.886850] EXT4-fs (loop6): mount failed 14:37:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00), 0x0, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:37:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000003c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES16], 0x28}}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0xfffffffffffffdd1, 0x0, 0x711e1efa74ec4445, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x0, 0x110034, &(0x7f0000000900)=ANY=[]) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) unlinkat(r2, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) statx(r6, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000800)) 14:37:45 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000080), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001740)=""/175, 0xaf}, {&(0x7f0000000240)=""/85, 0x55}], 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="10000000002996dfe2838b315c488e8700000001000010049f00000000a40e000000000000ba6424245060fa010000001c0000ab430000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0x50}, 0x40000000) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_io_uring_setup(0x3ac4, &(0x7f0000001880)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001840)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001640), 0x4680, 0x0) clock_gettime(0x0, &(0x7f0000001680)={0x0, 0x0}) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f00000016c0)={r5, r6/1000+60000}, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="041c2abd7001ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8004) close(r3) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) openat$sr(0xffffffffffffff9c, &(0x7f0000001700), 0x8200, 0x0) syz_io_uring_setup(0x920, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x100000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) ioctl$FIOCLEX(r9, 0x5451) close(r9) sendmsg$IPCTNL_MSG_CT_GET_DYING(r9, &(0x7f0000001800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x647729ea0b0fb8a6) 14:37:45 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 1) [ 1876.116749] FAULT_INJECTION: forcing a failure. [ 1876.116749] name failslab, interval 1, probability 0, space 0, times 0 [ 1876.118517] CPU: 1 PID: 11170 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1876.119536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1876.120748] Call Trace: [ 1876.121148] dump_stack+0x107/0x167 [ 1876.121689] should_fail.cold+0x5/0xa [ 1876.122255] ? __do_sys_memfd_create+0xfb/0x450 [ 1876.122948] should_failslab+0x5/0x20 [ 1876.123518] __kmalloc+0x72/0x390 [ 1876.124038] __do_sys_memfd_create+0xfb/0x450 [ 1876.124711] ? ksys_write+0x1a9/0x260 [ 1876.125277] ? memfd_file_seals_ptr+0x170/0x170 [ 1876.125976] do_syscall_64+0x33/0x40 [ 1876.126532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1876.127288] RIP: 0033:0x7f5ed33eab19 [ 1876.127838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1876.130515] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1876.131646] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f5ed33eab19 [ 1876.132693] RDX: 0000000000017000 RSI: 0000000000000000 RDI: 00007f5ed34440fb [ 1876.133737] RBP: 0000000000000002 R08: 000000000000b800 R09: ffffffffffffffff [ 1876.134785] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1876.135833] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000180 [ 1876.175037] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated 14:37:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) syz_io_uring_setup(0x203, &(0x7f0000000080)={0x0, 0xc70b, 0x1, 0x0, 0x370}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, 0x0}, 0x0) close_range(r3, r6, 0x0) sendfile(r0, r1, 0x0, 0x20d314) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@rand_addr, @multicast1}, &(0x7f00000001c0)=0x8) [ 1876.200289] EXT4-fs (loop6): get root inode failed [ 1876.201126] EXT4-fs (loop6): mount failed 14:37:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="010008000600000000000000000018000000c8ed692871040c9c85893f15b0c00cf0ef029036a096fa67d66c0b4653458eef37c1411991fb", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1876.282421] cgroup2: Unknown parameter '802.15.4 MAC' 14:38:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000006) 14:38:01 executing program 4: rmdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 14:38:01 executing program 7: sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x810) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x79d9c83f, 0x3, &(0x7f0000000180)="bca90b2cbaf3126651855975607bbfdd4e13713ca10b921ee776229feaa26954930fd55f61f7b29a45d6d7c788992c21cd92584bad5c32fb6c3ad92b3f380f7bcbc95be17cf4a25374abd6a76453ab75cf8f660ae62e616ef21d15dc1d6293540a0e02882951b0c5ae431004c24515a863ba60b301f82ba06f38aafc2f69dedb4bd8265c245ea64aee9fdeb0d481e7bb311cd8f68136efcc922b589e27b38c5146ca910de8ad760675920b8de71cded6779f28c644d1e6dae13b167c39a62f75ea8a65d9c66e5f24d6f1cc678e1760e48c2fc1c556bfca2deee3463cb17eeb45daaf99fbc7c5e654cf22e021afbcf55670bad7c2c057bf05b1e69ed520a895742c8ec67ca75f786539875bee7db99b8d8051ac31c57ba582bc58580599561d1b91c81e5a82da31f6e73dd0feea62ada2c9efce4df2028866ebbbbc16d821ff03ff550cb34b35dc692e843d027af8fd9dacd4d0649dcdee934363a1b8227e94ac27efc6d020cc9d8a33d215de42129afdd162cfac5344525c92b1f8491460884e4164c0c17e8d5580e8ce771e9487b2a91bada9c1bd36fae3eef385df86ea02d3bd93383f7fecccbe7f11c80e90d033f30545eb4dc263931181ddfb7e2e6fc5b927a76a7b55acadac7d811faf5c7303af35531022a0623150703ce1e2a7dd257b883d0215623da3744381df00270119fcaebb2955f3b486a6655342e2802413e8c5a44fcdb160a4ded4e2780981baf499e49ec9aabb84de5872e0d7e7b851790153ede9d4467d02c07a59363f354e9d7178001f89f7491b56ba3bcc8cdd052a78e481483661d679b54ac77487edd9e9b38fa387a9d342664928a441475f4517ba47b7018a58b03340199cd90234e15be2bf992c67dcb2ea840055710080ac662d0ca7c230a406df9733697981e2408155e19ab06d1db188c2bac2f9b757a4037d72778f25b65f8a6f8ec59aea32325fd263249e1f6ee05bbfdc95eee67123253e0107ce149f7229425591e2bdc444182974885b6c74804d1de5277d4e183b4e4f885bb0358146ad1ff04fedb5638e9957976033844c520a35a09b1f06b3b3535fc640c9110269bafb3870e029fe5ffb8a88ed6a939f973b8619ea5eb1b0b130de234a778f191ba9b5493e4765fe1835063014b33f9410abf0a4c196e8be2094782111fce74edd9dea799b5c7b48d35c9a32bc44088d20db2b9ce89c942f824e1642551f2f094ba7a0d18492bf00fbd3980cf4e9c606fe32f09871a1735851fdecabddf3ae420da9d1c2d1545b622e4e301ddbf4b4332c6cca53ef8051a2e24380abed4dfba3fa1bb746f8c474af5442af5143dc2df3a5f3cdd3307ebd69c6de87c229f5beeb0c6b8e91f17331f80c20f7a1d1b32158f1cfbcf44ddbf61e4c92598d3449d9fac90135eb5c4612d5cae56afd311d6d6c7c2a9b13762e739f666257ebcf9fb3711911894769aab0d7e6a658a5b28e8b75967b3cd934ef0f99c3192331f369c03f4d44b9073899bb25b4616531336d18f24a6b19f12b20ef432493bd43332a157d3785ee7183c1bde9d71c43344b67f09bd484033ebb7ddd9f5bbc213f828af66932ffb00d14f21e4f231b32b40b00dab4e8a31980a86b4a107afc2686f6c82f4409bead49cfb1d7c2f6c376edcb67eaf85d64630d8e5d32618da633b26511568bade2b692c8766d2b8c96d2233397213d0a44445b884024b9c70f896752cd34de27e50d69ad32b29fc5a99e20ef91d170d5916ce402f2f4de5f3a2d9e63025727388903266dcebe379fa273f43da2678a828cbcf8e5149db6d84758e28d57d4cdf6ebb961ae6060a5ff39c57b89ee0e94ccd8ed1f364f1cd3fc25a86073c72dfe9ed9d0cebbf2b353b2ec8dab8c5fdd408c6a29e18586b2f77403eac0e169ee5e9f6a5b68dfe0847edd7b2b1e76b77668876d2589918a75703d37e383fd5c6a5956d0bd741fe57b3d9ae5440faa15298da5b8189b6bc5a2d07f013f7d2c9a1af65d9ded58c80e6a6346802c3a39365c40eff9636edfb76ff7566fe487eab2b5c89648ddff6a09a506bd28d9eff66e9f7667d87e9f2e5da5f079a3d8284362a16ce5aa15c8ed48411f8d601c7e5019d43210177e7e0b208b049db2547b139ed3df19a7533d395e55222c8f5708931836849302dcf2a6bf71a07a1f4d6141384561a63ad3b4bc59c4f2f887989bbeba4a79c1c3bee9df6cc9268487fcee7047da1aff5b69df93674728f4f3c67a1395201ece5bcd1da9b210ffe60c7ac2f46659a741c2568627975b7cdcdf011bde4fd56a893a7ed1965280eae03466fabe2a298f7911b58f3441625c1796dd951188d201d493a9f1632f7e3f56bd1738786a5576d25ec0513527eb5631e43373ea448c6461778f1879b8528ef704c360654fb394c5dd6be7309ca1471499a32fefda4e8a4d9a87987c48a900c2df675b7aecd7d17617e592914dacc90cac57e3291e178910fe2abe343859bb1cb4e61246805dddf0be604d2fe2e281c7139f20e3fe9631447db5e29b6bbfe3c96042bc1ae9a3e3664a94a46914ebfe364d4380f962764fa6ea955bf4e1138b0182efeb69f298715fce2d6b1c910b8fcf22a7eb8042b8b0ab6c3f6cd18745a7622192297c6bbc58a7d1813bec67e9afa25a00b7645bf1dc33fdba3c9ac44d34c334c18e73b21dcc56439b2c32f6f88024a6b0f0e9ccbef5676730ebde50155e81bff6515d3e8771daa56165e41783312ce468a39856aae2e0fc3f46d7e71e5f5a1ba515dcd9a32bcfbddf6ef9fd362f0a22223a18dbb73b02eb67fd71a50dde7ef71ca08c5934a55a0a0ea67df88643e607ee1271a37a7d8a8eb35158331d2bca4b2a847d43147426fe57f3cc9e9c9f3b48ef1f48a3c04cd7542d40059fda39f1ac9b8ad398c72d79217c1fec40717d0ba250392bb9600abbe5e9c3020f0565a10e7687e39acf5bf9bbb283a43601a1eb1e0040043d24a989de4d388ca796a841249ebb895322d257ffaa78cb27aa7237ba2a2541b2ef505a84c428fb5e0864cfefbb41f0aabd971607b277955eb646bc5ccf8048bd2cde90152d7b98fc1d7d0720952138c4e6be50d146c35326790a52473a09e67d5d55cca8c30a17f417693da6a75d09f1fdeca4378266dd3363fa3e5b378364b2442c664d8e76c079e81764711de064416b314cb77a9b3fd30124755b8c2e295e5a093804fc72d6fc37dd01fd3f677cc6194ddb4be0e87843894e10fdbe14c80aa876ebb517d0ab1e2d93a4fea8546efc37852a423b5ddda6e6eed394dc8a64222215c701baf9689541345c73feca26038ad622a1777a10aed81212f9f19fa5fa23e05a247ae6bbfdf11d55d23047c0621a1568ea2c7d1b6f295dbbe14581ba208466500ce145e48b0a74d27977440fe596569aef292d3de75c3eb21370b4a466f96481ac62a759a9eab8c8ab473872e12f8cadbd81490da48beda0af0b1564f074912a903e184b99cddb2be470b675a3d504274de4b07201a4b9c33d5e0bb9face31ea5f731d2b2b68262f00e9aa36827e9a700279c16cb9f90cbd146107ac2336d3997da359ec543282e46bace96db0d035ae9a69e189592d63c16aa1d7bd27a8fa491b91b8cf97a2e36ab6139bed6c367733cb2410cee14e38b6c738c12f26373971913fad03ea8565e5f03569e498c87c20d6a738f1eed9283b4a856f6da1801465d6f2d0ad2edaa25e3c7d6fe3ba6f4adeb1184685589d2c6544f179ea81aff169952a311cf5a81a0a566b181a824dfe88cd2cce865608151723b2a2fd6ff0513b84b32b3c434dfe4d289a544f74c1f31f342f07dd5a4ad6d6c9eb4c76978bb96afaf60df0a34ccc123f6b946887c3cc91d4090a40f60b0495560ab26965f43089ec76df0e7a6574a97f7f4eb67792e5389cd7097ce2712483fe80326862600eaf9d7d12bd8a36012c523699cb93e187a5e041f67f655e84ca1e759367ca069cdd71a481d5a1c36b0a68c7aac9bb134d32cc826eec3391e13ea239784d31989dc4c241e489b6f9b2a9d3a79d029b5884f1eb2d7e80050efac0721e5fc83fa101811d497e3428cbda257bb2013687ee5c5f45be6b13377deba01d50457a8b305b00f682c365b3ec412b0e9860752207d934a5f207d803e47cafe6e1cf3b3d9715ff42c69464c88a658815edd8a5884613f2b3fec4d915555ff73fc8404f72541b18991beb04ce77a0a80710acae91adf3a39678127c190108ad57c126b5eded13d9721aed954a6ade7e0d9a1997ffbb8e20b21ab3c76bb91887193424b4afdb14919b4431b2669a3ad0ca37f31398ef0ecc30e68ab64877d7b138689a8a40250c18e3f88c904d418a683ad4ea363dcf2eeac12117837a5a86a8687480a598ecfdada5eaad99545ac0e1284d70facccc089f3e83ae9e83c3b6c70bdb54c0396ef101944419d3b388f3666d5c8b109874509beafed3d7628c8c44c6536f28df823878f0fe8e02b61be8a1b3b83eb2b0026326240650a5b3eba20864d0c886ad5b786b7452f6f15e68ca6ce44fc66803bab7eca77ab7823df0c6b00d855b7a269cace9e583acf2b4b7b39b74afabfbbebd33cd30e0a144a1fbdde49a80fb2d5d831788cdc7950825330b5f1970dba802ec76e00541a1449e60810230af98898750f613d3dd57f614690641226e839875a3fa48c1a2218bfd3c7103bc16ad8a9e515909c23ed62d03148a161ccdd0214d0cb6e121ee39839b52d7e173ec3d4f2b6d581a60a13091e9ee030628b62af7377d259a85ae668f0a78ddbf615ab6d35bdb7ba61d504038d585f009fda5a6e8a1c113d1428bc47f32375211db01c356173452c13f6cd4749acd97f50c711d2a3c2cb405fa5feac194975a8ada2c06704a4dc625680990079e669576b001d264df314d6498f2d2fb0059293c8a4418050a043bd43525afe04d181642620fbbe36882fcf2a85097e46f9f58d1ecba29362b1abd294ff4455430e227ec7dfaf61d3537b7bc7bd5a098eca1e3f240e8ab184018ecb9a69aa569cf04e897ef095520d09a43aa1197b76c4c7461450963bdf6ed91bb9464ada6f0039de5781468c53e3891f5ef81d5baf02f0bc2e1d74382be0f61e529fb0f8383ed7ad0e47b8c833d0bb98e0b3514699b4a01761d3a4c6adad24b0fc0deb661cc2a4548a7f7546e4ec269a7ac8ca70788b0ac3628719830e60dadd9f7cacf1b12c0bda08ce6c5380125451f14e357ef4ece2176ff6a8d17b5163ada5aefa8f83e1c557982d74b26d23c53ed05a817a714ca552da15105c20bd2d033e1a9b2c68683f3bf97991654b07a5a9f25d208fd126dda5ddc96d1389a66a1faedf036524dff57400c892b6cda398f40e230a099f940d2eb8bbc4681a379ada22b0e71c7fe01b60dc8420651aed2f70593335e1ce25996b4f61c4b847bbd7c83292dbe8a6c230010d6f4b55e7cb3215fec7506f148ece0827ff90f9622c14f1ac2b716dde0233a6adb51b3eb85ab8641eb6a9c5422e36f7c019314160a8e02cc61e98c0b7d055142988bbde5e07ecd94d06300425e099c4904bea5df0da01b726aea62d50b9d3ac353f542ba7df3c38efae50352b764989e13792415636f7e607fb513e8d83dd1279fb695844f323cd46009553803b6f914dadd8d1e81adb8f90a56e8507d99ba5e2b46f8ed64cce5a1766d6d32f8bdd6059a995d6c6be5cd1bdf92a77d98e004d0694eb3fc74c71ba6f54ddaf8e7e55ae21b388f9bb72800b4a9ebc0a8375fd6499c8d8faa60d5c6113b1ee16dc7572bf3980c5a0c5bb20ecc3ab9e33e6afa6fd91705d8", 0x0, 0x0, 0x0, {0x2}}, 0x800) fadvise64(0xffffffffffffffff, 0x17bcc22f, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000011c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000003040)={'syztnl1\x00', &(0x7f0000002fc0)={'sit0\x00', 0x0, 0x2f, 0x52, 0x6, 0x9, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x700, 0x80, 0x1, 0x9}}) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000001200)={0xa, 0x4e24, 0x3ff, @remote, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001240)="960bf43fa55304175f1c9b967801c9ded8ec8a0a69864032347c1aa0fd61201dfd8995941eaf33d9b3ee62eb2170579a42fcb3166a226348ffa10b2f4bdce1ea556486b25d71002ad0e3d0c376defa11a6dd6c458980f3b55e62eb60d15e92b004e1ff3681f54bba56043bf6656913aea275959d4618143c5eddb9665e62d80b15055dc093d4738d8c779aa14f9a7d3109a8baeee467f1bb16c28cae600a", 0x9e}, {&(0x7f0000001300)="349f43b7f5ab45584c6fe93d72958df8a85e62cc12a2514c885b28fdf82518d6537b5079b49bf4169f8946fc93a679fca419075f55b18090ce6fb115ab9f23a32a7246a2f260b9dac224b88f63f26228fbd9", 0x52}, {&(0x7f0000001380)="1c58023d8b015ac467f4d226d7", 0xd}, {&(0x7f00000013c0)="dd257e6f0e6d03a6a566b959c30a1c86763f813b6e4e82fdac5020c456275e8b6ab0ae35102eb608ef22ea5f72219f9cb4841c4c7a1fd102ee252f135fb358c92cff910360b00e587dfd5dbf4fe987690e3b", 0x52}, {&(0x7f0000001440)="137ef4d1bea0a0c26f9840e48b5472dc107635cd10118497121e59331de1f6bad07bb49c4f83027febd549cf0e5039ba4785e0109005205b4610106e2eecb8bd928fb36763d37f152820dc25c7c0b15be91bcbef53d131c646c04fd5b016c19b22e5b23ab134edf5395bb4f8fc3467c1eac4b52025cd803f3bf8b113713db22d18f15c696c8a38c3fa7527addc7328dbc9bd705eadefdde456840decd092f1c8fce77b61acd054759e3f7d199829ffceaaede35bd93f8106925a907df1f37ee9fe9acf001f714ef11abae6097d6c2dff6b1aad9b438f084a66", 0xd9}, {&(0x7f0000001540)="36b71b40f9639cadc1cec859131af78e1b1b6848c2d3a4742887299169a49ec51b14ef71e39425f7130851fef53c8c806e5888ba511448d3aaaa2bab2bf6d97218076e12d9719752ca9aa718b6c15133e60c43e2db41d34fde4c3719e90d3992ceaf5c68062366cb65f58bd2b9b8113b3e11bc7b347189c50d403fc59fa81492832aac122d47ad7cf435d067473b0c0a2cb452b8008cf861dc27c98a3b526ff057d9edce1f4d9cc1362b2b41d2106b3fa0", 0xb1}], 0x6, &(0x7f0000001680)=[@hoplimit_2292={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff}}], 0x30}}, {{&(0x7f00000016c0)={0xa, 0x4e22, 0x7fff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x18}, 0x1c, &(0x7f00000028c0)=[{&(0x7f0000001700)="27cca213fc312dbad18046f58593907dc5e5914048fdc48b5650706b66994cdbdf1517bad13e6e024eec588d3b8cf9dbd3cf5d55fed6bca865dc20364f9058a769a2873b98474e5f2801bb81c3448a225c748a3a8bb06ccb5c1b7bb3cb01a9c6d73c4fc098f36e015209b76189214e189dc9e161b93c290cc9b75376d64f338663b3de2f", 0x84}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="3e2a2120c04d9eb0faffabce647ed2941c5fb84ee1fa7208300db16a69055ca3a66ef42219c1248b7a8cd6116059bcb4538bf90273f7b0289e51ebcaebcf6791555b1ab0b38969c24322920b6ce0c65264b7872c33c519151767852f4793e063e371aeca43cc97b2c27c9ccce20cfc70e0161466c04564e225450f1f4c5c1c5d03ede77be18d6d3e17d6019ebb89403f7719e4ba94c12492123c9c86c4628c5e5baffafba6bdb166a714f73b280cc7cfe4b1c439033ef815af043b528b7a86df63085cda6d0c83f83e1027396188c35ecc2673fc3cdb79d3b3a3794958", 0xdd}], 0x3, &(0x7f0000002900)=[@hoplimit_2292={{0x14}}, @hopopts={{0x70, 0x29, 0x36, {0x87, 0xa, '\x00', [@hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0x2, [0xa1b, 0x1, 0x80000001, 0x2]}}, @enc_lim, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x8e, [0x4f34eb91]}}, @ra={0x5, 0x2, 0x648}]}}}, @hopopts_2292={{0x1d0, 0x29, 0x36, {0x2f, 0x36, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2c}}, @generic={0x0, 0xe1, "f573dbdfcf40d1401cdf5061b68b3e2810605413ebfec0b6a8d2f6f72b383bbed3b5a009007a0c86675c95498d485832e0d84c37d1e12bc2077d8d48bc65f5a26d071e2d16bc0b91b30debe05fe2dbdedcb2d1ff295fb33eb8797959d8669f5ed30bd315f8a38cc21296ee50f3192734eed2c1cf9f6b3a7a65ba7630eadbb4a99c1b3d9d92b92bb0beb032adc2aeff41c01af87cf8f19981d25dc2b653e163c331ec4d3759656db4b23a293cdb131d7dc5df718c936d56fd9436f50aa38b92b4f731a686dc9bb89c1da5776910cdc0cac3a9eb6c64bc9084f74aecbdc58822de93"}, @enc_lim={0x4, 0x1, 0x80}, @pad1, @generic={0x2, 0xb0, "f860a0788c60880fa88c2942b504e71a85069a6f0451879a635ab4a33a3db48a903b981d22cbb224105e1220f44485b407c3080d1781da344c83cd3c98947b88092b0302ee043790fbe7345834279a712ea8518194b42ccac0afdac7d2d569c06bd5b543f0d1abc92552658e296fbf409542aef4a37fd56a3cf6f6a448ab5a43ecea295e63d127f5bc335f126683514cd5afb61b4dc7e7a3d14d3189973de9dc9257824c4eecd551c26f4a497261ce1e"}]}}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x16, 0xe, '\x00', [@generic={0x3, 0x6f, "8a00d0fefb9368acadc8ea2d782d9e9704a44279e86ddb62808d750632dced1b7755fdccf9d9d89416f0591ae259259d482dcda2eb6918480ee97bf8c0f2bfed752702ccf138bc31edceca2a6c356b1ec07f3e84e51477e434e4cbccd8b35bfc6441ff968d4393a5c6b7e2eacd821a"}, @jumbo={0xc2, 0x4, 0x31ef}]}}}], 0x2e8}}, {{&(0x7f0000002c00)={0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002c40)="bef0efca5a90be716e76ea7dec", 0xd}, {&(0x7f0000002c80)="1e87d3958699a9c74944a03b1686830cb0fb2adbdda4b73acf145380416eab4b52cc62672e31631c61fb4ded6536e5cb2ebc3e4a7cb744465c9e84a791e2de544575eb8eb2272b0445070aa9138dde01fac031215225284f14a01e9f062a324fd1ac92dd3d4ceddc7b5e15c8a188557a439b18dd47a0628d6ac673e2e523e8", 0x7f}, {&(0x7f0000002d00)="bd5fe1e6858a36b5f3908624899644499e1cc9e19be5b740aac59385ebeaa6d19fced923b6f0d9c35f5b315fed6e6c160ba53e89b231fe310bd1f13c110b1a29ee6e586a67532d0ac7dc3245e0b14b3d20f3b78e4dddd5d88721f962534df26c40aeee7478db8fb837cffeb72a66fef39657af0e4a39c21d1c11565dcd601c677d180d0f95a58bf37d84ecf1a7f11a82e18838c0d75d51da80385838513631c15a3cfcd1e93ceed6d75b8e58ef857f9e4f2fa4c7c6dea56a2651ef533a1c5b2aa473a2b1dfdfb88a46d52826960a1e0524c65585fc94c5b0ddbfec045e89cb1f1297b07b95e78fa9e2cc93aaaa08ba0da2888286f84820", 0xf7}, {&(0x7f0000002e00)="27055a7d6fffcf77efad23b3da3f752afd32ebcfe4ef44efe979246f67c80c75ddd4115ee806b8e8653c436a032de821ba2bdd1d23aba84d5ee39340f0aac1", 0x3f}, {&(0x7f0000002e40)="0b9a36574384d3dc21b6d640abf43fcd9e92998f2f204b4585dfa92bd6c1b50ad9f6a2a458024cdc2c950aa27b728b11ab61376d6500a1ad61ee0291852908bae91735c81e028c1b2d0ab801a10225ce420144e83455cb690cf9e78b8a0ac780966da8fd6cae0b52edc5780e165208aee0d2b81926acd744b282f821042f2f041f497392064271cfd9eb9b1649f7bdc860f90c4bf4fe0461224d", 0x9a}, {&(0x7f0000002f00)="322b93a5b591f29a", 0x8}], 0x6, &(0x7f0000003080)=[@rthdrdstopts={{0x160, 0x29, 0x37, {0x5c, 0x28, '\x00', [@generic={0x80, 0x67, "b664fce32a233b3ff5fcd41c75d1b9e5a359436e55ad750cd18939ae4a4b2f34f480515ee6060cdb873045d07df716147d697771722002bbd60c1e1a280a0e8d8c570a22ccef4cec7baec9b588e59a4cbf0f9e067363e345154e354f348a24356a8b7c4a239118"}, @generic={0x20, 0xd0, "d0bc949cbb5de63ea11e3f40c122e4e8c2e3d6b5680ef876fb5133d63c3f24579e3bb162edb789f529552d406d5c8c3e4d2b3cc4d3933e37da5c2b33568dc032bc3a03af67bc50a731e2abc9f0233d5830c39eff300fb45bfbd33ef9c815204f1f423b2ff002e6596b1d3c0aeab551bc099c09b7279f558b287d618a63010e9906ad40d327f423d384c037727bd36c375c9e20599e442b97a742d0df32f7c124a3a53ad33fb87c2bc4759b244c199880c348c46abf4501af292cb3de21edfd0e14ac0b98340f2ca3e6a6366996d27c13"}, @pad1, @ra={0x5, 0x2, 0x101}]}}}, @dontfrag={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @hopopts={{0x88, 0x29, 0x36, {0x2e, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x40, {0x1, 0xe, 0x6, 0x0, [0x5, 0x3, 0x7ff, 0x8, 0x1, 0x7, 0x5]}}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x10, {0x1, 0x2, 0x50, 0x2e1, [0x2]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x80000001}}, @dstopts={{0x70, 0x29, 0x37, {0x5e, 0xa, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x4, 0x6, [0xdae7, 0x0]}}, @pad1, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @remote}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r1}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x67, 0x6, '\x00', [@pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @generic={0x5}, @pad1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x2, 0x9, 0x0, [@empty]}}}], 0x350}}, {{&(0x7f0000003400)={0xa, 0x4e21, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000003540)=[{&(0x7f0000003440)="3ba4b2f981fc4a343dc229c65ced0895b7a8f7c114540803bca34d0238b4ea7e5ce8ddad220fb5835dd485c1bee7e2c8369559d6a02266e3c4afe1fce976a339726e8f79d13b6f9a53c9dc6d5b72a302a6022137565b6848dd144726b025c24dc4f0cf286a311db2f0097de31ec161bdef84c177e2eee7259ee153b799b51eaa0486703ff88447f4b8a1bd22a0622754969da0872f97a79cecf7aec75fe0551d9ad3dd476001eedfa859240cac595bb6e2ccb742e9c828b9b142f257b87af30e751686adb70836e0", 0xc8}], 0x1, &(0x7f0000003580)=[@hoplimit={{0x14, 0x29, 0x34, 0x2c3}}], 0x18}}], 0x4, 0x8011) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000003780)={'syztnl0\x00', &(0x7f0000003700)={'ip_vti0\x00', r1, 0x10, 0x78c7, 0x1, 0x8, {{0x9, 0x4, 0x1, 0x3, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @empty, @private=0xa010101, {[@generic={0x94, 0xe, "4713b9694ef9f26dd53e6e84"}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003880)={'gre0\x00', &(0x7f00000037c0)={'gretap0\x00', r2, 0x1, 0x80, 0x2, 0x4, {{0x28, 0x4, 0x1, 0x4, 0xa0, 0x67, 0x0, 0x3, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x8f, [@dev={0xac, 0x14, 0x14, 0x10}, @broadcast, @rand_addr=0x64010101, @loopback, @multicast2, @remote, @multicast1]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x6d, [@dev={0xac, 0x14, 0x14, 0x12}, @empty, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2, @multicast1]}, @rr={0x7, 0x2b, 0x77, [@multicast2, @loopback, @remote, @empty, @multicast1, @broadcast, @multicast1, @multicast2, @private=0xa010101, @broadcast]}, @generic={0x88, 0x10, "3548e313b6bfa58b1ff71406df22"}, @rr={0x7, 0xf, 0x17, [@broadcast, @remote, @multicast2]}, @noop]}}}}}) r3 = socket$inet(0x2, 0x6, 0x8) shutdown(r3, 0x1) r4 = openat(r0, 0x0, 0x48102, 0x18c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000003a00)={'ip6gre0\x00', &(0x7f0000003980)={'sit0\x00', r1, 0x2d, 0x4a, 0xff, 0x4, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x20, 0x7, 0x4, 0x905f9e7}}) r5 = accept4(r4, &(0x7f0000003a40)=@hci, &(0x7f0000003ac0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003b40), r4) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000003e80)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003e40)={&(0x7f0000003b80)={0x2c0, r6, 0x209, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x178, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*(-^\x00'}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x687ba4d}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')+]*\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "ac3e3d1673c14372ed26d5d1a564b40b9ddd7e07ea02b3d4cd3838a4544281c9acf90b830b5cd9b22d462538e87b827b48564c0ed44075f32b47f77bd2be"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_MODES_OURS={0x104, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe5, 0x5, "f8032bf2639725aa00157af3eff5ef6bcba28305c740ccc045fc0aa45f83b146304657b3b3d2570945b720e638a68d2325ac14da5f2863f5df9047b1e6399d998e60101046a3e0e38b355010fc5aee03537df3494931d46785fb4e4cdd32ce56ca58e71e5c791e9ff4d942fd4b35e55979afacca873b73491987f825601a20dac469ebed783e2181a7331e00754ce8508009917b3f2fd93dbfb5cc116bd080ed6c166aa7f8a366a2270c8758a814ae6e5c64fbf59abde7531f121c7cbe72871b9a40931435397b1014275010ccbc06a398086a0a1530a095124a32aee84d7d8191"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xb7a}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x2c0}}, 0x8000) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000003ec0), 0x14002, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000003fc0)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x180268a0}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x1000, 0x6, 0xfffffffb, 0x46ad}}}, ["", "", "", "", ""]}, 0x30}}, 0x40000) connect$packet(r5, &(0x7f0000004000)={0x11, 0x18, r2, 0x1, 0x3, 0x6, @link_local}, 0x14) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000004140)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004100)={&(0x7f0000004080)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000004300)={'sit0\x00', &(0x7f0000004280)={'syztnl2\x00', 0x0, 0x2, 0x0, 0x3f, 0x9, 0x59, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, @private2, 0x20, 0x8, 0x2, 0x45}}) 14:38:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) r6 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)=0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r11}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x0, @fd=r8}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r12, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r13 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r13, &(0x7f0000000100)={0x0, 0x2, 0x4}, &(0x7f0000000140)='./file1/file0\x00', 0x18, 0x0, 0x23456}, 0x90d3) r14 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) io_uring_enter(r14, 0x2413, 0x8e36, 0x1, &(0x7f0000000040)={[0x7fffffff]}, 0x8) 14:38:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 2) 14:38:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00), 0x0, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:38:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x35}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:38:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000080)={0xf49f, 0x6, 0x3ff, 0x8, 0x1a, "930fc9ca5de121f8"}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$FIOCLEX(r4, 0x5451) close(r4) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000000)={0xea3, 0x4, 0x1000, 0x0, 0x100000000, 0xf4cf}) [ 1892.419265] FAULT_INJECTION: forcing a failure. [ 1892.419265] name failslab, interval 1, probability 0, space 0, times 0 [ 1892.420962] CPU: 1 PID: 11203 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1892.421956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1892.423140] Call Trace: [ 1892.423531] dump_stack+0x107/0x167 [ 1892.424062] should_fail.cold+0x5/0xa [ 1892.424628] ? create_object.isra.0+0x3a/0xa20 [ 1892.425283] should_failslab+0x5/0x20 [ 1892.425826] kmem_cache_alloc+0x5b/0x310 [ 1892.426422] create_object.isra.0+0x3a/0xa20 [ 1892.427055] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1892.427785] __kmalloc+0x16e/0x390 [ 1892.428332] __do_sys_memfd_create+0xfb/0x450 [ 1892.428976] ? ksys_write+0x1a9/0x260 [ 1892.429525] ? memfd_file_seals_ptr+0x170/0x170 [ 1892.430205] do_syscall_64+0x33/0x40 [ 1892.430741] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1892.431477] RIP: 0033:0x7f5ed33eab19 [ 1892.432014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1892.434618] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1892.435711] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f5ed33eab19 [ 1892.436737] RDX: 0000000000017000 RSI: 0000000000000000 RDI: 00007f5ed34440fb [ 1892.437766] RBP: 0000000000000002 R08: 000000000000b800 R09: ffffffffffffffff [ 1892.438779] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1892.439796] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000180 [ 1892.454418] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1892.455669] EXT4-fs (loop6): get root inode failed [ 1892.456079] EXT4-fs (loop6): mount failed 14:38:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00), 0x0, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:38:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r0, 0x0) fsync(0xffffffffffffffff) finit_module(r0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}], [{@dont_hash}]}}) 14:38:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) r3 = dup2(r2, r1) inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) 14:38:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000040)={0x0, 0x0, 0xffc}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0x80000001, 0x5, 0x100, 0x1ff, 0x18, "24ff71abe20bc75ded8d3a22e2e4166e9e372f"}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x0, 0x5, 0x200}) ioctl$VT_WAITACTIVE(r0, 0x5607) [ 1892.678065] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1892.680371] EXT4-fs (loop6): get root inode failed [ 1892.681144] EXT4-fs (loop6): mount failed 14:38:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x36}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 1892.770807] Module has invalid ELF structures 14:38:01 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7002) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r2}, "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"}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @remote}, {0x308}, 0xac1414bb, {0x2, 0x0, @broadcast}}) fallocate(r3, 0x1d, 0xfffffffffffffffe, 0xb35c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000200)={{0x2, 0x4e23, @multicast1}, {0x306, @remote}, 0x10, {0x2, 0x4e23, @local}, 'erspan0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack_expect\x00') ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xd, 0x12, r4, 0x0) setns(r4, 0x4000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000280)={0x4, 0x7fffffff, 0x3, 0xff, 0xd4, 0x5bb}) 14:38:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f465", 0xf, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:38:01 executing program 2: r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fcntl$getown(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000040)=""/15, 0xf}, {&(0x7f0000000080)=""/145, 0x91}, {&(0x7f0000000140)=""/44, 0x2c}], 0x4, 0xcdd, 0x7) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 1892.848552] kauditd_printk_skb: 5 callbacks suppressed [ 1892.848563] audit: type=1326 audit(1722004681.850:582): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11242 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1892.854436] audit: type=1326 audit(1722004681.856:583): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11242 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1892.858172] audit: type=1326 audit(1722004681.859:584): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11242 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1892.862186] audit: type=1326 audit(1722004681.863:585): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11242 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1892.865647] audit: type=1326 audit(1722004681.863:586): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11242 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02a314aa04 code=0x7ffc0000 [ 1892.872921] audit: type=1326 audit(1722004681.869:587): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11242 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02a314aa04 code=0x7ffc0000 [ 1892.877849] audit: type=1326 audit(1722004681.870:588): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11242 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1892.880805] audit: type=1326 audit(1722004681.870:589): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11242 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1892.883688] audit: type=1326 audit(1722004681.872:590): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11242 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1892.886601] audit: type=1326 audit(1722004681.872:591): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11242 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f02a3197b19 code=0x7ffc0000 [ 1892.908457] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1892.919807] EXT4-fs (loop6): get root inode failed [ 1892.920586] EXT4-fs (loop6): mount failed 14:38:18 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 3) 14:38:18 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f465", 0xf, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:38:18 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) pipe2(&(0x7f0000000540), 0x0) r5 = syz_io_uring_setup(0x203, &(0x7f0000000080)={0x0, 0xc70b, 0x1, 0x0, 0x370}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r8, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer, 0x7ff) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) syz_io_uring_submit(r4, r7, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0xa, 0x8001, 0x0, 0x5, 0x0, 0x1}, 0x101) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r5, 0x10000000) syz_io_uring_submit(0x0, r10, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000280), 0x0, 0x10, 0x1, {0x3}}, 0x8) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000007) 14:38:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) sync_file_range(r0, 0x3fe, 0x400, 0xf) write(r2, &(0x7f0000000240)="01", 0x1) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) ioctl$FIOCLEX(r5, 0x5451) r6 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=""/108, 0x6c) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) close(r5) r7 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r5, r7, 0x0, 0x10000000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x700, 0x40, 0xfff, 0x8, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x64, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}, {[@lsrr={0x83, 0xf, 0x90, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local]}, @cipso={0x86, 0x13, 0x3, [{0x6, 0x7, "59cb30220a"}, {0x1, 0x2}, {0x1, 0x4, '\aP'}]}, @lsrr={0x83, 0xb, 0xe7, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback]}, @rr={0x7, 0x7, 0x8f, [@local]}]}}}}}) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000004c0)={@broadcast, @dev={0xac, 0x14, 0x14, 0x36}, r8}, 0xc) 14:38:18 executing program 7: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x8}, 0x0, 0x310}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) preadv(r1, &(0x7f0000000a80)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000580)=""/159, 0x9f}, {&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000b40)=""/186, 0xba}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000840)=""/40, 0x28}, {&(0x7f00000007c0)=""/23, 0x17}, {&(0x7f00000008c0)=""/149, 0x95}, {&(0x7f0000000980)=""/44, 0x2c}, {&(0x7f00000009c0)=""/148, 0x94}], 0xc, 0xa, 0x400) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1) dup2(r3, r2) readv(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10010, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) write$binfmt_elf64(r0, &(0x7f0000003600)=ANY=[@ANYBLOB="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"], 0x1040) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000340)={&(0x7f0000000500)=""/126, 0x7e}) fork() 14:38:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) fdatasync(r0) 14:38:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x37}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:38:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$KDDELIO(r3, 0x4b35, 0x81) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0x2}) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0x2000003) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$FIOCLEX(r6, 0x5451) close(r6) ioctl$SCSI_IOCTL_SYNC(r6, 0x4) [ 1909.571867] FAULT_INJECTION: forcing a failure. [ 1909.571867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1909.572014] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1909.573931] CPU: 0 PID: 11281 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1909.576416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.577643] Call Trace: [ 1909.578044] dump_stack+0x107/0x167 [ 1909.578593] should_fail.cold+0x5/0xa [ 1909.579163] _copy_from_user+0x2e/0x1b0 [ 1909.579761] __do_sys_memfd_create+0x16d/0x450 [ 1909.580447] ? memfd_file_seals_ptr+0x170/0x170 [ 1909.581158] do_syscall_64+0x33/0x40 [ 1909.581725] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.582485] RIP: 0033:0x7f5ed33eab19 [ 1909.583032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.585701] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1909.586410] EXT4-fs (loop6): get root inode failed [ 1909.586801] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f5ed33eab19 [ 1909.586822] RDX: 0000000000017000 RSI: 0000000000000000 RDI: 00007f5ed34440fb [ 1909.587554] EXT4-fs (loop6): mount failed [ 1909.588548] RBP: 0000000000000002 R08: 000000000000b800 R09: ffffffffffffffff [ 1909.588560] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1909.588572] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000180 14:38:18 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 4) [ 1909.695446] FAULT_INJECTION: forcing a failure. [ 1909.695446] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.697469] CPU: 1 PID: 11294 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1909.698470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.699660] Call Trace: [ 1909.700053] dump_stack+0x107/0x167 [ 1909.700594] should_fail.cold+0x5/0xa [ 1909.701286] ? shmem_alloc_inode+0x18/0x40 [ 1909.702044] should_failslab+0x5/0x20 [ 1909.702583] kmem_cache_alloc+0x5b/0x310 [ 1909.703185] ? shmem_destroy_inode+0x70/0x70 [ 1909.703840] shmem_alloc_inode+0x18/0x40 [ 1909.704428] ? shmem_destroy_inode+0x70/0x70 [ 1909.705428] alloc_inode+0x63/0x240 [ 1909.706036] new_inode+0x23/0x250 [ 1909.706548] shmem_get_inode+0x15e/0xbc0 [ 1909.707160] __shmem_file_setup+0xb8/0x320 [ 1909.707778] ? _copy_from_user+0xfb/0x1b0 [ 1909.708378] __do_sys_memfd_create+0x275/0x450 [ 1909.709065] ? memfd_file_seals_ptr+0x170/0x170 [ 1909.709766] do_syscall_64+0x33/0x40 [ 1909.710319] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.711280] RIP: 0033:0x7f5ed33eab19 [ 1909.711885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.714765] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1909.715955] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f5ed33eab19 [ 1909.717025] RDX: 0000000000017000 RSI: 0000000000000000 RDI: 00007f5ed34440fb [ 1909.718072] RBP: 0000000000000002 R08: 000000000000b800 R09: ffffffffffffffff [ 1909.719284] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1909.720446] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000180 14:38:18 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f465", 0xf, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:38:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) ioctl$FIOCLEX(r5, 0x5451) close(r5) bind$unix(r5, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) ioctl$FIOCLEX(r8, 0x5451) close(r8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000000)) 14:38:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:38:18 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 5) 14:38:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x1, 0xff9}) ioctl$KDMKTONE(r0, 0x4b30, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="ff7f0000000000002e2f66696c653000"]) r2 = accept4$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c, 0x800) close(r2) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x5, 0x5, 0x100, 0x9, 0x4, "53ccd5db47ea7aeb031b47b0ecb0007cae08bf", 0x3, 0x101}) [ 1909.945871] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1909.948021] EXT4-fs (loop6): get root inode failed [ 1909.948849] EXT4-fs (loop6): mount failed [ 1909.965874] FAULT_INJECTION: forcing a failure. [ 1909.965874] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.967615] CPU: 1 PID: 11312 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1909.968770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.969955] Call Trace: [ 1909.970369] dump_stack+0x107/0x167 [ 1909.970921] should_fail.cold+0x5/0xa [ 1909.971510] ? create_object.isra.0+0x3a/0xa20 [ 1909.972353] should_failslab+0x5/0x20 [ 1909.973085] kmem_cache_alloc+0x5b/0x310 [ 1909.973708] create_object.isra.0+0x3a/0xa20 [ 1909.974366] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1909.975133] kmem_cache_alloc+0x159/0x310 [ 1909.975764] ? shmem_destroy_inode+0x70/0x70 [ 1909.976482] shmem_alloc_inode+0x18/0x40 [ 1909.977213] ? shmem_destroy_inode+0x70/0x70 [ 1909.977906] alloc_inode+0x63/0x240 [ 1909.978441] new_inode+0x23/0x250 [ 1909.978959] shmem_get_inode+0x15e/0xbc0 [ 1909.979584] __shmem_file_setup+0xb8/0x320 [ 1909.980224] ? _copy_from_user+0xfb/0x1b0 [ 1909.980867] __do_sys_memfd_create+0x275/0x450 [ 1909.981540] ? memfd_file_seals_ptr+0x170/0x170 [ 1909.982245] do_syscall_64+0x33/0x40 [ 1909.982934] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.983780] RIP: 0033:0x7f5ed33eab19 [ 1909.984326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.986995] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1909.988233] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f5ed33eab19 [ 1909.989502] RDX: 0000000000017000 RSI: 0000000000000000 RDI: 00007f5ed34440fb [ 1909.990662] RBP: 0000000000000002 R08: 000000000000b800 R09: ffffffffffffffff [ 1909.991814] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1909.992861] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000180 14:38:19 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:38:19 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) r0 = epoll_create(0x9) syz_io_uring_setup(0x203, &(0x7f0000000080)={0x0, 0xc70b, 0x1, 0x0, 0x370}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, 0x0}, 0x0) r4 = fcntl$dupfd(r3, 0x0, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5, {0x9, 0xa6}}, './file1\x00'}) openat(r8, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="210000000100000018000000", @ANYRES32, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00./file1\x00']) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_any}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsname={'fsname', 0x3d, '!*.{?-}/%\\'}}]}}) 14:38:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x9, 0x3, 0x1d4, &(0x7f0000000000)="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"}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x2800, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000480)) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x7, 0x4, 0x9, 0x0, 0x1}}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:38:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000008) 14:38:35 executing program 4: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0, 0x4000001}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005440)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/168, 0xa8}, {&(0x7f0000000300)=""/70, 0x46}, {&(0x7f0000000380)=""/207, 0xcf}], 0x3}, 0x3}, {{&(0x7f0000000480)=@pppoe, 0x80, &(0x7f0000001700)=[{&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/46, 0x2e}, {&(0x7f0000000600)=""/155, 0x9b}, {&(0x7f00000006c0)=""/13, 0xd}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x5, &(0x7f0000001780)=""/38, 0x26}, 0x80000000}, {{&(0x7f00000017c0)=@alg, 0x80, &(0x7f0000002980)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/90, 0x5a}, {&(0x7f00000028c0)=""/170, 0xaa}], 0x3, &(0x7f00000029c0)=""/136, 0x88}, 0x2}, {{&(0x7f0000002a80)=@l2, 0x80, &(0x7f0000003080)=[{&(0x7f0000002b00)=""/48, 0x30}, {&(0x7f0000002b40)=""/250, 0xfa}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/250, 0xfa}, {&(0x7f0000002e00)=""/75, 0x4b}, {&(0x7f0000002e80)=""/229, 0xe5}, {&(0x7f0000002f80)=""/212, 0xd4}], 0x7, &(0x7f0000003100)=""/4096, 0x1000}, 0x6ca1}, {{&(0x7f0000004100)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004180)=""/29, 0x1d}], 0x1, &(0x7f0000004200)=""/185, 0xb9}, 0xf18d}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f00000042c0)=""/13, 0xd}, {&(0x7f0000004300)=""/80, 0x50}, {&(0x7f0000004380)=""/4096, 0x1000}], 0x3, &(0x7f00000053c0)=""/113, 0x71}}], 0x6, 0x20002100, &(0x7f00000055c0)={0x0, 0x989680}) 14:38:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:38:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x3f8b, 0x4496, 0x1, &(0x7f0000000080)={[0x5]}, 0x8) ioctl$FIOCLEX(r4, 0x5451) close(r4) ioctl$int_in(r4, 0x5421, &(0x7f0000000040)=0x80) sendfile(r0, r1, 0x0, 0xffff) 14:38:35 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 6) 14:38:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:38:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x501140, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) write$binfmt_elf64(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x1, 0xf7, 0x1f, 0x7ff, 0x2, 0x0, 0xff4f, 0xd3, 0x40, 0x178, 0x7, 0x3, 0x38, 0x1, 0x1, 0x800, 0x42}, [{0x70000000, 0x3, 0x40, 0x3, 0x8, 0x2, 0x4, 0x800}, {0x2, 0x0, 0x6, 0x1, 0x7fffffff, 0x1787, 0x20, 0x9}], "9cb4e8907c2308ad75fa4e00eef7adad5cace54804e1627df98258e16cca4f7d26a379d6ba695dbf127ec2dc29f502fe13dfac96160c0eb97467660c949396fbd1dcd669e88e29139e16fc808207f0ffbf0c7d7ac3f04ebb9c54bbb05697d15469a3e3dd49e3897ac95985e41a3381439b6a66e59edea0272986f7584e3d642fa8bfcd0e2f428bc0a6705d8ba0ce7a6fa7712f9a75c0b8ff93472900e7ade5d3a14b319f84d6d4081e7d9bef33b76e87995460423c706941fadbd6766c22faa4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa70) [ 1926.264672] FAULT_INJECTION: forcing a failure. [ 1926.264672] name failslab, interval 1, probability 0, space 0, times 0 [ 1926.265940] CPU: 0 PID: 11356 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1926.266707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1926.267592] Call Trace: [ 1926.267883] dump_stack+0x107/0x167 [ 1926.268284] should_fail.cold+0x5/0xa [ 1926.268712] ? security_inode_alloc+0x34/0x160 [ 1926.269219] should_failslab+0x5/0x20 [ 1926.269628] kmem_cache_alloc+0x5b/0x310 [ 1926.270072] security_inode_alloc+0x34/0x160 [ 1926.270545] inode_init_always+0xa4e/0xd10 [ 1926.270998] ? shmem_destroy_inode+0x70/0x70 [ 1926.271472] alloc_inode+0x84/0x240 [ 1926.271863] new_inode+0x23/0x250 [ 1926.272244] shmem_get_inode+0x15e/0xbc0 [ 1926.272688] __shmem_file_setup+0xb8/0x320 [ 1926.273143] ? _copy_from_user+0xfb/0x1b0 [ 1926.273586] __do_sys_memfd_create+0x275/0x450 [ 1926.274072] ? memfd_file_seals_ptr+0x170/0x170 [ 1926.274577] do_syscall_64+0x33/0x40 [ 1926.274972] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1926.275520] RIP: 0033:0x7f5ed33eab19 [ 1926.275919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1926.277871] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1926.278690] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f5ed33eab19 [ 1926.279449] RDX: 0000000000017000 RSI: 0000000000000000 RDI: 00007f5ed34440fb [ 1926.280211] RBP: 0000000000000002 R08: 000000000000b800 R09: ffffffffffffffff [ 1926.280978] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1926.281739] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000180 [ 1926.293489] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1926.295305] EXT4-fs (loop6): get root inode failed [ 1926.295861] EXT4-fs (loop6): mount failed 14:38:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000180)) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) ioctl$FIOCLEX(r6, 0x5451) syz_io_uring_setup(0x199, &(0x7f0000000080)={0x0, 0x47e1, 0x1, 0x3, 0x103}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) close(r6) ioctl$TIOCGPTPEER(r6, 0x5441, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0xa0, 0x8, 0xffc}) [ 1952.641011] FAULT_INJECTION: forcing a failure. [ 1952.641011] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.643358] CPU: 0 PID: 11383 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1952.644461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.645775] Call Trace: [ 1952.646202] dump_stack+0x107/0x167 [ 1952.646787] should_fail.cold+0x5/0xa [ 1952.647403] ? create_object.isra.0+0x3a/0xa20 [ 1952.648144] should_failslab+0x5/0x20 [ 1952.648758] kmem_cache_alloc+0x5b/0x310 [ 1952.649429] create_object.isra.0+0x3a/0xa20 [ 1952.650142] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.650968] kmem_cache_alloc+0x159/0x310 [ 1952.651655] security_inode_alloc+0x34/0x160 [ 1952.652372] inode_init_always+0xa4e/0xd10 [ 1952.653069] ? shmem_destroy_inode+0x70/0x70 [ 1952.653786] alloc_inode+0x84/0x240 [ 1952.654376] new_inode+0x23/0x250 [ 1952.654944] shmem_get_inode+0x15e/0xbc0 [ 1952.655612] __shmem_file_setup+0xb8/0x320 [ 1952.656297] ? _copy_from_user+0xfb/0x1b0 [ 1952.656975] __do_sys_memfd_create+0x275/0x450 [ 1952.657717] ? memfd_file_seals_ptr+0x170/0x170 [ 1952.658484] do_syscall_64+0x33/0x40 [ 1952.659087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.659913] RIP: 0033:0x7f5ed33eab19 [ 1952.660519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.663464] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1952.664693] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f5ed33eab19 [ 1952.665843] RDX: 0000000000017000 RSI: 0000000000000000 RDI: 00007f5ed34440fb [ 1952.666991] RBP: 0000000000000002 R08: 000000000000b800 R09: ffffffffffffffff [ 1952.668132] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1952.669280] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000180 14:39:01 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) name_to_handle_at(r0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140)=@orangefs={0x14, 0x1, {"c879efdee3ffb1f7c845b897f77c5a48", 0x10000}}, &(0x7f00000001c0), 0x1000) chdir(&(0x7f0000000040)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000380)={0x0, 0xfb, 0xfd, 0x0, 0x0, "b172b4af646738e28595d989f63d20d2", "3c6a8f30bcf01e85b9c0838022675a284e028a5c7c01ac7bab3211befbc6437a553b895d04cf9ff8f83988ddbad5b2fd80c69f24c52e74d992c1a6ecea1c3a782f5711f7e1f34d3f52a038b775201fcca3de065c99f7c73fbe56cd5fa598bb54267e1e43288f7c7f9ce3356b200bb0f0a3b97e1b18caefc2e6ce71bd79766647411490287882cc18fd63777d1795e7b4cc8232b03c76c1d5d72de641e27d584bef68efab4d3a86fcbad2b74a5dc886275addc605e03709d004f446b6ae989f0fbda8e64884d9b3b909be28c96c91526d12a29f4f85a9020675ba6fc41d1c7a3a367a9eeb6562c9f8"}, 0xfd, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat(r1, &(0x7f00000000c0)='./file1\x00', 0x426100, 0x100) renameat2(r2, &(0x7f0000000280)='./file1\x00', r2, &(0x7f0000000300)='./file1\x00', 0x6) 14:39:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:39:01 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) 14:39:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000009) 14:39:01 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f}}, './file0\x00'}) setns(r0, 0x8000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000004c0)={0x2, 0xed, 0x4}) r2 = syz_io_uring_complete(0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x6, 0x9b2, 0x2, 0xff, 0xa8c, 0x7f}) ioctl$TIOCEXCL(r2, 0x540c) 14:39:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 7) 14:39:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x3a}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:39:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffd, 0xa00) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000001400)={'veth0\x00', {0x2, 0x0, @empty}}) syz_io_uring_submit(r7, 0x0, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f00000012c0)=""/240, 0xf0}, 0x0, 0x10000}, 0xffffffff) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = pidfd_getfd(0xffffffffffffffff, r9, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r10, &(0x7f0000000580)={0x30201, 0x20, 0x2}, &(0x7f00000005c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r11}}, 0xff) syz_io_uring_submit(r4, r5, &(0x7f00000013c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r1, 0x5, 0x0, 0xffff0c3b, 0x5, 0x0, {0x0, r11}}, 0x58) [ 1952.776626] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1952.794327] EXT4-fs (loop6): get root inode failed [ 1952.795236] EXT4-fs (loop6): mount failed 14:39:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, &(0x7f00000000c0)=0x56cb, r3, &(0x7f0000000100), 0x2, 0x0) fcntl$setown(r2, 0x8, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x10001, 0xa2050, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x240, 0x7, 0x0, 0x7, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x20}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4000, 0x0) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 14:39:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x2c) r1 = signalfd4(r0, &(0x7f0000000000)={[0x1]}, 0x8, 0x1800) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000004c0)={0x0, 0x2, 0x6}) 14:39:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x1, 0x0, [0x0]}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xff, 0xee, 0x6, 0x80, 0x0, 0x1, 0x1800c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x7, 0x9}, 0x40000, 0x81, 0x9, 0x6, 0x0, 0x1, 0x2, 0x0, 0x3f, 0x0, 0x483}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x80, 0x6}]}, 0x10) 14:39:01 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x80000001, 0x8, &(0x7f0000001600)=[{&(0x7f00000002c0)="140350a5f16fd511fe47ac5ae59aefd60faac5b1dbaaa7f29272d35f44d1605c7f8eb81981eec763b413dc9b98c3cf7f1780dd093c1d2b36a94a4034c8b8fc2f84f8733b5e0024680893bc9158b805ba4859fb398f79fca45ce93f6b1305ceba9e5bbfada421fe94ee9c7c382e629ab445b88448cea7637c6c2f6fc8afffe56588ae0221ef93aa05aa36221a88e86f2b3d82ec695235000829a07d2644530fdffcfacc98451d4f50e45fc6d54045ca8ea30711755e91a8d927625847b43f00f8716e769eba6b7f8b8635aafe67bbc919f28cb89c4d", 0xd5, 0x388}, {&(0x7f0000000140)="59370e7d09471531c7978838452b5c2d23f79261783bdc6ab1486333ccf56c6f6070540338c54e1843153f2e90155f8aea44f0e02ae8f65521ca598d2180bd84a2eaf96a79e00c3a665a1de5c7eb0b7bf252bc1286b6dc627ad9f188c2e7f7c748", 0x61, 0x3f}, {&(0x7f00000001c0)}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="5731630fc90bfaf5212a252958803a80b45fe4d420261c51", 0x18, 0xa0e}, {&(0x7f0000001400)="90d059e2951fa8c13da1796e8bcb83e9f7d31ce29f7a77c945fce1f08a862b20eb9010ceb0bf271d7a8e6ce61e4f5e1d4d68739e2034840c3ac7519fa416b2118efc0308f4235f07e36d749b557e41b9e2f665d1a37777de01c3cfd83aa4374a1136905e1573aa5b191fd2523a30943528a5ef9282ee36c182032e7544f5c3539ca7b6424e65b343d361e438bbd39814c0a7418148", 0x95, 0x1}, {&(0x7f00000014c0)="0c7f1910d23e98fef854b9a70cfbbe094c744cd52008b43eaacba88b623d61274cc0d2145ec6f507de188614f2de3485d25ccfc57f85c5a38b4bf0ddc0108834d6a7c64184a3ed8188485de542d797b926a464089ec5b268e1ab87", 0x5b, 0x40}, {&(0x7f0000001540)="0cc09fc3df4e99c6b793879ef1c8629c7a7394420e02f3d4f91e91b9f3cbc2cbc5973520ac33049215f0b3cd76f513bb40506050562c0021d25be39785b3e8871fb7fb38438b440c76b0b8756310949c6d98f716b2f44caa8f3928ee1a952984e07794a8a300caa1db19a9f753c3f401baa2492f34f91588fb6631e479b9026f029f3355260c65", 0x87, 0x100000001}], 0x100000, &(0x7f00000016c0)={[{@dots}, {@fat=@quiet}], [{@measure}, {@dont_measure}, {@subj_user}]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001700)={0x0, 0xffffffffffffffff, 0x4, 0x6, 0x6, 0x9}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) sendfile(r1, r2, 0x0, 0x20d314) r4 = signalfd4(r2, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x8, 0x800) mknodat$loop(r4, &(0x7f0000000040)='./file1\x00', 0x200, 0x1) 14:39:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:39:02 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 8) 14:39:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x4, 0x5, 0x20, 0x0, 0x4c, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xbf, 0x2, @perf_bp={&(0x7f0000000240)}, 0x2, 0xfffffffffffffffb, 0x9, 0x1, 0x9, 0x3ff, 0xff, 0x0, 0x3ff, 0x0, 0x3f}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x1f, 0x20, 0x80, 0x1, 0x0, 0x9, 0x4000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0x18640, 0x1447, 0x877, 0x1, 0x6, 0xb514, 0x401, 0x0, 0x800, 0x0, 0x10001}, 0xffffffffffffffff, 0x1, r1, 0x8) signalfd4(r2, &(0x7f00000000c0)={[0x2]}, 0x8, 0x0) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/1899], 0x784) 14:39:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000a) 14:39:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x3b}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:39:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1953.163356] FAULT_INJECTION: forcing a failure. [ 1953.163356] name failslab, interval 1, probability 0, space 0, times 0 [ 1953.165219] CPU: 0 PID: 11434 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1953.166343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1953.167682] Call Trace: [ 1953.168125] dump_stack+0x107/0x167 [ 1953.168724] should_fail.cold+0x5/0xa [ 1953.169358] ? __d_alloc+0x2a/0x990 [ 1953.169956] should_failslab+0x5/0x20 [ 1953.170579] kmem_cache_alloc+0x5b/0x310 [ 1953.171241] ? trace_hardirqs_on+0x5b/0x180 [ 1953.171951] __d_alloc+0x2a/0x990 [ 1953.172533] d_alloc_pseudo+0x19/0x70 [ 1953.173164] alloc_file_pseudo+0xce/0x250 [ 1953.173840] ? alloc_file+0x5a0/0x5a0 [ 1953.174472] ? shmem_get_inode+0x55c/0xbc0 [ 1953.175172] __shmem_file_setup+0x144/0x320 [ 1953.175876] ? _copy_from_user+0xfb/0x1b0 [ 1953.176556] __do_sys_memfd_create+0x275/0x450 [ 1953.177308] ? memfd_file_seals_ptr+0x170/0x170 [ 1953.178077] do_syscall_64+0x33/0x40 [ 1953.178689] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1953.179517] RIP: 0033:0x7f5ed33eab19 14:39:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x20d314) pwritev(r2, &(0x7f00000005c0)=[{&(0x7f0000000000)="8b77302cd22294106277391d3171ca77eb6af472e96a52eb04e94f27bde48dbb77c932dae29593d954b0fe8398dadcf378a4086c494b78aabba70b0713d4d9a570d0463f0b3e6a", 0x47}, {&(0x7f0000000100)="4b9844feb175c57e9134bef0d46ca93dd8ef9b9a716d0c1fc971016056cbaf1b8a6b9ae6cd2776cb095b5a467756264a2adc1d173a12cd5c3fdd188a14a5d92c6af8b74ecca6246cc77b8c355bb58a4b09a8b4b99e7f2058fd5a34231aca0f9dbc0a337d7ee4df91cb70faee5b179017684d4f34d8d750d7753e548aab189faf77c9c2c5fabd1f683bd39ca98ad6579a628b87312db5a74b3770e96a4be51fa462fe2c16c7ccb66b2af21d505cc72c369eedb1847f49cbd8caa9a0521bf7fb10ad5a5059a25fe4322e727b38d6d8e3c35c72d9040adf3793ac76bbb30949b8968a", 0xe1}, {&(0x7f0000000080)="fe9e8eb56131d2364f3ae5506f08cf0c27b2138158471715f3040cf8083254d4a6ed0336c54d1d23c47e541716d16ba1cd76f54b4334bf09e1b22cba", 0x3c}, {&(0x7f00000002c0)="4360b2f1b00c4bf949be3b0d86b343923e4ad6c53b7e723c06cdd9e612f7a9340bc0c11f8efb02bd6623db5c6cb408ea7fb06921970109898e282fafa8ddc39b807b6944b88d1d066728addfff508a8029913a242ff21bc627ef7de9ebfaffd3021c5ff607d3ae81dfcfb78f5068ec2cd25a962bb75f518590f5346690c350a61d5ab1951fdfe013e934ecc0394e5a52ef0ac98758b559261766e4c3936783676b87ee4b6a0b20cfadb8041d252e5da2fcea0e97afdab39d49ad03c6d4f40e5dd4c95fb1d6", 0xc5}, {&(0x7f00000003c0)="c1d2eadcde88fc3cb5e0333822be3fe33e49660681c7c4f2e3af5a8d2a9fbc2c4d8e0182f1046b12611b316534639870b13426f68e3447433619b8e0e9be2d9f11f5e59b7ce182f153ff", 0x4a}, {&(0x7f0000000240)="8aeee18c2313ec0c0a4c1e6e32c37bcea8c8beb5b08980f11a0b7d0db0319265cd064027", 0x24}, {&(0x7f0000000440)="a805f9069bf576e7b2cbbffa5efbd26d8797795d0ced88880e298e7e5c32d7c8696aeb704e5007062e8b4d613e7d15c814c718170d15eabb36e5eb399584a8e4f9491f3af8797e03f232eb87e0457f806f387709449c7b09937914042eb343897d4481d8d1d4ea5b52c8b048812ef6fc2ce1b6b74042d7c6c1a860aa7ac658b394eff0239cba0976d282765c2820049d28607b408b8a70abe947c10995a6f28f3fdcb4120481969e6214db904005769ca56e7849712c7a3357d4400e", 0xbc}, {&(0x7f0000000500)="11304c55c4b5c0006493a6ded1478918ea52000d4c4d15504b8c5f79e1a95bad7c262815beeff28d8ddd565c2530c609635b14da5845204544d315c0ddb2b9bc8189246edf24fbb46858b3ea2a05a61e72d37a719ad312eac12be78bc9db10288c32955dbcbebedf38945922d73d983f5e7cacfc2abb25164385a0c8532f186427bfbefc23d8cf3478b7", 0x8a}], 0x8, 0x0, 0xffffffff) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) ioctl$FIOCLEX(r8, 0x5451) close(r8) ioctl$LOOP_GET_STATUS(r8, 0x4c03, &(0x7f0000000700)) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) io_uring_enter(r9, 0x37ce, 0x6e53, 0x3, &(0x7f00000006c0)={[0x1]}, 0x8) ioctl$FIOCLEX(r5, 0x5451) close(r5) openat(r5, &(0x7f0000000640)='./file1\x00', 0x0, 0x10) [ 1953.180123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1953.183274] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1953.184516] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f5ed33eab19 [ 1953.185677] RDX: 0000000000017000 RSI: 0000000000000000 RDI: 00007f5ed34440fb [ 1953.186831] RBP: 0000000000000002 R08: 000000000000b800 R09: ffffffffffffffff [ 1953.187981] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1953.189137] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000180 14:39:18 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 9) 14:39:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000c) 14:39:18 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:39:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x9, 0x1, 0x800, 0x6}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x3f, 0xffc}) 14:39:18 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) pkey_mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, r2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x2000001, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x3, 0xde, 0x7) pkey_alloc(0x0, 0x3) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) 14:39:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:39:18 executing program 7: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x4044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f00000014c0)=""/160, 0xa0}, {&(0x7f0000001640)=""/256, 0x100}, {&(0x7f0000003640)=""/128, 0x80}, {&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000001c0)=""/57, 0x39}], 0x7) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f00000004c0)=""/140, 0x8c}], 0x2, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x101) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000640)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)='team0\x00', 0x1, 0xfffffffffffffffc, 0x78}) lseek(r0, 0x27b, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x7, 0x8, 0x2, 0x2, 0x2, [0x9, 0x6, 0x0, 0x101]}) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="fe", 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001900)={0x53, 0xfffffffffffffffc, 0x3, 0xfa, @scatter={0x4, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000440)=""/55, 0x37}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000480)=""/19, 0x13}]}, &(0x7f00000015c0)="49b9cb", &(0x7f0000001840)=""/121, 0xfffff001, 0x4, 0xffffffffffffffff, &(0x7f00000018c0)}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000000070000a52f09bd0c55dada07d6892e95e3d100000000000003003e00000000000000000000000000000000000001000000380002000000000055c3a0984a0b00000300000000f3e7c78873000000e0fff2ffffffffffffff000000474c1b619792a700000000000000"], 0xaf2) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000780)="417e90b3a399eb8d5feab62544b3", 0xe}, {&(0x7f0000001000)='`', 0x1}], 0x2) fallocate(0xffffffffffffffff, 0x14, 0xfffffffffffffffa, 0x7) 14:39:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0xfffffffffffffffe, 0x20000, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000000), 0x3f, 0x2c0040) copy_file_range(r2, 0x0, r3, 0x0, 0x400, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)="01", 0x1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000080)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x1778, 0x35, 0x418, 0x70bd2b, 0x25dfdbfd, {0x1d}, [@generic="8992ae5a4b9d14e0b1838ef7787f76ca24d39c229029b4020e6c5fb19e64a38b0174c1fe2c601723584bebc4b9aeaa297ddd00de95cdc016f796e943374010dc5543ffefb53bea01c8367406d91ad5d3c708ab036b493f61d7f2245e32592df93a4306e64f9632a1cbe25d172e6231e3c5ab30d33503113bf92e6efa553e2e625776f328872760dd8948bede8e7727f3900c53c0ea4fc71c7b94612e7c3f49abac388c4d5976e2e014409b00d595490dbb7463cc69acd1023dbef6685e51f6672d5489341cb1cff0e503e4685bef262ecccfd16f8d336a3de98798c4b3ec27d2e1461a5bd73845a9b082", @generic="06f2c57fbac92195a835911ce53bbaf0b4497d44dec34d3a60f132d0c500e89c160865942b95b51daffc653c88901fd426adef1a10887c461fb99b2c265dfda40b4b6cf2bc264103", @nested={0x8f, 0x21, 0x0, 0x1, [@generic="fded784b5c8646c602baf4582670524323252327518703c3d8ff80f9e3266abe48e9f1c4b2797cdc0961ee80148ecae4271216c47571d2866c0e713ded6dc4036612ae3929bf77403bff5668919faca20581ba052f0fcb70ba6a22768409a72fa4341d933e316d6b943d008b264fb21d92a1eb0b2b6ae1af7886d4f3cdb14b487a8b8e6ebf95a3959e8ad7"]}, @typed={0x8, 0x37, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@loopback}, @nested={0x22f, 0x52, 0x0, 0x1, [@generic="2b90e911c2cf7a4145796624da12d144cf43c78a6b79834c8eedf2d9664a82e72796753db259b29a9e44d77f8841b8eea66ca14271b0df6b77ae0670dda2d5d7ad9c273a600ef4a2c8bab808652a3bf362d79a86365649263dbfaa7a6c3407220e65657c41dee1b81fad8fc13a03d8d416fa3b58764b1db7c28c4f719df4d21ed92d7b6e057a818850c810872a3a1dc05c96401ab99bbacb6ea39934d3c531bfa9ba787b1032bdd59e9b58406cbcce6684d149d540f63d8cb4ab9bee747f6b3055cb9ded6bf9c66a55986d29d48dd70ec7f8dedab8b7b979e21f7e7e9cc967ee039eeadcb83a1076c389", @generic="fab1a8b92d32b27bc7929d80da0b139e350fb97e75e468bf578dce03ca94097cf6", @generic="2c667e5bd08beea511e312f6dd4f8f3a37a11881d2a7d7d6c309a4a8563085cb8ff16564e125816b0dd20be9c52b40876a1f8e6a43912685d3853fb586535703fae42d2d268daf6ce950613df747212e1cc74fcfb39b28ea8afa0b6c9e04cc22f7027c84a7730c4ed5ca3ebd9f40606535ce620565652e403fd36f2a3820f97cd6d286ba72", @typed={0xc, 0x79, 0x0, 0x0, @u64}, @generic="9011802f4c7786ab756cd336a30f19c1c17c67be44d22a5cd1cace231da84bfd948cb226f8e80d5f2d8c6e7f88904e7cab84ed49fea99433074f18a5257d7d48312db7c689df2f3f9e40444ad9bd19c80b13aa510a7c1973985528ffd03acc240e29a7dd667d2412b3e4f4", @typed={0x8, 0x58, 0x0, 0x0, @pid=r5}, @typed={0x14, 0x33, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x2e, 0x0, 0x0, @pid}]}, @generic="0f60186d9b8f7e707ee8ec0ba6fda767d228d20e2b730e3c1664f5a733c853ff2915dc646056ee852c639834b4d53641125126545380768de6cd06783f13e4d0dddc46afb0110010cd95a3113395ae1535f8679a3292b1002a61ebbed195e593b85a01e6fc4688525bddec28b74bb5efc3bca883fb803f935acc65b44816ebdadf359b6e32808545d21689cd3306ef08d8595f04d6be0b095b3fd54dc0ead3719420167d05f2e985329aa8bbae73011f7859720878cf79b88e4e", @generic="4b668c85e5671283a8130dbb49c2001edeba4ffbd85ac03f0debb5273e97d96bf32ba263f6b59d393be8a477920fb579b3e3f8659100f9a6217db20aad5bb95e8cf8928f1aad428220afc861e88c199f23fccfbed9f521e991f387f6aa4e6b667788950de40ce40408c39e774d060e2805702ad6ec1f800db6867451bb54fd9896fbb8ac1f24313e19acb61451ed94e283a50b55b062856536645713c77ad13e59225d811f49c8d82ad9d32e47293a8e84310d7e43540d529a4b557552df68ad5ebfc23d9887e7409ac0a0f8909bc8baad7b1a1b1e080a99", @nested={0x1cf, 0xa, 0x0, 0x1, [@typed={0x6, 0x80, 0x0, 0x0, @str='{\x00'}, @generic="ffb028fd343f600cde0f148fe51611393a1aee7036134be3eb202d17fb690ed78379f4c5a9a1fb1b1a774f6f9e674b9e7783deae890b954a5a45e6f11118a920ac28e255ffc4c7d4b63150fac48da0112d9d14a3f82bf9cb7e45b1e25e5d325fb429d7e95f872dec749b710d84c93cbb5544753591f13940f45d89de8ff85fcd2c817d65bb7cb7c3500e80e0aaa778d22a71464c1607069e589e1a638da43b5adb030fd14dfb1e5ec531b903e33eb46b6d1dfe15e4a7e34000d321cfe6c1f586532d743be766ef37", @generic="03e1845a225aa7b463412077b80d87943ee4a0d11464edda68b728a76eff08dbdb9f7e59f762ceb81b997b6e1465ba1ba535baa9251e0557582ce3b1f64552acaacfc11fc8c9e5ad6e86879a3ef806c66044d4dacee2bd156eb0c96e", @generic="684303d6484373f1ac754aef7311a4e7aa565ea640a4fe7c599cb99366d520a706d1c582adc937292dd53e85f6617c71dfc3fce405f9843615e31db1b9482ec71dfd48eae317c6c7ac7ffc6d4276af75ba50c8d4c5141515848221471977d8cdc97c0a325c5683cabbb94e60f349d3068834c4a20d0ad3231767cac812b3fa12fda65c203356081e863080155d06ebded0dd00b2fc8d618f0790086b9d8d8f"]}, @generic="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"]}, 0x1778}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendfile(r0, r1, 0x0, 0x20d314) [ 1969.049012] FAULT_INJECTION: forcing a failure. [ 1969.049012] name failslab, interval 1, probability 0, space 0, times 0 [ 1969.050798] CPU: 1 PID: 11461 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1969.051802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1969.053000] Call Trace: [ 1969.053402] dump_stack+0x107/0x167 [ 1969.053937] should_fail.cold+0x5/0xa [ 1969.054499] ? create_object.isra.0+0x3a/0xa20 [ 1969.055166] should_failslab+0x5/0x20 [ 1969.055722] kmem_cache_alloc+0x5b/0x310 [ 1969.056331] create_object.isra.0+0x3a/0xa20 [ 1969.056976] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1969.057733] kmem_cache_alloc+0x159/0x310 [ 1969.058336] ? trace_hardirqs_on+0x5b/0x180 [ 1969.058978] __d_alloc+0x2a/0x990 [ 1969.059496] d_alloc_pseudo+0x19/0x70 [ 1969.060052] alloc_file_pseudo+0xce/0x250 [ 1969.060655] ? alloc_file+0x5a0/0x5a0 [ 1969.061229] ? shmem_get_inode+0x55c/0xbc0 [ 1969.061861] __shmem_file_setup+0x144/0x320 [ 1969.062492] ? _copy_from_user+0xfb/0x1b0 [ 1969.063098] __do_sys_memfd_create+0x275/0x450 [ 1969.063765] ? memfd_file_seals_ptr+0x170/0x170 [ 1969.064458] do_syscall_64+0x33/0x40 [ 1969.065002] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1969.065753] RIP: 0033:0x7f5ed33eab19 [ 1969.066304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1969.068954] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1969.070067] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f5ed33eab19 [ 1969.071120] RDX: 0000000000017000 RSI: 0000000000000000 RDI: 00007f5ed34440fb [ 1969.072157] RBP: 0000000000000002 R08: 000000000000b800 R09: ffffffffffffffff [ 1969.073192] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1969.074245] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000180 [ 1969.146412] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1969.148849] EXT4-fs (loop6): get root inode failed [ 1969.149675] EXT4-fs (loop6): mount failed 14:39:18 executing program 2: lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) r1 = fork() ptrace(0x10, r1) recvmmsg$unix(r0, &(0x7f0000001b40)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000440)=""/25, 0x19}, {&(0x7f0000000600)=""/177, 0xb1}, {&(0x7f00000006c0)=""/191, 0xbf}], 0x7}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000480)=""/57, 0x39}, {&(0x7f0000001880)=""/200, 0xc8}, {&(0x7f0000001980)=""/220, 0xdc}], 0x4, &(0x7f0000001ac0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}], 0x2, 0x2002, &(0x7f0000001bc0)={0x77359400}) ptrace$getenv(0x4201, r2, 0xba, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x81, 0x81, 0x27, 0x69, 0x0, 0x2, 0x2008, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x82, 0x9, 0x0, 0x7, 0x8, 0x4, 0xfc01, 0x0, 0x1b, 0x0, 0x8}, r1, 0x3, 0xffffffffffffffff, 0xb) 14:39:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:39:33 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x6d, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) 14:39:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_mreqn(r3, 0x0, 0xc8, 0x0, 0x4) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:39:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000d) 14:39:33 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 10) 14:39:33 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:39:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x3e}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:39:33 executing program 7: syz_open_dev$sg(0x0, 0x0, 0x2001) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0xfffffffffffffffe, 0xb35c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x8, 0x2000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) fallocate(r0, 0x0, 0x1f, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000008c0)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r2, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=@ethernet={0x306, @local}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000240)="9f0294800ca24951f62c35cacb09adc98d2260dcbf5d99babd96689cce81d9757d31ac19194cb62bde2d7f96b43c9fd60aa42b8d8e1650008ea841c1ba22f7eb45b4a7", 0x43}, {&(0x7f00000002c0)="8c73c926fcde34161a7103fc6df83649152e4ea5c13ab069d1485f858eb6307202759df35ecbd7781a74159e8aeb1f9928ea5f3c021d21a9d443f0ef7fcd8a76e9aac74be7e6d0c8864fde", 0x4b}, {&(0x7f0000000340)="3a5a72efac92773b9419de87ba0d030ddb6e2682cec4dacde4069a9cd7b9ee4d600282f827caf1b318b6218f664350e6eddc44b1f5a4659dadafbc551d0e3f59ff0aa89205ff0f919f5d47bbf18b", 0x4e}, {&(0x7f00000004c0)="c2ceead3131733fa6106db7713e037781830d33dcdb562783458cde5072c318894d7e4d916c07af0fb9466817066a2aea1342ffbc31e57ee7f9125976ba16d8dd8fb2c7664978adc25b9671d3338f0e8e3744042467b993c261d7495a71e2fe49690e118e9f7f49e0340658719202c549820033508446da3a82334e31173047d508057bc4c7006f6369f", 0x8a}, {&(0x7f0000000580)="ce3d77df6113ac0a470035f103a9da322a16c2c33ea9111128936f7e9a297705ee9cbb3e53fdf61b37343a22c8c919fe38a0da82e8f08230f58e6c2eeaacfa5517724982381b150cbb7cfdff6d0e1c71e6b845d1112f90e1ef8487a0be761be7c5b20d500d4472d032fd1096fdf0fa4d18fd6555e5839adc893d27832f3bf17490786b22164ae337f91974173a4a1202af1d78f7a9e476d7b942c262eb7e111ff25065af364a4cdebcf08ecb601e93301ffd0c0320c3efc3224e418c23f88166fa184483a932b7af66e19de6401a2b5d412c7576569958", 0xd7}, {&(0x7f00000003c0)="14e4e2fd9a5d7d9ea05421f6ba819a367a0246e0671c992dce9de9162f6ad310765171b05743ee3361160b3dee24e83f87cfac1dbe10f1e88a2d0a40412ba1fc3cd4c80e4e05bfb82c12c4cc5153d3e2b5676adfdd1fd33ee847b11d24f3f96b4b5494ccc587f76fe9efb13795436aa6f73d774a32890b48e54cf8d60e73", 0x7e}, {&(0x7f0000000680)="187482ada75c06516dbb716c93ff102e5ce3af669ab54f29f7fbd5905ab602c597e5dc18389b5257d844921511171d57060ae949f4816be792a4e40ebd05de1f0eb31104004f101ffaf0d0ae678bd1f9e3f251c26205df2daa612cefb17b6a9f4a217d2dd38a1e08b59625c2ff55c2ac88471484292a85da136d7d45cee26043a4c2b82d0b94b945a64a94670df4b6b26cb2c804c78f05327838fa0d7afc8a310f68c851cebe47ce03cde5d94ec2c18f0877081bf9b17c0b5d4381a286aec5654137c950f700dacbfe6e4d86bcc4de225a495eb56d34a44fbdf3dcb5494772e5f6ccf2f9fe4b27d7084be72668619d146e8878dd", 0xf4}, {&(0x7f0000000780)="bf6a466d83064a60dc97cada2101c782274760a4e156740c84f8c24eb5d7be1fca8f17cd8395266e8fc8855ab55437708d7df5f2f0c78ff1258d60fedb50d876d540c8c6c20aa0834c41b3053e6066cbee1fadbaf0c93a03de8d1dd083ebb995e1312a81b29dec1271b85a0d38871513303aeed4fc", 0x75}], 0x8}, 0x0, 0x4000001}, 0x2e77) openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x404000, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) [ 1984.896347] FAULT_INJECTION: forcing a failure. [ 1984.896347] name failslab, interval 1, probability 0, space 0, times 0 [ 1984.898175] CPU: 1 PID: 11503 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1984.898187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1984.898194] Call Trace: [ 1984.898218] dump_stack+0x107/0x167 [ 1984.898241] should_fail.cold+0x5/0xa [ 1984.898266] ? __alloc_file+0x21/0x320 [ 1984.898288] should_failslab+0x5/0x20 [ 1984.898306] kmem_cache_alloc+0x5b/0x310 [ 1984.898334] __alloc_file+0x21/0x320 [ 1984.898353] alloc_empty_file+0x6d/0x170 [ 1984.898373] alloc_file+0x5e/0x5a0 [ 1984.898395] alloc_file_pseudo+0x16a/0x250 [ 1984.898413] ? alloc_file+0x5a0/0x5a0 14:39:33 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 11) [ 1984.898439] ? shmem_get_inode+0x55c/0xbc0 [ 1984.898469] __shmem_file_setup+0x144/0x320 [ 1984.898488] ? _copy_from_user+0xfb/0x1b0 [ 1984.898512] __do_sys_memfd_create+0x275/0x450 [ 1984.898532] ? memfd_file_seals_ptr+0x170/0x170 14:39:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 1984.898564] do_syscall_64+0x33/0x40 [ 1984.898583] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1984.898596] RIP: 0033:0x7f5ed33eab19 [ 1984.898614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1984.898624] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1984.898645] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f5ed33eab19 14:39:34 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x301600, 0x0) r1 = fcntl$dupfd(r0, 0xbac25b3d391561c2, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000c0102100018000000", @ANYRES32]) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r3 = timerfd_create(0x5, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000004c0)={{r3}, "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"}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x0, @in={0x2, 0x4e21, @multicast2}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x4400002}, @hci={0x1f, 0x4, 0x3}, 0x1f, 0x0, 0x0, 0x0, 0xc557, &(0x7f0000000280)='bond_slave_1\x00', 0x8, 0x1000, 0x80}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000740)={0x3, 0x8000, 0x6, 0x0, 0x0, [{{}, 0x100000001}, {{}, 0xffffffff}, {{}, 0xfffffffffffffff7}, {{}, 0x8}, {{}, 0x3}, {{r5}, 0x9}]}) r6 = socket$inet(0x2, 0xa, 0x0) bind(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x65, "d44cdf4aa94e938f977692efbe87f57cf925c941ac61dcec5481ed9f4c6002c3042ce7a266cba882c27afd3e8989da21cbfd31f0079eb39c19040e637206d65723503fd60136197b5c6fe63fcf3004a2c0c9eabc2b7c8f7743468686ed2fe4330a985c68d9"}, &(0x7f0000000140)=0x89) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x70bd2c, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x4000080) [ 1984.898657] RDX: 0000000000017000 RSI: 0000000000000000 RDI: 00007f5ed34440fb [ 1984.898668] RBP: 0000000000000002 R08: 000000000000b800 R09: ffffffffffffffff [ 1984.898680] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1984.898691] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000180 [ 1984.954287] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 1984.954384] EXT4-fs (loop6): mount failed [ 1985.127926] FAULT_INJECTION: forcing a failure. [ 1985.127926] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.129719] CPU: 1 PID: 11526 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1985.130724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1985.131940] Call Trace: [ 1985.132329] dump_stack+0x107/0x167 [ 1985.132857] should_fail.cold+0x5/0xa [ 1985.133423] ? create_object.isra.0+0x3a/0xa20 [ 1985.134070] should_failslab+0x5/0x20 [ 1985.134626] kmem_cache_alloc+0x5b/0x310 [ 1985.135222] create_object.isra.0+0x3a/0xa20 [ 1985.135840] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1985.136559] kmem_cache_alloc+0x159/0x310 [ 1985.137159] __alloc_file+0x21/0x320 [ 1985.137689] alloc_empty_file+0x6d/0x170 [ 1985.138272] alloc_file+0x5e/0x5a0 [ 1985.138796] alloc_file_pseudo+0x16a/0x250 [ 1985.139405] ? alloc_file+0x5a0/0x5a0 [ 1985.139946] ? shmem_get_inode+0x55c/0xbc0 [ 1985.140577] __shmem_file_setup+0x144/0x320 [ 1985.141186] ? _copy_from_user+0xfb/0x1b0 [ 1985.141803] __do_sys_memfd_create+0x275/0x450 [ 1985.142449] ? memfd_file_seals_ptr+0x170/0x170 [ 1985.143140] do_syscall_64+0x33/0x40 [ 1985.143670] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1985.144382] RIP: 0033:0x7f5ed33eab19 [ 1985.144927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1985.147596] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1985.148686] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f5ed33eab19 [ 1985.149729] RDX: 0000000000017000 RSI: 0000000000000000 RDI: 00007f5ed34440fb [ 1985.150734] RBP: 0000000000000002 R08: 000000000000b800 R09: ffffffffffffffff [ 1985.151748] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1985.152787] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000180 14:39:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x505142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) sendfile(r0, r1, 0x0, 0x20d314) 14:39:34 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x410000, 0x60) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x44, 0x1e, 0x2}) 14:39:34 executing program 7: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101003, 0x0) pread64(r0, &(0x7f0000000280)=""/178, 0xb2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de633978e40", 0x9b, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) pkey_mprotect(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xa000) r2 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, r2) write$binfmt_elf64(r1, 0x0, 0xfdef) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x4001, 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000140)) [ 1985.220316] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 1985.221430] EXT4-fs (loop6): mount failed 14:39:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x238200, 0x80, 0x8}, 0x18) syz_io_uring_setup(0x2069, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_complete(r2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$FIOCLEX(r4, 0x5451) close(r4) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0x5, 0x4, 0xef}) 14:39:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) ioctl$FIOCLEX(r5, 0x5451) close(r5) openat(r5, &(0x7f0000000000)='./file1\x00', 0x450200, 0x40) 14:39:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x41}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:39:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000f) 14:39:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:39:34 executing program 4: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x4d76, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) sendto$unix(r1, &(0x7f0000000480)="d9325a0e15d4c4a0b53dc0332b9d22d050f88932b7a5f90ed244486fb03b9ff71658f0db895fe2ef740419d7cd0e14f48058f63b02e6f05ef8c4801469567176c0c840c37d58ec551d63bf2d499de71277d23824d0bde219eba33a0b0c39422190e3b0436423162bdbe8d99517bbc2d92674f79ab515c9bbb247a031f6cd375b8758b286296d6dc993521461595bbf81ae331c0bcfd40c6a03efa691efc3b90513fa89877e8579c62a6eaf0dfa8c3130d8e6f76bf7e4d4f22212c1de57dcd58eddec84dec8efe1fb2c1df98e1f36291c7c57338ee45921643c9569bc", 0x4995b5922abe4152, 0x840, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x3, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xc8}, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}) lchown(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101142, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x5, 0x0, 0x2, 0x32, @loopback, @private1, 0x40, 0x8, 0x4001141, 0x1}}) r4 = socket$netlink(0x10, 0x3, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000240), 0x80, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x2d494c18}}, {@mmap}], [{@uid_gt={'uid>', 0xee01}}, {@appraise_type}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@appraise}, {@appraise}]}}) getsockname$unix(r1, &(0x7f0000000580)=@abs, &(0x7f0000000280)=0x6e) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) stat(&(0x7f0000000380)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001180)={{{@in=@private=0xa010101, @in=@local, 0x4e20, 0x7f, 0x4e22, 0x0, 0xa, 0x0, 0x20, 0x2b, r3, r5}, {0x3ff, 0x44, 0x0, 0x7e7, 0x4, 0x800, 0xfff, 0x5}, {0xfffffffffffff800, 0x81, 0x9, 0xa5}, 0xb41, 0x6e6bb4, 0x2, 0x0, 0x1, 0x2}, {{@in6=@empty, 0x4d6, 0x3c}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x2, 0x8, 0x7, 0x2, 0x4}}, 0xe8) fchown(r0, r5, 0x0) 14:39:34 executing program 7: read(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1451c2, 0x10) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x3f0000000000000, 0x2, &(0x7f0000000380)=[{&(0x7f00000001c0)="742cd7330e922b19c5c11e7b52f978d7ef851ee0bbcc6cec8bcaa734926c46d13088b488eb13e951b03287a1cf8252b0e14d0611537490ea318e5b69215677dcd5f9a8637988931fb83f9a19e5e933da45ba592685d2bfc16587785e0a2cb198c1c38be58e49a84b18e6f6bb2dc85b2f1b5210ca77dff10a039da29614b1ad1a6f5567c1a8edd63e0a2b107f2eb3257424e6795254679828c8b87f4d421a69948350c50d2d0b8089284cd56b0eba1d08652b8ef2d509ed4807a1bf3828f6f2499a0b", 0xc2, 0x2}, {&(0x7f00000002c0)="1695b23655350bd5770f5bcf838fd380e21488bcfebe498c96c78522999bec086d32d5c91368aaf06e5d896ebc4b691c9bb6ffd5d37aed4574cd5dab4b373e4d316bc1295bdab0d2ddf52802cddafa1c92a6f8c914bb08e0668e3ad96c49774acf4c4aba4132ab1268520480ebedb5501e7f0d5d9460740b2babbb7f8818dfa8256b11b268c95dd2a1eba162c4b06a280327c18146874749ce32375f1147", 0x9e, 0x6}], 0x2000000, &(0x7f00000003c0)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x30, 0x31, 0x3a, 0x2c]}}}}], [{@obj_role}, {@pcr={'pcr', 0x3d, 0x31}}, {@obj_type={'obj_type', 0x3d, '*\\}/%@\x9d^n'}}, {@subj_type={'subj_type', 0x3d, '\'['}}, {@fsname={'fsname', 0x3d, '}'}}, {@measure}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1c8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000480)="af", 0x1, 0x1000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fallocate(r0, 0x8, 0x0, 0x8000) 14:39:34 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 12) [ 1985.663956] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 1985.672379] EXT4-fs (loop6): mount failed [ 1985.740623] FAULT_INJECTION: forcing a failure. [ 1985.740623] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.742518] CPU: 0 PID: 11574 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 1985.743642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1985.744943] Call Trace: [ 1985.745378] dump_stack+0x107/0x167 [ 1985.745964] should_fail.cold+0x5/0xa [ 1985.746575] ? security_file_alloc+0x34/0x170 [ 1985.747303] should_failslab+0x5/0x20 [ 1985.747919] kmem_cache_alloc+0x5b/0x310 [ 1985.748573] security_file_alloc+0x34/0x170 [ 1985.749260] __alloc_file+0xb7/0x320 [ 1985.749871] alloc_empty_file+0x6d/0x170 [ 1985.750526] alloc_file+0x5e/0x5a0 [ 1985.751095] alloc_file_pseudo+0x16a/0x250 [ 1985.751767] ? alloc_file+0x5a0/0x5a0 [ 1985.752395] ? shmem_get_inode+0x55c/0xbc0 [ 1985.753093] __shmem_file_setup+0x144/0x320 [ 1985.753803] ? _copy_from_user+0xfb/0x1b0 [ 1985.754488] __do_sys_memfd_create+0x275/0x450 [ 1985.755231] ? memfd_file_seals_ptr+0x170/0x170 [ 1985.755980] do_syscall_64+0x33/0x40 [ 1985.756590] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1985.757427] RIP: 0033:0x7f5ed33eab19 [ 1985.758036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1985.760966] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1985.762210] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f5ed33eab19 [ 1985.763361] RDX: 0000000000017000 RSI: 0000000000000000 RDI: 00007f5ed34440fb [ 1985.764482] RBP: 0000000000000002 R08: 000000000000b800 R09: ffffffffffffffff [ 1985.765616] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 1985.766770] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000180 14:39:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000010) 14:39:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$KDENABIO(r1, 0x4b36) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$FIOCLEX(r4, 0x5451) close(r4) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000000)={0x7, 0x64d, 0x8}) 14:39:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:39:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x42}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:39:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x523000, 0x0) r3 = signalfd4(r2, &(0x7f00000001c0)={[0x8]}, 0x8, 0x40000) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000002c0)) ftruncate(r2, 0x5) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x9, 0x81}}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r5 = openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0x88) write(r4, &(0x7f0000000240)="01", 0x1) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r7, 0x0) mount$9p_unix(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x206088, &(0x7f0000000440)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x7}}, {@afid={'afid', 0x3d, 0xffffffff80000000}}, {@cachetag={'cachetag', 0x3d, '\x00'}}, {@noextend}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@euid_gt={'euid>', r6}}, {@audit}, {@smackfsroot}, {@fsmagic={'fsmagic', 0x3d, 0x24}}, {@dont_hash}, {@fowner_eq={'fowner', 0x3d, r7}}, {@audit}]}}) pidfd_send_signal(r5, 0x2f, &(0x7f0000000300)={0x25, 0x6b, 0x4}, 0x0) sendfile(r0, r1, 0x0, 0x20d314) r8 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x9}) 14:39:50 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000001880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0xc3a45a9b1f066fb4) openat$dir(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x532402, 0xfd70c1c74e342d36) 14:39:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 13) 14:39:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) shutdown(r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x10, 0x0, 0x1000002) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'}) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x1b, 0x5, 0x3) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x0) getpeername$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053000)={0x376, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "5c83c9bf8af498"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004c340)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0xad, "7e9ac7272717f4"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000574c0)={0x3, [], 0xfb, "f74230c96ea915"}) unshare(0x48020200) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) [ 2001.430253] FAULT_INJECTION: forcing a failure. [ 2001.430253] name failslab, interval 1, probability 0, space 0, times 0 [ 2001.432623] CPU: 1 PID: 11600 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2001.433680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2001.434902] Call Trace: [ 2001.435309] dump_stack+0x107/0x167 [ 2001.435856] should_fail.cold+0x5/0xa [ 2001.436427] ? create_object.isra.0+0x3a/0xa20 [ 2001.437111] should_failslab+0x5/0x20 [ 2001.437687] kmem_cache_alloc+0x5b/0x310 [ 2001.438292] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2001.439266] create_object.isra.0+0x3a/0xa20 [ 2001.439921] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2001.440676] kmem_cache_alloc+0x159/0x310 [ 2001.441302] security_file_alloc+0x34/0x170 [ 2001.441955] __alloc_file+0xb7/0x320 [ 2001.442508] alloc_empty_file+0x6d/0x170 [ 2001.443115] alloc_file+0x5e/0x5a0 [ 2001.443646] alloc_file_pseudo+0x16a/0x250 [ 2001.444271] ? alloc_file+0x5a0/0x5a0 [ 2001.444843] ? shmem_get_inode+0x55c/0xbc0 [ 2001.445481] __shmem_file_setup+0x144/0x320 [ 2001.446126] ? _copy_from_user+0xfb/0x1b0 [ 2001.446743] __do_sys_memfd_create+0x275/0x450 [ 2001.447419] ? memfd_file_seals_ptr+0x170/0x170 [ 2001.448118] do_syscall_64+0x33/0x40 [ 2001.448666] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2001.449417] RIP: 0033:0x7f5ed33eab19 [ 2001.449973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2001.452644] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2001.453775] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f5ed33eab19 [ 2001.454822] RDX: 0000000000017000 RSI: 0000000000000000 RDI: 00007f5ed34440fb [ 2001.455861] RBP: 0000000000000002 R08: 000000000000b800 R09: ffffffffffffffff [ 2001.456901] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000 [ 2001.457944] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000180 14:39:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) shutdown(r1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) add_key(0x0, 0x0, &(0x7f0000000000)='t', 0x1, 0xfffffffffffffffb) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b8000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181300000000000000000000150000000022", 0x9d, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c011900000000000019000000", 0x7b, 0xb800}], 0x0, &(0x7f0000011700)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) [ 2001.513770] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 2001.524309] EXT4-fs (loop6): get root inode failed [ 2001.525181] EXT4-fs (loop6): mount failed 14:39:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x7) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x81, 0x1, 0xffc}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$KDENABIO(r3, 0x4b36) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x7, 0x1a, 0x3e, &(0x7f0000000040)}) 14:39:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x181202) openat(r2, &(0x7f0000000040)='./file1\x00', 0x1, 0x142) write(r1, &(0x7f0000000240)="01", 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x20d314) 14:39:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:39:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r0, r1, &(0x7f0000001ec0)=0x2, 0xfeea) ioctl$TCSBRKP(r0, 0x5425, 0x7) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001bc0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000080)=""/114, 0x72}, {&(0x7f0000000100)=""/69, 0x45}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f00000001c0)=""/114, 0x72}, {&(0x7f0000000240)=""/244, 0xf4}, {&(0x7f0000000340)=""/241, 0xf1}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000680)=""/231, 0xe7}], 0x2, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/219, 0xdb}], 0x1, &(0x7f0000000a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000c00)=""/44, 0x2c}], 0x1, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000dc0)=""/145, 0x91}, {&(0x7f0000000e80)=""/90, 0x5a}, {&(0x7f0000000f00)=""/111, 0x6f}], 0x3, &(0x7f0000000fc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000001240)=[{&(0x7f0000001140)=""/237, 0xed}], 0x1, &(0x7f0000001280)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000001440)=[{&(0x7f00000013c0)=""/67, 0x43}], 0x1, &(0x7f0000001480)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001540)=""/86, 0x56}, {&(0x7f00000015c0)=""/87, 0x57}, {&(0x7f0000001640)=""/1, 0x1}], 0x3, &(0x7f00000016c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000001900)=[{&(0x7f0000001800)=""/233, 0xe9}], 0x1, &(0x7f0000001940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/117, 0x75}, {&(0x7f0000001a80)=""/21, 0x15}], 0x2, &(0x7f0000001b00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}}], 0xa, 0x10000, &(0x7f0000001e40)={0x0, 0x3938700}) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000001e80)) 14:39:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x43}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:39:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 14) [ 2001.906200] EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated [ 2001.914940] EXT4-fs (loop6): get root inode failed [ 2001.915766] EXT4-fs (loop6): mount failed 14:39:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000011) 14:39:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:39:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0xf9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) [ 2002.008812] FAULT_INJECTION: forcing a failure. [ 2002.008812] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2002.011041] CPU: 1 PID: 11640 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2002.012058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2002.013256] Call Trace: [ 2002.013662] dump_stack+0x107/0x167 [ 2002.014198] should_fail.cold+0x5/0xa [ 2002.014773] __alloc_pages_nodemask+0x182/0x600 [ 2002.015458] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2002.016337] ? lock_downgrade+0x6d0/0x6d0 [ 2002.016937] ? lock_acquire+0x197/0x470 [ 2002.017561] alloc_pages_vma+0xbb/0x410 [ 2002.018155] shmem_alloc_page+0x10f/0x1e0 [ 2002.018768] ? shmem_init_inode+0x20/0x20 [ 2002.019404] ? percpu_counter_add_batch+0x8b/0x140 [ 2002.020132] ? __vm_enough_memory+0x184/0x360 [ 2002.020796] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2002.021609] ? shmem_unuse_inode+0xf60/0xf60 [ 2002.022255] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2002.023008] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2002.023755] shmem_write_begin+0xf7/0x1d0 [ 2002.024375] generic_perform_write+0x20a/0x4f0 [ 2002.025054] ? page_cache_prev_miss+0x310/0x310 [ 2002.025744] ? evict_inodes+0x420/0x420 [ 2002.026334] ? generic_write_checks+0x2ad/0x390 [ 2002.027029] __generic_file_write_iter+0x39d/0x5d0 [ 2002.027750] generic_file_write_iter+0xdb/0x230 [ 2002.028430] ? iov_iter_init+0x3c/0x130 [ 2002.029015] new_sync_write+0x42c/0x660 [ 2002.029611] ? new_sync_read+0x6f0/0x6f0 [ 2002.030204] ? __x64_sys_pwrite64+0x201/0x260 [ 2002.030865] ? lock_release+0x680/0x680 [ 2002.031446] ? selinux_file_permission+0x92/0x520 [ 2002.032167] ? security_file_permission+0xb1/0xe0 [ 2002.032882] vfs_write+0x7c0/0xb10 [ 2002.033418] __x64_sys_pwrite64+0x201/0x260 [ 2002.034056] ? ksys_pwrite64+0x1b0/0x1b0 [ 2002.034669] do_syscall_64+0x33/0x40 [ 2002.035216] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2002.035965] RIP: 0033:0x7f5ed339dab7 [ 2002.036511] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2002.039179] RSP: 002b:00007f5ed095ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2002.040280] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed339dab7 [ 2002.041318] RDX: 000000000000009f RSI: 0000000020010000 RDI: 0000000000000004 [ 2002.042352] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffffffffff [ 2002.043396] R10: 0000000000008000 R11: 0000000000000293 R12: 0000000000000004 [ 2002.044431] R13: 0000000000000004 R14: 0000000020000080 R15: 0000000000000000 [ 2002.172274] ISOFS: Unable to identify CD-ROM format. 14:40:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000023) 14:40:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x44}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:40:07 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000440)={{}, 0x2, 0x401, 0x10003}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x148}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r1, r2) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf2501000000080001002800000008000300", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x4) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000380)=""/229) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x406, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) close(0xffffffffffffffff) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) setresuid(0xee00, r3, 0x0) setreuid(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 14:40:07 executing program 4: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, r0, 0x0) r2 = fork() r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) keyctl$chown(0x4, r0, r7, r8) ioctl$FIOCLEX(r6, 0x5451) close(r6) r9 = request_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='keyring\x00', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r9) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xff, 0x7, 0x6, 0x8, 0x0, 0x9, 0x80000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x546, 0x5, 0x3, 0x4, 0x7, 0xe7d, 0x40, 0x0, 0xff, 0x0, 0x1f}, r2, 0x2, r6, 0x1) 14:40:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:40:07 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x10400, 0xf0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:40:07 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 15) 14:40:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f0000000480)={0x0, 0x193b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) openat(r0, &(0x7f0000000440)='./file1\x00', 0x781800, 0xd0) ioctl$FIOCLEX(r3, 0x5451) close(r3) r4 = openat(r3, &(0x7f0000000280)='./file1\x00', 0x40, 0x0) r5 = syz_io_uring_setup(0x9d9, &(0x7f0000000100)={0x0, 0x3462, 0x4, 0x1, 0x39f, 0x0, r0}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r0, 0x10000000) r8 = openat$cgroup_type(r4, &(0x7f0000000340), 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r8, 0x52, 0x0, 0x0, 0x4, 0x1}, 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0xee00, 0xee01}}, './file1\x00'}) io_uring_enter(r10, 0x3a7b, 0x4b42, 0x1, &(0x7f0000000400)={[0x6a38]}, 0x8) write(r9, &(0x7f0000000240)="01", 0x1) sendfile(r0, r4, 0x0, 0x20d314) [ 2018.072383] FAULT_INJECTION: forcing a failure. [ 2018.072383] name failslab, interval 1, probability 0, space 0, times 0 [ 2018.074516] CPU: 0 PID: 11674 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2018.075567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2018.076869] Call Trace: [ 2018.077289] dump_stack+0x107/0x167 [ 2018.077866] should_fail.cold+0x5/0xa [ 2018.078451] ? xas_alloc+0x336/0x440 [ 2018.079032] should_failslab+0x5/0x20 [ 2018.079618] kmem_cache_alloc+0x5b/0x310 [ 2018.080243] ? __lockdep_reset_lock+0x180/0x180 [ 2018.080966] xas_alloc+0x336/0x440 [ 2018.081551] xas_create+0x34a/0x10d0 [ 2018.082104] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2018.082153] xas_create_range+0x189/0x620 [ 2018.083544] EXT4-fs (loop6): group descriptors corrupted! [ 2018.084137] shmem_add_to_page_cache+0x760/0x1130 [ 2018.084175] ? shmem_getattr+0x180/0x180 [ 2018.086343] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 2018.087186] ? shmem_unuse_inode+0xf60/0xf60 [ 2018.087867] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2018.088653] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2018.089451] shmem_write_begin+0xf7/0x1d0 [ 2018.090115] generic_perform_write+0x20a/0x4f0 [ 2018.090832] ? page_cache_prev_miss+0x310/0x310 [ 2018.091546] ? evict_inodes+0x420/0x420 [ 2018.092164] ? generic_write_checks+0x2ad/0x390 [ 2018.092890] __generic_file_write_iter+0x39d/0x5d0 [ 2018.093702] generic_file_write_iter+0xdb/0x230 [ 2018.094415] ? iov_iter_init+0x3c/0x130 [ 2018.095063] new_sync_write+0x42c/0x660 [ 2018.095673] ? new_sync_read+0x6f0/0x6f0 [ 2018.096297] ? __x64_sys_pwrite64+0x201/0x260 [ 2018.096985] ? lock_release+0x680/0x680 [ 2018.097601] ? selinux_file_permission+0x92/0x520 [ 2018.098355] ? security_file_permission+0xb1/0xe0 [ 2018.099105] vfs_write+0x7c0/0xb10 [ 2018.099662] __x64_sys_pwrite64+0x201/0x260 [ 2018.100327] ? ksys_pwrite64+0x1b0/0x1b0 [ 2018.100971] do_syscall_64+0x33/0x40 [ 2018.101576] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2018.102370] RIP: 0033:0x7f5ed339dab7 [ 2018.102940] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2018.105718] RSP: 002b:00007f5ed095ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2018.106881] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed339dab7 [ 2018.107956] RDX: 000000000000009f RSI: 0000000020010000 RDI: 0000000000000004 [ 2018.109041] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffffffffff [ 2018.110135] R10: 0000000000008000 R11: 0000000000000293 R12: 0000000000000004 [ 2018.111220] R13: 0000000000000004 R14: 0000000020000080 R15: 0000000000000000 14:40:07 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = epoll_create1(0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000004c0)={0x28, 0x0, 0xffc}) 14:40:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:40:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') open_tree(r0, &(0x7f0000000340)='./file1/file1\x00', 0x9001) r1 = openat(r0, &(0x7f0000000240)='./file1\x00', 0x0, 0xa4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x4) rmdir(&(0x7f0000000280)='./file1/file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3}, 0x0, 0x0, 0xffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000fd7c49151b38ae4a010000005c8b11f5", @ANYRES32=r2, @ANYRES32=r3, @ANYRESDEC]) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) r4 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6d) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000140), 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1/file0/file0\x00'}) sendfile(r3, r4, 0x0, 0x100000001) 14:40:07 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000000002010400000000000000000100000208000540000000082c0002801400018008000100ac1414bb08000200ac14142a0c000280050001002100000006000340fe010000"], 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x200000c0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) sendfile(r1, r2, 0x0, 0x20d314) [ 2018.393567] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2018.395035] EXT4-fs (loop6): group descriptors corrupted! 14:40:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 2018.563901] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2018.565505] EXT4-fs (loop6): group descriptors corrupted! 14:40:25 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 16) 14:40:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x45}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:40:25 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000c6", @ANYRES16=r0, @ANYBLOB="00022bbd7000fbdbdf2532000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000001}, 0x10) personality(0x400000) io_setup(0x3317, &(0x7f0000000b00)) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2c42d2e5d3ff64f0}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6a}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7035f64d7abfc966a788fde00b750c7cf80434b17515214b"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040084}, 0x48044) io_setup(0x1, &(0x7f0000000000)) 14:40:25 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:40:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000001da) 14:40:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x81, 0x4, 0x7f, 0x8, 0xb1}) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000000)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e1c2, 0x0) 14:40:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) ioctl$FIOCLEX(r5, 0x5451) close(r5) syz_io_uring_setup(0x203, &(0x7f0000000080)={0x0, 0xc70b, 0x1, 0x0, 0x370}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r8, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) write(r2, &(0x7f0000000240)="01", 0x1) openat(r0, &(0x7f0000000000)='./file1\x00', 0x20000, 0x90) sendfile(r0, r1, 0x0, 0x20d314) 14:40:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40602, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}], 0x3) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000019c0)=ANY=[]) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(0x0, &(0x7f00000002c0), &(0x7f0000000240)=ANY=[@ANYBLOB], 0x15, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001e00)={{}, 0x0, 0x1e, @unused=[0x8, 0x9, 0x4], @name="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"}) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x900, 0x0) getdents64(r3, &(0x7f0000001500)=""/125, 0x7d) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x837013, 0x0) unshare(0x48020200) [ 2036.539951] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2036.541505] EXT4-fs (loop6): group descriptors corrupted! [ 2036.567542] FAULT_INJECTION: forcing a failure. [ 2036.567542] name failslab, interval 1, probability 0, space 0, times 0 [ 2036.569319] CPU: 0 PID: 11729 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2036.570421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2036.571739] Call Trace: [ 2036.572176] dump_stack+0x107/0x167 [ 2036.572767] should_fail.cold+0x5/0xa [ 2036.573387] ? create_object.isra.0+0x3a/0xa20 [ 2036.574128] should_failslab+0x5/0x20 [ 2036.574742] kmem_cache_alloc+0x5b/0x310 [ 2036.575401] create_object.isra.0+0x3a/0xa20 [ 2036.576105] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2036.576922] kmem_cache_alloc+0x159/0x310 [ 2036.577585] ? __lockdep_reset_lock+0x180/0x180 [ 2036.578342] xas_alloc+0x336/0x440 [ 2036.578916] xas_create+0x34a/0x10d0 [ 2036.579543] xas_create_range+0x189/0x620 [ 2036.580236] shmem_add_to_page_cache+0x760/0x1130 [ 2036.581022] ? shmem_getattr+0x180/0x180 [ 2036.581710] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 2036.582603] ? shmem_unuse_inode+0xf60/0xf60 [ 2036.583318] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2036.584152] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2036.584985] shmem_write_begin+0xf7/0x1d0 [ 2036.585665] generic_perform_write+0x20a/0x4f0 [ 2036.586427] ? page_cache_prev_miss+0x310/0x310 [ 2036.587175] ? evict_inodes+0x420/0x420 [ 2036.587828] ? generic_write_checks+0x2ad/0x390 [ 2036.588597] __generic_file_write_iter+0x39d/0x5d0 [ 2036.589432] generic_file_write_iter+0xdb/0x230 [ 2036.590219] ? iov_iter_init+0x3c/0x130 [ 2036.590899] new_sync_write+0x42c/0x660 [ 2036.591559] ? new_sync_read+0x6f0/0x6f0 [ 2036.592244] ? __x64_sys_pwrite64+0x201/0x260 [ 2036.592994] ? lock_release+0x680/0x680 [ 2036.593653] ? selinux_file_permission+0x92/0x520 [ 2036.594482] ? security_file_permission+0xb1/0xe0 [ 2036.595269] vfs_write+0x7c0/0xb10 [ 2036.595881] __x64_sys_pwrite64+0x201/0x260 [ 2036.596576] ? ksys_pwrite64+0x1b0/0x1b0 [ 2036.597265] do_syscall_64+0x33/0x40 [ 2036.597864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2036.598730] RIP: 0033:0x7f5ed339dab7 [ 2036.599328] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2036.602396] RSP: 002b:00007f5ed095ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2036.603624] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed339dab7 [ 2036.604815] RDX: 000000000000009f RSI: 0000000020010000 RDI: 0000000000000004 [ 2036.605966] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffffffffff [ 2036.607151] R10: 0000000000008000 R11: 0000000000000293 R12: 0000000000000004 [ 2036.608287] R13: 0000000000000004 R14: 0000000020000080 R15: 0000000000000000 14:40:25 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x2}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f00000002c0)="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", 0x1b9, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 14:40:25 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 2036.792881] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2036.794382] EXT4-fs (loop6): group descriptors corrupted! 14:40:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x505000, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x2c80, 0x8) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x8080, 0x44) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000040)={0x2}) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) r4 = fork() ptrace(0x8, r4) ptrace$getenv(0x4201, r4, 0xba, &(0x7f0000000200)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x2d00, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'}) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x34ec}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) ioctl$FIOCLEX(r8, 0x5451) close(r8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="e1cb93e0db50b54370e0deafddadb794ba972e1fc2f6d3e4e29a0d74ddfdb70c94987effb8b652903eb32f8c2ae7b5ad2d88691af3660b44953310651a13e3fda8a42adbf94808001c00", @ANYRES32=r9, @ANYBLOB="0c00480004000000000000001400330000000000000000000000ffff640101020000"], 0x13ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 14:40:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000281) 14:40:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x13f8, &(0x7f0000000080)={0x0, 0x2f8d, 0x20, 0x3, 0x32a, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) ioctl$FIOCLEX(r7, 0x5451) close(r7) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x4, {0x0, r7}, 0x119fc01, 0x4, 0x1, {0x0, 0x0, r8}}, 0x8f) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000000)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x20, 0x0, 0xffc}) ioctl$TIOCSBRK(r0, 0x5427) 14:40:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000300) 14:40:43 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:40:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x40) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:40:43 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 17) 14:40:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x49}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:40:43 executing program 4: r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) mmap(&(0x7f00002a9000/0x1000)=nil, 0x1000, 0x2000000, 0x1f012, r1, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = fsmount(0xffffffffffffffff, 0x0, 0xf8) r4 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) ioctl$FIOCLEX(r7, 0x5451) close(r7) sendfile(r2, r7, &(0x7f0000000080)=0x4, 0xfffffffffffffff8) pread64(r0, &(0x7f0000000000)=""/57, 0x39, 0x0) 14:40:43 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) ioctl$FIOCLEX(r2, 0x5451) close(r2) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000004c0)={0x0, 0x26, 0x4f9}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x482a80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000fed000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="d2dd3e4d5783b33a7b68d0866f2615c528318ef76e4fef0ae2b3e377c4f7f0322b42ebae74b9eed64f9ebd1a62827a7edf61ba35c15f97efc0bdb44ba0584e211a417385b711aee7cf7f8be76889e2f9f2664a8f7959a0dc1e19a335f269dac4ae80f8fad2a48573e765982acc74361f5ed08ca548246515d7cc62612c48718480d63c78cf478542286a6a4bc717ba7ab5a212ecf72515780751e0a53afc2df3742ac5", 0xa3, r3}, 0x68) r4 = openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x200000, 0x40) openat$cgroup_ro(r4, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) 14:40:43 executing program 7: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x4000010, r1, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)='./file0\x00', 0x80, 0x400, 0x1, {0x0, r3}}, 0xb74e) write$selinux_attr(r0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xd020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FIOCLEX(r6, 0x5451) close(r6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x76b}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000280)=0x3, 0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="940400001c0000022cbd7000010000003ce400060000000000000000000000ffff64010101fe8800000000000000000000000000014e23007f4e2100010200a08067000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="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"], 0x494}}, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=0x8000, 0x81, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}, 0x200000}], 0x7ffff000, 0x0) [ 2054.263610] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2054.265520] EXT4-fs (loop6): group descriptors corrupted! [ 2054.276390] FAULT_INJECTION: forcing a failure. [ 2054.276390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2054.278691] CPU: 0 PID: 11779 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2054.280044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2054.281649] Call Trace: [ 2054.282176] dump_stack+0x107/0x167 [ 2054.282901] should_fail.cold+0x5/0xa [ 2054.283667] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2054.284721] ? shmem_write_begin+0xf7/0x1d0 [ 2054.285606] ? shmem_write_begin+0x100/0x1d0 [ 2054.286336] generic_perform_write+0x279/0x4f0 [ 2054.287084] ? page_cache_prev_miss+0x310/0x310 [ 2054.287829] ? evict_inodes+0x420/0x420 [ 2054.288483] ? generic_write_checks+0x2ad/0x390 [ 2054.289234] __generic_file_write_iter+0x39d/0x5d0 [ 2054.290028] generic_file_write_iter+0xdb/0x230 [ 2054.290780] ? iov_iter_init+0x3c/0x130 [ 2054.291422] new_sync_write+0x42c/0x660 [ 2054.292065] ? new_sync_read+0x6f0/0x6f0 [ 2054.292721] ? __x64_sys_pwrite64+0x201/0x260 [ 2054.293448] ? lock_release+0x680/0x680 [ 2054.294090] ? selinux_file_permission+0x92/0x520 [ 2054.294881] ? security_file_permission+0xb1/0xe0 [ 2054.295669] vfs_write+0x7c0/0xb10 [ 2054.296254] __x64_sys_pwrite64+0x201/0x260 [ 2054.296949] ? ksys_pwrite64+0x1b0/0x1b0 [ 2054.297618] do_syscall_64+0x33/0x40 [ 2054.298239] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2054.299066] RIP: 0033:0x7f5ed339dab7 [ 2054.299670] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2054.302632] RSP: 002b:00007f5ed095ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2054.303868] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed339dab7 [ 2054.305023] RDX: 000000000000009f RSI: 0000000020010000 RDI: 0000000000000004 [ 2054.306187] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffffffffff [ 2054.307342] R10: 0000000000008000 R11: 0000000000000293 R12: 0000000000000004 [ 2054.308484] R13: 0000000000000004 R14: 0000000020000080 R15: 0000000000000000 [ 2054.310486] kauditd_printk_skb: 40 callbacks suppressed [ 2054.310504] audit: type=1400 audit(1722004843.308:632): avc: denied { create } for pid=11777 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 [ 2054.321552] audit: type=1400 audit(1722004843.313:633): avc: denied { map } for pid=11777 comm="syz-executor.7" path="socket:[41817]" dev="sockfs" ino=41817 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 [ 2054.326944] audit: type=1400 audit(1722004843.314:634): avc: denied { read } for pid=11777 comm="syz-executor.7" path="socket:[41817]" dev="sockfs" ino=41817 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 [ 2054.337663] audit: type=1400 audit(1722004843.315:635): avc: denied { connect } for pid=11777 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 [ 2054.351885] audit: type=1400 audit(1722004843.353:636): avc: denied { write } for pid=11777 comm="syz-executor.7" laddr=fe80::b lport=55137 faddr=fe80:: scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 14:40:43 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:40:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) syz_io_uring_setup(0x203, &(0x7f0000000080)={0x0, 0xc70b, 0x1, 0x0, 0x370}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer, 0x7ff) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r6, &(0x7f0000000040)={0x410000, 0x1b0, 0x4}, &(0x7f0000000080)='./file1\x00', 0x18, 0x0, 0x23456}, 0x7fffffff) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) [ 2054.440175] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2054.441951] EXT4-fs (loop6): group descriptors corrupted! 14:40:43 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:40:43 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 18) 14:40:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x2c68, &(0x7f0000000080)={0x0, 0xdf48, 0x2, 0x3, 0x3db, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4970, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x155}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x10201, 0x0) io_uring_enter(r7, 0x130, 0x681b, 0x2, &(0x7f0000000400)={[0x401]}, 0x8) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) ioctl$FIOCLEX(r8, 0x5451) close(r8) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000180)="67d6706fbb98c4465bd07816565771e7eea2646cc5586512e17f0d362371af1bab34077fa48ffbab8a03a10fa8e57a6b40c5cea6c289a14402990185ab901a", 0x3f}, 0x5) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) ioctl$FIOCLEX(r9, 0x5451) close(r9) ioctl$VT_DISALLOCATE(r9, 0x5608) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) [ 2054.611120] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2054.612841] EXT4-fs (loop6): group descriptors corrupted! 14:40:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x4a}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 2054.634476] FAULT_INJECTION: forcing a failure. [ 2054.634476] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2054.636589] CPU: 0 PID: 11807 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2054.637758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2054.639070] Call Trace: 14:40:43 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) dup2(r2, 0xffffffffffffffff) [ 2054.639500] dump_stack+0x107/0x167 [ 2054.640174] should_fail.cold+0x5/0xa [ 2054.640791] __alloc_pages_nodemask+0x182/0x600 [ 2054.641532] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2054.642478] ? lock_downgrade+0x6d0/0x6d0 [ 2054.643136] ? lock_acquire+0x197/0x470 [ 2054.643789] alloc_pages_vma+0xbb/0x410 [ 2054.644430] shmem_alloc_page+0x10f/0x1e0 [ 2054.645083] ? shmem_init_inode+0x20/0x20 [ 2054.645773] ? percpu_counter_add_batch+0x8b/0x140 [ 2054.646574] ? __vm_enough_memory+0x184/0x360 [ 2054.647298] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2054.648159] ? shmem_unuse_inode+0xf60/0xf60 [ 2054.648862] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2054.649676] shmem_write_begin+0xf7/0x1d0 [ 2054.650348] generic_perform_write+0x20a/0x4f0 [ 2054.651112] ? __mnt_drop_write_file+0x9/0x70 [ 2054.651828] ? page_cache_prev_miss+0x310/0x310 [ 2054.652571] ? evict_inodes+0x420/0x420 [ 2054.653210] ? generic_write_checks+0x2ad/0x390 [ 2054.653957] __generic_file_write_iter+0x39d/0x5d0 [ 2054.654761] generic_file_write_iter+0xdb/0x230 [ 2054.655481] ? iov_iter_init+0x3c/0x130 [ 2054.656127] new_sync_write+0x42c/0x660 [ 2054.656766] ? new_sync_read+0x6f0/0x6f0 [ 2054.657415] ? __x64_sys_pwrite64+0x201/0x260 [ 2054.658141] ? lock_release+0x680/0x680 [ 2054.658783] ? selinux_file_permission+0x92/0x520 [ 2054.659552] ? security_file_permission+0xb1/0xe0 [ 2054.660322] vfs_write+0x7c0/0xb10 [ 2054.660905] __x64_sys_pwrite64+0x201/0x260 [ 2054.661591] ? ksys_pwrite64+0x1b0/0x1b0 [ 2054.662268] do_syscall_64+0x33/0x40 [ 2054.662859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2054.663666] RIP: 0033:0x7f5ed339dab7 [ 2054.664259] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2054.667147] RSP: 002b:00007f5ed095ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2054.668353] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed339dab7 [ 2054.669488] RDX: 000000000000001a RSI: 0000000020010900 RDI: 0000000000000004 [ 2054.670632] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffffffffff [ 2054.671764] R10: 000000000000b800 R11: 0000000000000293 R12: 0000000000000004 [ 2054.672888] R13: 0000000000000004 R14: 0000000020000098 R15: 0000000000000001 14:40:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) recvmsg$unix(r0, &(0x7f00000008c0)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000400)=""/24, 0x18}, {&(0x7f0000000440)=""/45, 0x2d}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/123, 0x7b}, {&(0x7f0000000740)=""/90, 0x5a}, {&(0x7f0000000940)=""/25, 0x19}], 0x6, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x80002000) fchownat(r1, &(0x7f0000000900)='./file1\x00', 0xee00, 0x0, 0x1000) sendmsg$sock(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x2}, 0x2}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)="4b387c25dc45e5d4b341db9ea4707ff799f42f961d835ed41c96aecaf40690090db88108360610e4bd71a24762fbdbfa36d4335582f10b8367b193c47ecaf64978553031c4150bf2d3e7e233e697819417ec882cabb36d639c74c0f374ff07000000000000cfdc3bd2b4bc70b7fe493a7f9e88fecebdaa6e31a06bb921d476dc6489166af7b6a77906eb497f3ab77289332fae70e7adddf17bf8a61115b2", 0x9e}, {&(0x7f0000000500)="9dca71685ed4fdb933cca275cfc4722e1a86affbba70c498a11299ab53b81d97c9e74a32673cba2ed1a23f024beccedb718edea79950002e05c444a4e1331f8830155cfba21d9e1f0d88b4767a563a5715f7ac0ea8b59f010d5126b9a3fe2343ba087aad24f2dc29c53331e86f97bbe3f2aa25404b4b38cc71f6e3d805fa823bf3d61c5c190ab7eb0fcf03ba2b0e3e968adb454a9ee4f68a6c21d239eddabcc81c594df982f94f5b833eea4853bda5c12a66c3e306377355c6369a10e6ee6c4c0f10d7e387f4e164dcf6b7b9e588183e0ff87d274e5d9c199b655d486d6f", 0xde}], 0x2, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xc4}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}], 0x78}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x84101, 0xf8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x88) read(r0, &(0x7f0000000000)=""/161, 0xa1) write(r3, &(0x7f0000000240)="01", 0x1) sendfile(r0, r2, 0x0, 0x20d314) 14:40:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000500) 14:40:43 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 2054.874808] isofs_fill_super: get root inode failed 14:40:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x20000, 0x40) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) [ 2054.940998] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2054.941890] EXT4-fs (loop6): group descriptors corrupted! 14:41:00 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 19) 14:41:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000600) 14:41:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x4b}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:41:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) fcntl$addseals(r0, 0x409, 0x2) syz_io_uring_setup(0x2ee5, &(0x7f0000000080)={0x0, 0x4aa3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) ioctl$FIOCLEX(r5, 0x5451) close(r5) fallocate(r5, 0x10, 0x3, 0x3ff) 14:41:00 executing program 7: mknod$loop(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x307e40, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="3d7da3e89e13eebd0ed285d2b6abefbf78c19a172960f492a0ec23c2817186cdea965fbba927237b6091aee32ca0bc67df1c7b00000000", @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f26a8fd95d4a6909f0200ade5da3e824c1c08e25bee28f818845b366d5c745b7d5e", @ANYRESHEX, @ANYBLOB=',\x00']) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/253, 0xfd}], 0x1, 0x32e97d75, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x202, &(0x7f0000000300)={&(0x7f00000005c0)="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", 0x1000}) 14:41:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:41:00 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) r1 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x142) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000001c0)={0x0, 0xc43, @start={0x0, 0x0, "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", "4cbd5c10cd5635fd8b8fad0e5417caf6148a02c96e87812e691ab6871dcf398160c67a0ade21cbed92f360be8b9eb12ce9d1dae95358def2a60f43af439e5a21cb1967435af7def24f6f0fe241b12d943e428ad3b7b60c57c0e982f71055d13dcfb7459ebfb315d61c95ebd7ab4b758c7ae9b6d2c6bdfb508dc6e04d1623659290f303b11f6a4cbe7eecc593772b7017c19512c6fb133bdb7dccc943eaaaac0aecc219153041aba5a8ac8a072a52e711451587c2ca4faf71f03cb2f00ab458fced8e9f9ca0a8bd60afb8c6f6355aa1a87ab19e88e954c911b2052a441db396290f02778da26a895cca6ad24e8ab78d49dfdf40dd8043656fec81df5f30948cffbae5e2913b8515542e4878f0123bc65afbf83f83aa724094ee993cc8da320bbe61bbf39a7bf2393c758dc0923d8326d2946b9f6369374a74af06b0b15e0fa51da79f235082894c5d29c8566e50a4e072271aa70789bebe341e777f9c3a3b32e9b25d26cd67a1414a2e698e76e6eafee56001b4fbb305a368136857bb10cd29979fe50d8150bdded16408db1da029df5f293d66db9c829be665c5c3e8654c193af752da191a83436d0fda883c5546ff87b65e21be18d9fe224dccf4a2417e9d6662ce9e5e894ce026167fb194650d4c577da2741e1a2d798a5cb80b8ffc2261fc76ee334318422babdfbd15f4023c7a2daa42300ea2e94911a51416bb9edb015ae05adbfe0183c0371f5e7e512d9dc3736698558a578af3ab3965e4a01a5173d4592ebd70f8e19c37dcecbd704651a6699e5e1053d2d1dd0ade0b33fee86a27a6ad339b83ad54aa914479d09cf8891e1db94b1782a822f96d4942b397ae50e42d30832b755ebfbc4ac3cc85d4b404314774b5279455e9d0aa65e5f0ab451f6c5facdb0c931c7ff3355c7327e259c1fa13697ace61d92fb085e0a8b81fbcfb4bab789180c0d27a74eb5675a8049993e1577c812592cf27db035691d199912784cf3ffcfde0712eb01ab839a49fedb70b185018a1641b849d6decf7ccc7b7cba0dc4b8154948967ebf877224c82ba6d3a239289b52f57541da877a900ff9fae4667f0c45761504e8ff2be301c410d86ed466f671ca54eb0f5b174d14e8806869ab1010535f53214eba363005c19fabcfaee86f7b6a6c5c2f34f3d0731db23dc7bb66b15ecb2bd5b2da874b059beb576b30686ed101bc712c3961324d800318589d8029cdd5307be7728b5c133c6d374abe0266f06d5e89e53aae3ff945f06bfc29302684fa2868e25463826772d2e6bf201ca4b3f75ca66f3a23c0c2585f1ffdfa1b38dca51eb268cd94d361608c39d6d72c520980a7f91af9362d611e240cc7d94b5a34f8c331172096ce508b884900ce5d0f3f7b1e61596c3830ff4b46d174eaafd5e99f122fa550276c8146cf1972ac919b25cf016244d51bd3a0ab1cfd3a73175"}, [0x7, 0x81, 0x2, 0x2, 0x6, 0x1, 0x62ec, 0x7, 0x3, 0x52a7, 0x2, 0x6, 0x200, 0x6, 0x1, 0xffffffffffff45e2, 0x6, 0x0, 0xa8d, 0x2, 0x0, 0x8, 0x7, 0xd36, 0x3, 0x1, 0x0, 0x97b, 0x6, 0x5, 0x3, 0x2, 0x1, 0x2, 0x3f, 0x9, 0x1, 0x7, 0x4, 0x7096, 0xdb, 0x80000000, 0xff, 0x2, 0x6, 0x2, 0xffffffffffff5dd1, 0x3, 0xf8, 0x7f, 0x2, 0x5, 0x9, 0x4, 0x8738, 0x100, 0x1b2d, 0x2, 0xe410, 0x80000000, 0x0, 0x1, 0x9, 0x1]}) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x7, 0x6, 0x6c, 0x1fd, 0x20, "166b39e2f23358f7f931598fc5461e2f8f234b", 0x9, 0x3483}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0xeb, 0x0, 0xffc}) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000080)={0x1, 0x1000, 0xfffff800, 0x2, 0x9, "e640ec19b80316dc8ca1b2ecb7c68118e996d9", 0xff, 0x7}) [ 2071.802523] FAULT_INJECTION: forcing a failure. [ 2071.802523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2071.804675] CPU: 0 PID: 11862 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2071.805864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2071.807193] Call Trace: [ 2071.807626] dump_stack+0x107/0x167 [ 2071.808247] should_fail.cold+0x5/0xa [ 2071.808869] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2071.809727] ? shmem_write_begin+0xf7/0x1d0 [ 2071.810427] ? shmem_write_begin+0x100/0x1d0 [ 2071.811138] generic_perform_write+0x279/0x4f0 [ 2071.811882] ? page_cache_prev_miss+0x310/0x310 [ 2071.812627] ? evict_inodes+0x420/0x420 [ 2071.813270] ? generic_write_checks+0x2ad/0x390 [ 2071.814026] __generic_file_write_iter+0x39d/0x5d0 [ 2071.814823] generic_file_write_iter+0xdb/0x230 [ 2071.815564] ? iov_iter_init+0x3c/0x130 [ 2071.816201] new_sync_write+0x42c/0x660 [ 2071.816842] ? new_sync_read+0x6f0/0x6f0 [ 2071.817494] ? __x64_sys_pwrite64+0x201/0x260 [ 2071.818221] ? lock_release+0x680/0x680 [ 2071.818870] ? selinux_file_permission+0x92/0x520 [ 2071.819649] ? security_file_permission+0xb1/0xe0 [ 2071.820430] vfs_write+0x7c0/0xb10 [ 2071.821013] __x64_sys_pwrite64+0x201/0x260 [ 2071.821713] ? ksys_pwrite64+0x1b0/0x1b0 [ 2071.822389] do_syscall_64+0x33/0x40 [ 2071.822988] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2071.823809] RIP: 0033:0x7f5ed339dab7 [ 2071.824408] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2071.827321] RSP: 002b:00007f5ed095ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2071.828525] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed339dab7 [ 2071.829657] RDX: 000000000000001a RSI: 0000000020010900 RDI: 0000000000000004 [ 2071.830792] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffffffffffff [ 2071.831925] R10: 000000000000b800 R11: 0000000000000293 R12: 0000000000000004 [ 2071.833055] R13: 0000000000000004 R14: 0000000020000098 R15: 0000000000000001 [ 2071.876686] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2071.878132] EXT4-fs (loop6): group descriptors corrupted! 14:41:00 executing program 2: syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) ioctl$FIOCLEX(r2, 0x5451) close(r2) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000002b48bcafe831fd65d80d4b1575d4a0ad1e008375758cc81334ce7def3c16c3091a492cfce85740c3165e09ee81bf97a6cbd434605cd53573331eab7ccf768509", @ANYRES16=0x0, @ANYBLOB="000127bd700024f4152e2aa3a9050800040002000000080006000100000008000400ffffffff0800060000000100023b4ec328c607f09a154fa2ea7a2f8deb963c97c58a88acb29fe8d310dcf58d0950573313a27087ec55c5d0f3973fabb94b18b035486c38cdc2b5fcaf4d0260fa528d403d0e9b22c26632b30592"], 0x34}, 0x1, 0x0, 0x0, 0x40488c1}, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000240)=""/105) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:41:01 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x0, 0x0, 0x80, 0x0, 0x1}, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0x2000003) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r9 = pidfd_getfd(0xffffffffffffffff, r8, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r9, &(0x7f0000000580)={0x30201, 0x20, 0x2}, &(0x7f00000005c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r10}}, 0xff) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x6000, @fd=r7, 0x78, 0x8, 0x9700, 0x8, 0x0, {0x3, r10}}, 0xffff) ioctl$FIOCLEX(r6, 0x5451) close(r6) futimesat(r6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{0x77359400}}) write(r3, &(0x7f0000000240)="01", 0x1) sendfile(r1, r2, 0x0, 0x20d314) 14:41:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:41:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 20) 14:41:01 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3c, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)={0x0, 0x10, '\x00', [@enc_lim, @ra, @generic={0x0, 0x29, "df8bfd664029436259ac0f410120c9e21a43958d00cbdffeaf68e7ca63dcd3056a837828f17602ddfe"}, @ra, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @jumbo, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}]}, 0x88) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r0}, {@void, @max}}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) [ 2072.179678] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2072.181251] EXT4-fs (loop6): group descriptors corrupted! 14:41:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x4c}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 2072.261709] FAULT_INJECTION: forcing a failure. [ 2072.261709] name failslab, interval 1, probability 0, space 0, times 0 [ 2072.263583] CPU: 0 PID: 11896 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2072.264689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2072.266001] Call Trace: [ 2072.266446] dump_stack+0x107/0x167 [ 2072.267034] should_fail.cold+0x5/0xa [ 2072.267647] ? getname_flags.part.0+0x50/0x4f0 [ 2072.268387] should_failslab+0x5/0x20 [ 2072.269001] kmem_cache_alloc+0x5b/0x310 [ 2072.269652] ? new_sync_write+0x499/0x660 [ 2072.270334] getname_flags.part.0+0x50/0x4f0 [ 2072.271047] getname+0x8e/0xd0 [ 2072.271567] do_sys_openat2+0xf9/0x4d0 [ 2072.272198] ? build_open_flags+0x6f0/0x6f0 [ 2072.272914] ? rcu_read_lock_any_held+0x75/0xa0 [ 2072.273671] __x64_sys_openat+0x13f/0x1f0 [ 2072.274347] ? __ia32_sys_open+0x1c0/0x1c0 [ 2072.275043] do_syscall_64+0x33/0x40 [ 2072.275645] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2072.276463] RIP: 0033:0x7f5ed339da04 [ 2072.277060] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2072.279986] RSP: 002b:00007f5ed095fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2072.281207] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed339da04 [ 2072.282354] RDX: 0000000000000002 RSI: 00007f5ed0960000 RDI: 00000000ffffff9c [ 2072.283491] RBP: 00007f5ed0960000 R08: 0000000000000000 R09: ffffffffffffffff [ 2072.284626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2072.285758] R13: 0000000000000004 R14: 00000000200000b0 R15: 0000000000000002 14:41:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x4f}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:41:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 21) 14:41:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x1, 0x2007, @fd_index=0x6, 0x797e, &(0x7f0000000140)=[{&(0x7f0000000100)="025357b27becc684f6969fffbfd35e79db6becd9f13fc7d49a5b8cdd645ce5b7faae1ee72d5633", 0x27}], 0x1, 0x0, 0x0, {0x3}}, 0x0) ioctl$FIOCLEX(r8, 0x5451) close(r8) ioctl$EVIOCGABS3F(r8, 0x8018457f, &(0x7f0000000080)=""/39) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) ioctl$FIOCLEX(r5, 0x5451) close(r5) r9 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) io_uring_enter(r9, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r9, {0x100}}, './file1\x00'}) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:41:16 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:41:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000700) [ 2087.851498] FAULT_INJECTION: forcing a failure. [ 2087.851498] name failslab, interval 1, probability 0, space 0, times 0 [ 2087.853407] CPU: 0 PID: 11912 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2087.854522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2087.855837] Call Trace: [ 2087.856266] dump_stack+0x107/0x167 [ 2087.856844] should_fail.cold+0x5/0xa [ 2087.857454] ? create_object.isra.0+0x3a/0xa20 [ 2087.858178] should_failslab+0x5/0x20 [ 2087.858792] kmem_cache_alloc+0x5b/0x310 [ 2087.859436] ? __generic_file_write_iter+0x1a4/0x5d0 [ 2087.860242] create_object.isra.0+0x3a/0xa20 [ 2087.860938] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2087.861745] kmem_cache_alloc+0x159/0x310 [ 2087.862424] getname_flags.part.0+0x50/0x4f0 [ 2087.863130] getname+0x8e/0xd0 [ 2087.863655] do_sys_openat2+0xf9/0x4d0 [ 2087.864276] ? build_open_flags+0x6f0/0x6f0 [ 2087.864992] ? rcu_read_lock_any_held+0x75/0xa0 [ 2087.865737] __x64_sys_openat+0x13f/0x1f0 [ 2087.866408] ? __ia32_sys_open+0x1c0/0x1c0 [ 2087.867102] do_syscall_64+0x33/0x40 [ 2087.867704] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2087.868525] RIP: 0033:0x7f5ed339da04 [ 2087.869122] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2087.872006] RSP: 002b:00007f5ed095fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2087.873208] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed339da04 [ 2087.874334] RDX: 0000000000000002 RSI: 00007f5ed0960000 RDI: 00000000ffffff9c [ 2087.875480] RBP: 00007f5ed0960000 R08: 0000000000000000 R09: ffffffffffffffff [ 2087.876609] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2087.877740] R13: 0000000000000004 R14: 00000000200000b0 R15: 0000000000000002 14:41:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x40800) connect$unix(r2, &(0x7f0000001140)=@abs, 0x6e) sendfile(r1, r0, 0x0, 0xb052) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() getpid() r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x7fffffff, 0x40) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000180)=""/243) r5 = socket(0x1e, 0x0, 0x8000) dup2(r0, r2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f00000000c0)) 14:41:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$FIOCLEX(r4, 0x5451) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="010000001c000000180000007b880c1d435f4eeb242b09dcc1b71bc31bbdb148ecbc3c3cdca61f6a45e0fdff1e0b5e24dea98780b45d9bd25436c4c7b0cc322ef33eed49ecc81cafd8d62e17626e062afee0c3565fbbdbe04c8b422e80df66db4785045d245e45e780767f44006ac45b6af884ce154079aed337097e3bcd508017f4ac718121385e0bde7dc3d68ea66ab1cd9de5b53cc0489381ddf58c14a70815036b023ae49bf8d4b0", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) close(r5) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x45, 0x3, 0x2e20}) 14:41:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x80, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 2087.902127] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2087.903132] EXT4-fs (loop6): group descriptors corrupted! 14:41:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000", 0xc, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:41:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) write(r1, &(0x7f0000000000)="83cceedc027e88a6ec7cd758239e37508ef258d6bd45adde075086875d9e78abdf334d75267e1ef15959d0f5e9d9e9139c02d19d00759253f7e0c13c464f919c203606c387b7a6c51f03049415679dc753bf92042b21e57d9f6d13f2506a2001b0e5125f9d6a3e5f06d1d8c03f62ee5c1524215375fa6c6e0de684b56b713c4e6d302e33e08228e26005290e16ef", 0x8e) sendfile(r0, r1, 0x0, 0x20d314) 14:41:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000004c0)={0x8, 0x0, 0xffc}) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) ioctl$FIOCLEX(r6, 0x5451) close(r6) ioctl$KDENABIO(r6, 0x4b36) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rpc\x00') 14:41:17 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x40) lstat(0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x48, 0x0, 0x0, 0x4308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x0, 0x402, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x4ed382, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$FIOCLEX(r4, 0x5451) close(r4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="00000000001700002e2f6669c2dd9189"]) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) io_submit(r1, 0x0, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61, 0x6}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00210c0000fc0000000000000400020008000c0000000000"], 0x1c}}, 0x0) [ 2088.115658] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:41:17 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 22) 14:41:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 2088.187685] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:41:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000900) 14:41:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400", 0x6, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:41:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x51}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 2088.252949] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2088.253828] EXT4-fs (loop6): group descriptors corrupted! [ 2088.265721] FAULT_INJECTION: forcing a failure. [ 2088.265721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2088.267728] CPU: 0 PID: 11967 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2088.268844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2088.270168] Call Trace: [ 2088.270611] dump_stack+0x107/0x167 [ 2088.271205] should_fail.cold+0x5/0xa [ 2088.271834] strncpy_from_user+0x34/0x470 [ 2088.272512] getname_flags.part.0+0x95/0x4f0 [ 2088.273227] getname+0x8e/0xd0 [ 2088.273752] do_sys_openat2+0xf9/0x4d0 [ 2088.274389] ? build_open_flags+0x6f0/0x6f0 [ 2088.275109] ? rcu_read_lock_any_held+0x75/0xa0 [ 2088.275854] __x64_sys_openat+0x13f/0x1f0 [ 2088.276524] ? __ia32_sys_open+0x1c0/0x1c0 [ 2088.277249] do_syscall_64+0x33/0x40 [ 2088.277870] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2088.278730] RIP: 0033:0x7f5ed339da04 [ 2088.279353] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2088.282391] RSP: 002b:00007f5ed095fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2088.283662] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed339da04 [ 2088.284840] RDX: 0000000000000002 RSI: 00007f5ed0960000 RDI: 00000000ffffff9c [ 2088.286027] RBP: 00007f5ed0960000 R08: 0000000000000000 R09: ffffffffffffffff [ 2088.287216] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2088.288398] R13: 0000000000000004 R14: 00000000200000b0 R15: 0000000000000002 14:41:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x31, "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"}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:41:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffff, 0x4d}}, './file1\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8000, 0x238081) faccessat2(r2, &(0x7f0000000140)='./file1\x00', 0x6, 0x1300) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)="01", 0x1) openat(r0, &(0x7f0000000000)='./file1\x00', 0x800, 0x120) sendfile(r0, r3, 0x0, 0x20d314) 14:41:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x40800) connect$unix(r2, &(0x7f0000001140)=@abs, 0x6e) sendfile(r1, r0, 0x0, 0xb052) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() getpid() r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x7fffffff, 0x40) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000180)=""/243) r5 = socket(0x1e, 0x0, 0x8000) dup2(r0, r2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f00000000c0)) [ 2102.668910] FAULT_INJECTION: forcing a failure. [ 2102.668910] name failslab, interval 1, probability 0, space 0, times 0 [ 2102.670192] CPU: 0 PID: 11984 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2102.670948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2102.671840] Call Trace: [ 2102.672135] dump_stack+0x107/0x167 [ 2102.672534] should_fail.cold+0x5/0xa [ 2102.672952] ? __alloc_file+0x21/0x320 [ 2102.673380] should_failslab+0x5/0x20 [ 2102.673796] kmem_cache_alloc+0x5b/0x310 [ 2102.674249] __alloc_file+0x21/0x320 [ 2102.674657] alloc_empty_file+0x6d/0x170 [ 2102.675096] path_openat+0xe6/0x2770 [ 2102.675511] ? __lock_acquire+0x1657/0x5b00 [ 2102.675983] ? path_lookupat+0x860/0x860 [ 2102.676429] ? perf_trace_lock+0xac/0x490 [ 2102.676872] ? SOFTIRQ_verbose+0x10/0x10 [ 2102.677322] ? find_held_lock+0x2c/0x110 [ 2102.677772] ? __lockdep_reset_lock+0x180/0x180 [ 2102.678286] do_filp_open+0x190/0x3e0 [ 2102.678709] ? may_open_dev+0xf0/0xf0 [ 2102.679133] ? alloc_fd+0x2e7/0x670 [ 2102.679526] ? lock_downgrade+0x6d0/0x6d0 [ 2102.679968] ? do_raw_spin_lock+0x121/0x260 [ 2102.680441] ? rwlock_bug.part.0+0x90/0x90 [ 2102.680913] ? _raw_spin_unlock+0x1a/0x30 [ 2102.681360] ? alloc_fd+0x2e7/0x670 [ 2102.681768] do_sys_openat2+0x171/0x4d0 [ 2102.682203] ? build_open_flags+0x6f0/0x6f0 [ 2102.682699] ? rcu_read_lock_any_held+0x75/0xa0 [ 2102.683208] __x64_sys_openat+0x13f/0x1f0 [ 2102.683658] ? __ia32_sys_open+0x1c0/0x1c0 [ 2102.684129] do_syscall_64+0x33/0x40 [ 2102.684532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2102.685088] RIP: 0033:0x7f5ed339da04 [ 2102.685490] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2102.687458] RSP: 002b:00007f5ed095fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2102.688265] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed339da04 [ 2102.689015] RDX: 0000000000000002 RSI: 00007f5ed0960000 RDI: 00000000ffffff9c [ 2102.689772] RBP: 00007f5ed0960000 R08: 0000000000000000 R09: ffffffffffffffff [ 2102.690527] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2102.691304] R13: 0000000000000004 R14: 00000000200000b0 R15: 0000000000000002 14:41:31 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 23) 14:41:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400", 0x6, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:41:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0) move_mount(r5, &(0x7f0000000000)='./file1\x00', r6, &(0x7f0000000080)='./file1\x00', 0x0) 14:41:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$FIOCLEX(r4, 0x5451) close(r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x4a) ioctl$TIOCCBRK(r4, 0x5428) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x1, 0x0, 0xffc}) 14:41:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000a00) 14:41:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x52}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:41:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x40800) connect$unix(r2, &(0x7f0000001140)=@abs, 0x6e) sendfile(r1, r0, 0x0, 0xb052) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() getpid() r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x7fffffff, 0x40) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000180)=""/243) r5 = socket(0x1e, 0x0, 0x8000) dup2(r0, r2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f00000000c0)) [ 2102.708357] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2102.709386] EXT4-fs (loop6): group descriptors corrupted! 14:41:31 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 24) [ 2102.804971] FAULT_INJECTION: forcing a failure. [ 2102.804971] name failslab, interval 1, probability 0, space 0, times 0 [ 2102.807020] CPU: 1 PID: 12007 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2102.808215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2102.809403] Call Trace: [ 2102.809791] dump_stack+0x107/0x167 [ 2102.810319] should_fail.cold+0x5/0xa [ 2102.810896] ? create_object.isra.0+0x3a/0xa20 [ 2102.811673] should_failslab+0x5/0x20 [ 2102.812227] kmem_cache_alloc+0x5b/0x310 [ 2102.812821] create_object.isra.0+0x3a/0xa20 [ 2102.813464] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2102.814200] kmem_cache_alloc+0x159/0x310 [ 2102.814821] __alloc_file+0x21/0x320 [ 2102.815363] alloc_empty_file+0x6d/0x170 [ 2102.815954] path_openat+0xe6/0x2770 [ 2102.816498] ? __lock_acquire+0x1657/0x5b00 [ 2102.817135] ? path_lookupat+0x860/0x860 [ 2102.817725] ? perf_trace_lock+0xac/0x490 [ 2102.818326] ? SOFTIRQ_verbose+0x10/0x10 [ 2102.818914] ? find_held_lock+0x2c/0x110 [ 2102.819510] ? __lockdep_reset_lock+0x180/0x180 [ 2102.820192] do_filp_open+0x190/0x3e0 [ 2102.820742] ? may_open_dev+0xf0/0xf0 [ 2102.821302] ? alloc_fd+0x2e7/0x670 [ 2102.821829] ? lock_downgrade+0x6d0/0x6d0 [ 2102.822433] ? do_raw_spin_lock+0x121/0x260 [ 2102.823065] ? rwlock_bug.part.0+0x90/0x90 [ 2102.823687] ? _raw_spin_unlock+0x1a/0x30 [ 2102.824285] ? alloc_fd+0x2e7/0x670 [ 2102.824827] do_sys_openat2+0x171/0x4d0 [ 2102.825424] ? build_open_flags+0x6f0/0x6f0 [ 2102.826061] ? rcu_read_lock_any_held+0x75/0xa0 [ 2102.826758] __x64_sys_openat+0x13f/0x1f0 [ 2102.827361] ? __ia32_sys_open+0x1c0/0x1c0 [ 2102.827993] do_syscall_64+0x33/0x40 [ 2102.828535] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2102.829276] RIP: 0033:0x7f5ed339da04 [ 2102.829820] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2102.832435] RSP: 002b:00007f5ed095fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2102.833529] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed339da04 [ 2102.834555] RDX: 0000000000000002 RSI: 00007f5ed0960000 RDI: 00000000ffffff9c [ 2102.835586] RBP: 00007f5ed0960000 R08: 0000000000000000 R09: ffffffffffffffff [ 2102.836607] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2102.837626] R13: 0000000000000004 R14: 00000000200000b0 R15: 0000000000000002 14:41:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400", 0x6, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:41:31 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) sendmsg$nl_generic(r0, &(0x7f0000002740)={&(0x7f0000000480), 0xc, &(0x7f0000002700)={&(0x7f00000004c0)={0x2224, 0x3c, 0x800, 0x70bd26, 0x25dfdbfb, {0x1}, [@nested={0x104b, 0x70, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="624017352a2a086870027eec5bb68b8d42cbf6aa1662db5016cd82babc38935b5511512fc5c5ca5351f75ebdc0fc87c936d6592f63af7eeb917f52c1d9e30b", @generic="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"]}, @generic="5ef15443bf7bbfe647fc61abeb82335e3ca162dfa9ff25a27ebb82bad6c7c7d74ef5509bd36c3a5bb3", @nested={0x18e, 0x6e, 0x0, 0x1, [@typed={0x14, 0x93, 0x0, 0x0, @ipv6=@private1}, @generic="ab05e62de281663ecad0cccc7d79cdef6f802711eebdd0b209b33d1797c5c8a83d9fa6c4d3fe8ed15ae813764dfec363bbbbaa3ccc539e4dad0de52ea4c0abb5aa05d563aad62e0626d74c41cb3a2183f24376ee400478937d47d9f91a99cff1d9b22ddf2e33be91a029fdf5232680f4ff904cf86af26b4a31a3262a6b9765694dbc876c5139afa7756100941f8afebfa8c6a7d6", @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @generic="f21447b832c0ec7303aa613d7560f68cbd537b2affdd798e7cb0433b50a27cd2542f306f9d7c1b15532675f09b40304a5137370947eb6972f7eb65188f397284c19c7d6232dbdea873e947b04a1d22dc957af045684d7f42402fa3a0070eec33dec76ec0995c725e67c25f4a5e5e804759e9d820efd64e56d0c314eb37768195ea94b0c3fdbaf5763b9b38fd84e312580ec277768ca922668793d5c5c98e056777316df8b21f85c18621552152c9f3e3ea6f1c62b5a95fe6cfb7", @typed={0x14, 0x50, 0x0, 0x0, @ipv6=@loopback}]}, @generic="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", @typed={0x8, 0x68, 0x0, 0x0, @ipv4=@multicast2}]}, 0x2224}}, 0x20040084) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="47d0fcd2031cc7b401", 0xfffffffffffffe4a) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) fallocate(r4, 0x1, 0x4, 0x100000000) sendfile(r1, r2, 0x0, 0x20d314) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(r1, &(0x7f0000000400)='./file1\x00', 0xc0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', r3, &(0x7f0000000240)='./file1\x00', 0x31) ioctl$FIOCLEX(r7, 0x5451) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) r9 = openat$cgroup_freezer_state(r1, &(0x7f0000000380), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) close(r7) read$snapshot(r7, &(0x7f0000000100)=""/159, 0x9f) 14:41:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x1, 0x0, 0xffc}) [ 2102.982915] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2102.983888] EXT4-fs (loop6): group descriptors corrupted! 14:41:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x53}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:41:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000b00) 14:41:32 executing program 0: ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{}, 0xbf71, 0x1, 0xd9}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:41:32 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:41:49 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 25) 14:41:49 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x13, 0x30, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d315) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) [ 2120.184503] FAULT_INJECTION: forcing a failure. [ 2120.184503] name failslab, interval 1, probability 0, space 0, times 0 [ 2120.186425] CPU: 0 PID: 12046 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2120.187602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2120.189041] Call Trace: [ 2120.189489] dump_stack+0x107/0x167 [ 2120.190101] should_fail.cold+0x5/0xa [ 2120.190749] ? security_file_alloc+0x34/0x170 [ 2120.191558] should_failslab+0x5/0x20 [ 2120.192233] kmem_cache_alloc+0x5b/0x310 [ 2120.192921] security_file_alloc+0x34/0x170 [ 2120.193647] __alloc_file+0xb7/0x320 14:41:49 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:41:49 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0xa08, 0x0, 0x0, 0x9, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 14:41:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x40800) connect$unix(r2, &(0x7f0000001140)=@abs, 0x6e) sendfile(r1, r0, 0x0, 0xb052) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() getpid() r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x7fffffff, 0x40) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000180)=""/243) r5 = socket(0x1e, 0x0, 0x8000) dup2(r0, r2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f00000000c0)) [ 2120.194311] alloc_empty_file+0x6d/0x170 [ 2120.195152] path_openat+0xe6/0x2770 [ 2120.195767] ? __lock_acquire+0x1657/0x5b00 [ 2120.196512] ? path_lookupat+0x860/0x860 [ 2120.197174] ? perf_trace_lock+0xac/0x490 [ 2120.197848] ? SOFTIRQ_verbose+0x10/0x10 [ 2120.198506] ? find_held_lock+0x2c/0x110 [ 2120.199182] ? __lockdep_reset_lock+0x180/0x180 [ 2120.199944] do_filp_open+0x190/0x3e0 [ 2120.200564] ? may_open_dev+0xf0/0xf0 [ 2120.201191] ? alloc_fd+0x2e7/0x670 [ 2120.201787] ? lock_downgrade+0x6d0/0x6d0 [ 2120.202461] ? do_raw_spin_lock+0x121/0x260 [ 2120.203173] ? rwlock_bug.part.0+0x90/0x90 [ 2120.203873] ? _raw_spin_unlock+0x1a/0x30 [ 2120.204544] ? alloc_fd+0x2e7/0x670 [ 2120.205150] do_sys_openat2+0x171/0x4d0 [ 2120.205799] ? build_open_flags+0x6f0/0x6f0 [ 2120.206513] ? rcu_read_lock_any_held+0x75/0xa0 [ 2120.207283] __x64_sys_openat+0x13f/0x1f0 [ 2120.207957] ? __ia32_sys_open+0x1c0/0x1c0 [ 2120.208663] do_syscall_64+0x33/0x40 [ 2120.209271] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2120.210107] RIP: 0033:0x7f5ed339da04 14:41:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) r1 = dup3(r0, r0, 0x80000) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x4, 0x2000, @fd=r1, 0x4, &(0x7f0000000740)=[{&(0x7f00000000c0)="bdadd1f11c2bd4715cece97669465b0c58941e5a50a43d9f3a3df48bef0248cbc22ff8b616f1879fb50c7cbcd0311b7fceb3abd965bcd44aaf1dbd8246f2b44ce6893affa410c57f75ad88415d1026a99933090e1eb63d0b7ba214911a796e8402f420b47429abd07b08c9c59c8e2f601d8489d2456b271074795df6a38277e6fc81e997f8735a74c55841fc6c83855131cc3dd0ae6b8f78e88b7b65f2170648354e", 0xa2}, {&(0x7f0000000340)="62673a84cac7ac2ee67ded4805e760c0635607509804079d4ca026ba1dbd9ec36018e41055eaf5382d758471c8837f7d3ddb42562a4dfaeb700c1e49347496f326af754c69322cbc48162aa6a8d19110e9dd6d187e71d8bed4b33fc7d069ea28ccbf2007b764a6c02999d0ef86620459bc1d30abfdf0bc04e9bbba5c0df17d9cbbe33e811d73bc0f7e2fa3300e70dd12ef3730f068e22b5e8d7665d5f2d18f4b5c331c06b29c6cb380734f5a962dd211a3aee2bbed7aca", 0xb7}, {&(0x7f0000000500)="e9716d3b4fe3695f30a45707a731c2f1f67e9bd15708dfb46e2c8dcf84a1f75b09187bdb8e295009cc773e0c040f810d1b35422faffbdc7cf4f6ab87dff259f7c92b3f9be4c1715d62a179060abc083bc27b4ae57bbd8e1a057383578e6173a542e970c63bb4b22b8a57bcb16789c97b6f093d2fa254d17b1195043b35045e00c4bee78c0c7a9a19044af6438cf358c78f9c57b1db7181bee3905d9d6c7a3a50920e303071be66186c7e625bb98c191ba58d2a0fd2184df0ede7ddc13b8946b5a0f69c4ff11ec20bfe8a004a47e7", 0xce}, {&(0x7f0000000400)="d1a20bf0cedf47ce190aa14f0bbb5a76a458f3d3ee0658b5b45c3088f221bf75e1f8c98c2d60f054303c1e0065922231fc2c8749fde5150bcfa464e311f23c277e8fc88bf32108996e99e3f6a97a8eb3257651e7488f7e697aa949a0b5bd7629bdc355404afd9bb8ea34c153f7c4cdf3a46f41d3c0c15bf2a27eece4ef180291fd344eba9bff7dd804b60b21842b8c3eb79bfe59a5", 0x95}, {&(0x7f0000000600)="0d3d48f31c90d4c2c672430ca6dbc2a004b4b255ea01b077f0f3d42716ae454169d600a8b88ab03290fbb73a7809130190c65b36a3f9a0fdde51f6693ed9bc42ae580acc52f7279898f690f1d5146d68048369f8062d3fd6c34bc8d33231310142d1d3fa68ffcb26687a1bcd2ff9056128d8fa35b7f3ad2bc94639fe177d5493374b365d9722e5011e76e904bccc7370342634ee5da6", 0x96}, {&(0x7f0000000240)="4be3f159ed80f80c94e2df2afe6211b75f30e1051b15c008bf6069cdccad99346f0d6546d65f89b6e255f374d81dbec2965463d780c06ed15dd4a82e2c234b1c8e53a09d7d", 0x45}, {&(0x7f00000006c0)="86a174d36a13278ad14252776fa316e01c498414be0273ff38843123fa3022300b5d3ce375210bd989f3063859d78b23ddc2e9eb789aec3ea2006c5db0a839de11b9c2d6f71ce5ba1fa2d00392a33cecf1b5f201b053db712ce079acd56cb57a97d1183edfbc1b47c3cdb4", 0x6b}], 0x7, 0x1, 0x1, {0x3}}, 0x5) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000007c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r5}}, 0x2) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) ioctl$FIOCLEX(r6, 0x5451) close(r6) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) 14:41:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x54}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:41:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000c00) [ 2120.210714] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2120.213751] RSP: 002b:00007f5ed095fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2120.215005] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed339da04 [ 2120.216170] RDX: 0000000000000002 RSI: 00007f5ed0960000 RDI: 00000000ffffff9c [ 2120.217328] RBP: 00007f5ed0960000 R08: 0000000000000000 R09: ffffffffffffffff [ 2120.218490] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2120.219660] R13: 0000000000000004 R14: 00000000200000b0 R15: 0000000000000002 14:41:49 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 26) [ 2120.319544] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2120.321286] EXT4-fs (loop6): group descriptors corrupted! [ 2120.388233] FAULT_INJECTION: forcing a failure. [ 2120.388233] name failslab, interval 1, probability 0, space 0, times 0 [ 2120.390111] CPU: 0 PID: 12071 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2120.391247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2120.392597] Call Trace: [ 2120.393037] dump_stack+0x107/0x167 [ 2120.393644] should_fail.cold+0x5/0xa [ 2120.394286] ? create_object.isra.0+0x3a/0xa20 [ 2120.395057] should_failslab+0x5/0x20 [ 2120.395696] kmem_cache_alloc+0x5b/0x310 [ 2120.396372] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2120.397288] create_object.isra.0+0x3a/0xa20 [ 2120.398020] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2120.398881] kmem_cache_alloc+0x159/0x310 [ 2120.399582] security_file_alloc+0x34/0x170 [ 2120.400289] __alloc_file+0xb7/0x320 [ 2120.400913] alloc_empty_file+0x6d/0x170 [ 2120.401582] path_openat+0xe6/0x2770 [ 2120.402201] ? __lock_acquire+0x1657/0x5b00 [ 2120.402921] ? path_lookupat+0x860/0x860 [ 2120.403606] ? perf_trace_lock+0xac/0x490 [ 2120.404280] ? SOFTIRQ_verbose+0x10/0x10 [ 2120.404952] ? find_held_lock+0x2c/0x110 [ 2120.405616] ? __lockdep_reset_lock+0x180/0x180 [ 2120.406393] do_filp_open+0x190/0x3e0 [ 2120.407019] ? may_open_dev+0xf0/0xf0 [ 2120.407654] ? alloc_fd+0x2e7/0x670 [ 2120.408256] ? lock_downgrade+0x6d0/0x6d0 [ 2120.408945] ? do_raw_spin_lock+0x121/0x260 [ 2120.409658] ? rwlock_bug.part.0+0x90/0x90 [ 2120.410385] ? _raw_spin_unlock+0x1a/0x30 [ 2120.411071] ? alloc_fd+0x2e7/0x670 [ 2120.411680] do_sys_openat2+0x171/0x4d0 [ 2120.412346] ? build_open_flags+0x6f0/0x6f0 [ 2120.413094] ? rcu_read_lock_any_held+0x75/0xa0 [ 2120.413875] __x64_sys_openat+0x13f/0x1f0 [ 2120.414562] ? __ia32_sys_open+0x1c0/0x1c0 [ 2120.415277] do_syscall_64+0x33/0x40 [ 2120.415912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2120.416764] RIP: 0033:0x7f5ed339da04 [ 2120.417414] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2120.420555] RSP: 002b:00007f5ed095fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2120.421824] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed339da04 [ 2120.422987] RDX: 0000000000000002 RSI: 00007f5ed0960000 RDI: 00000000ffffff9c [ 2120.424154] RBP: 00007f5ed0960000 R08: 0000000000000000 R09: ffffffffffffffff [ 2120.425325] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2120.426492] R13: 0000000000000004 R14: 00000000200000b0 R15: 0000000000000002 14:41:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000000)={0x40, 0x7fff, 0x7ff}) 14:41:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xca0cc, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/3, 0x3, 0x20) r2 = dup2(r1, 0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/3, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1402f900000000000000f6f243ecd5657bf80000"], 0x14}}, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @remote, 0x40008001}, 0x1c) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4, 0x1, 0x8, 0x0, 0x0, 0x36, 0x28090, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x4, @perf_config_ext={0x2, 0x9}, 0x2101, 0x3, 0x65b, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0xe2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000001e00)={{r6}, "078ca303e51a6a795fa3a853fe7ca3206f5e925ff530a272196663163bde47c7dbe52fb5742292e6760cbda612672a554d2c1d6c26ffbe9099f05d2d4c17c89ff65b99c726c6e4036e64ab0b0c7c18f04298767604b690292282bd5036d8f2365affe93a0510924268b7414f14aa044589bcb1ea3da5a403b91931c44993f33efd02872ec4b3ef2ad4502579ad94ac399ba857db53ff7d0d90a70c69cf038a4a0a58e5874bdc7fe0fd3c064d0f4d8e811d9ee3ac710b2e5b8f21e4bd449c2a74b949976bca159bad8e527715aab759b44e2a54aaf465b7b4d422c4254c524e5da4c278f6e5a5051d9e1f9756f2dbe965643d0649df4102d9ba9e1814b98da15bc9669ccf0c56e82a72c93f1fe84512f32cc5e03bc2a17be7cfab07793d811e6485d67b668762bb21dbb468dcc5a752e6a4a396fdbedbf29c0ab3a1e7f247788b7f45c7520191eac23dd6b9b2990c5165ee6b850264163b384ed79f1c11854720082fd54c3f568f7446ab546141ed3e63779ef5ee60de9b64b622ae1b0e50d4cb89a55625825cbabbc98219e13abb1f65ebadff99b63c5a22f2c53d36ce09a2c310f13e235bc1fcbeee0f07e1b5fb8a68a0a2b8d2de5d3c20323d42fa62a701413dddd229d5243322e9d5cbb1e5a0f914d9b669a634470bad187920a01e17a636ce5cb392d84910049a7ebc354bec8d9b83d86aa0bd23914adef000324f8c5d4c5e51a8220924aae1c488aeed57c94f7b2af9f3c7a973185c0dd8826a74d85a8e4695cf31fdf5dfae3d75f843328215935449492830bb42e9675fe28ea54f7ce368e7be408b8bc34f51134ced9dedca9f6941a722f760ef78baff9c81ce0c1959f1916f6a1dcf909bdbf72a9e99b5a6b67f9a8fca7ce2c8a8dbaac28f3f88b41948a7546911f2c4127074c9c18338a522f7a7117d2440ec53ac26af66f9035b16c1847525609a40c9879ed149b2e7fae45c876842d9eceb1f40ab5f3dbaa832e56789dcbde270a0a4d8748d57a566ec8afdefc80fcf7927ec3b1a9a1445d8def71760e52d592471e0fe3df3ce34cb5042df253706925556a0aca7e88c39d53797f46960b67d3d038e86e53e0f7fdd0e7aeb41fe1a2d38803902a846f289813d09c5c164bedc4421a6ae85ed2d22cd8da8b99b40c397b5a9b3d0019a449581e0b955cd402ece35d9e008ffb5d56a8fb4e0206f319d828e647eee6a28067a3e4893050611b479e08b6142fa1f85c7e100461fd1cd320b98b76046e3716820b71a2c8dfa01162d3703a35c43868736926f58bddfa51245048fcfc5115bbb08fbc42567bff9130e0f032a2965d849724a6849814687da3b9cd28fa027bae3cffa07031331d3a898696032cb940da02bf80baa835c783c9b7dd456c7878f9ba77a32763054144a6c8935f06f55fcd4d0643ec9a416f99b6ab34764a63b73c1d8d68f61331d4993c88e1344afb3889e88c43dd73aac3b3e13b95d36ccc8dfa1b7801f4b58bd6ad33e605a6a0fce5a2c93839516c02e679905e8f23920cf250b44c8045b046c2d180da7ba43318d37e531231c6492c06dfe52607fb8d109310562c7dc1232c9913bc22c6f29069c577fcfcaba728cf8cdba28913c9939c565935d217047dbef02cb27eb47f4d53e26a3eb354a6f75d62332d270206b023fd22cd7b375d7407b20319d0854e1e312fef9a9d39a2e670fe1f073fd87bd2ac6e7a7568ba459dbf1b1a4a9cc37ad87cbc5539876b0869ea2fc508a61113cdd8d244c29df125451d7c6892f608f45ca914812d34d9c291d42d2398b59dce1171ebcf5d72c7aff4e1a3b5a36aa7cce02778526a8d2bbebe89c60237fb3ae54f00ff14246baa9a461166a1dafb45e36aa591f8508a30b1d3b20cd3a4d664d9684aae39f04717aac76a55bc0be77c9f176149d59d7950ae4813c72bf6e634867ea1a1a70bb69bb11cdf276ea3b55ef059d1019b0e27042c75430e3bf74426672d24d8fe0010cd37f34f1b7a9ff4938eb1e27f28761eaca29e21cb29980d09e18f67083bc24ccefa03cb505f267ac50296ab8153cbc8b9496467218a2bf0286424b0b187837f2679f3478c35ad0fe5fcab74a4bae8956d2c42aa823bd3d612c7d90f833e60ab2a23d819fb92a878e056e7f63155bdf9938cf33f6e90b8ebe2f5556264c510d987203e91755e0488e830647f0682e404076fc46d5f477f6093a1df6bd5a5520b0d5ce1dbc45f98ce0e679e8fdb01c3b51642c00d953069b840a26bd39f4c7ff3a193c724f6b39c38357bcec807fb404433a1fc27041c67406dc6f2dead6753066f73e02cbcf3a4e81a8f81b73b8a235f841f5bd09318aa3998cbbce7db1d03102bc9a85bf042120cfac76402c7a2264962293ae9b8bbc91f18259ba4333364f6646ce951034bf413a14d0a52e56b5df41308161aab45752e76422329bbd7704989ec75fd8aedbcf2f2b8ddea28be742f264f4980133ecec0d98988f1cdda9d0f99daeb32d734ba8845601bcb79b1f1c55221814a4d18c9aa8f907ad5190ec0e5470794b53288714e29f1267551ff624a8c6da13cb08c9ded04caecc2e98bebae49951eef87a9e432db7c1e8bb11f3cbd13773711a0ccf5a9e1cc3060d4ad9fc4da6b604c76382662bc9d5b7054cc8149c64377e4488f692a0646edba87657e07e438839feca7770f1d5dfe7b2117e48eb51dfdb62ee4feefdd598070cb6fe5dde9ca20c2727e03e02cf3614ee02b9733d1ff7bb52f952886e65312123cb7f93de439938095c49345be3f96d589d0acc5a4ac70a08d0a32389a2ffeac09f111e9a52fe74d895efac41ed01324b4ca0e8475ff2f74298221d35a1fddb6d838cf4167198e54faa323524f8b6c081a43f949a2380ca66c7f41b469c4d713f73c0eb0bf55ece19963938ebd264c0c28e4c77a2ebb7eb64f6e7899b24eb1e80ce57e88b48fa52d726d8c83d9b04f817dd21158ca8c4fa11b5b8ff6fab48b91ca21ca66e0eb8132a44945e5f0c9b261b682972341dd9adedd2f141958120fc04575a60879f4e4fd424d18516a6ac5e44d6b697577b895e2e76c180aa0ecb9c4207312f1dba6f9b205b7b2fd477be96b729f150c20b9d7b5f2ec36449288c7009b502f48d799247268cbdd5df2a51b2a0d7cfc2cdfe06097acfd14f10ca10e343cdcd70c3994c92da431e25cb82bd72a263d4095f901007a562398838fdbb7fe41b7da2a4e1e4b2fc64b9f1caace22a5590e72216aa1f34700c3c24b77db2faf3b8f4a5da69b890ff25092f2f17427bc7f453021c8d57098270e9219d0e04007e3992e415694a90993fc517b529038ea96811494d7fe0fb85c312e560d62a21d6c0ae1ab33b5cf26e5c5d3c567167ff553cbe71c887235ce5b7de3c5767baedb708767ee3ae682dd575e7d3e1a8e9761cfa7b032761b319579d02a2d1c472daf603919a30a86981d8ccbaef386cf787ae35d30366912b89a8f0b61a4c977dcbe091253ff6780f64dfe294ee2e1fdf92bcd2c99e59c5f8d6d01d1f5d3a4d06fa28f7b84e05563804d4f140c224efb2c3f4c215b9c2a374af8129311cfa6389c928a0c0b2a6029c382e86a13b576f12aa819e8fbbc29c9c37ab4eec2756fccd06f6d423c666afe32990ba409707b0eb0a97fe854ef0a273c160a24992d12e01031ad913ee551a022f9e721d2a0e9f40504c1e22d94408618d28bc5dfbb9b3047111355c28bbe56530a5b8f837dd1696acc51554483e3305c2b96278a4d9a3e3a6731527c96727563cf31ff0ca0ebc287c7b037f19699b9acd23bdfe82f8ccc6694473e2074b21b48a3f2f663f3dd5bd8ab818181d43f5a37b3790cc2a9a80251329cadb42121ea556cd3c4e1626e7be99340a035a5dd025fd37d0242a704e1ce3e91733503ea714ccfba1a23603e6ac4ad0de8f0fca8fb4667b9672ebd1ef8cf4cb26f13373323f950afc580593b9fa40f21af082bd437efc66f2ebeb63e4df1b5f83931c3454e3c3c46924cb52a8ae6edec697f1c46cb95df9610a516218942ed8656e48e83d344d047fc714148ea1a366eee2727e6521a892d7fa5627ca1e256ccac1c7bb29ba5ef2e1ad27a79bdd5a01f95872d2db1ad63ce2dcb0b590118965b9bb2fb2f7c304e8c291a8bb1c1eaa9bc6184357be30d8acdc408dd813bca6b60ee89583b42c330ce8d4b3abfb5a6fd156bd2f872c1c394d5215c61668f6934a6733cc599fe711d895cd229b027f7a4fe73ba3c9357a8a0dac78a67de1d575a1ab89e708c6fdfb721ea305d259c438dd651a5ab2f1c06b6afd4473fb75c1a34d6279c0b834108c333585aa57c8763a2a9e2957c59ebbe786c116a49c1185dad2185ae7facda85ddefae0190b42769cee2921ece22c2bb3e1e3c65e1958a3d76596149c47fc718e4f3a242e4014db88f1ee1e31ec5decb577359bc2789e57ca4426a089751b9e502e331252c53a74a0c4fb858463586066acdf09042375a1d32f25bfbe22b504ab917d79e460a09ba888ea08abd125b824a7315562d7bd1f3884aeb56d5d59edce4bca064f2c196408c5d8e72c9de54154f069e38d67b06c6ca52d7e7815ed5cc2f14589f3ddac14bba99fb071ff5e61a1735039a7c57ea9f29077b1a3ca1f716daafe768763a65d507921c5f283a29320b870a19bd299c209acc06d657c667b009bd03d8149b80079bb6680bdb55bb0471dff5f202b7cdca00405e03b766af48923d5d73d8c5aabb9e5d572b7b720cae02d03255067272660b4227a5f93f6f92655831ac944c6a373b6f5a5df2bfb63ec24c125f51ecd09a6aee32292632bf3f7b2d03b2f7c72df4ae534a95ecdf3170442191f7536a556d3235718b9d9471c24cfd1ab5badd2e37f99c616842adc12fd0d9bcedcfcf5cf730ef633f0e80673bda36f466af178608626662134d37f017fa545202e194b3ed0d3869fa355584334369d918b29440b6d66fda050532fc399a4cef53e83ee36797565cf6268c363496405f8f5c4e42944b9a8bb0862fbf81e4aea8b4e9b1f4c145e61b649a7afd69f098d244d962d08945f69eff59198a0c952b19753e93f4c4be0ef32d95d9d6d88dceb22fa22aaf72b8740a9aa70f1f502359c7c551e61d04c656ebd7b7db41c3cffd109f7a92c5f04c6ce7d2c515462642499f7153f0569f1d530b55e133c889622aa6c7dbe95073345d83be7301e1279b8c975d840014db1623f1ca32b7551f6ff23322ab8ad4244fd4543fae604fbfd08952fc4b350aa4916ae635d819c6b613731ca0ff1d77dc1612d281f4ed4bbeaf23f31bf094842a4acc7f0964f71d030b3b897e6688deb02cc580b03fcb6bef01340a1b500ca183a9226bbc30558db55161eb256df1e97be647d10a08720e70a7bba68d0b2e31cadf26f1618624fc943e85039b868ff2811ed468e542ee904c609ed1b8bfd039aaec1dee204e2ee5b920edca47400fdfbf6ea90603237bf3ee1d91692e779cb9d87a338e474c9e25f9f00ac24dffb7cb2496e2a61401e11d5d4ada06cdc906c350bc43434f992cc54fd35621b41cd3f7f255755ee6bbac384a69581ca97f99a350c392614b15225a7364e90070132ebbb3287d5f7d3c4f6567ef925749a51df0ef66777a5d6f1e02a5180225f738a57c4613ebc8e8f59e4898f235d27e9dcfa7e2ca483bf8b4a41cc6eba2e6eae31e89327d95526bd8a67761349d22ecd8bbe610f5ae412e44b18db8ec2be9b4f88e44ab201a9aae69f1756e8f0e5fbae4caf92a5b5976ef9a6fbdd8b79c1255948136a431413a3e99864cf6f89087f5204a7cf"}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0), r7, &(0x7f0000000340)=0x3ff, 0x80000000, 0x0) io_submit(0x0, 0x0, &(0x7f0000000380)) socket$nl_netfilter(0x10, 0x3, 0xc) 14:42:05 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 27) 14:42:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x54}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:42:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000d00) 14:42:05 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x7, 0x2, 0x0, 0x9, 0x2, 0x1}, 0x5) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x5, 0x7, 0x6}) 14:42:05 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) 14:42:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:42:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) sendfile(r0, r2, 0x0, 0x20d314) 14:42:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x55}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) [ 2136.733855] FAULT_INJECTION: forcing a failure. [ 2136.733855] name failslab, interval 1, probability 0, space 0, times 0 [ 2136.736055] CPU: 0 PID: 12107 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2136.737149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2136.738571] Call Trace: [ 2136.738986] dump_stack+0x107/0x167 [ 2136.739717] should_fail.cold+0x5/0xa [ 2136.740378] ? __kthread_create_on_node+0xd1/0x400 [ 2136.741322] should_failslab+0x5/0x20 [ 2136.741913] kmem_cache_alloc_trace+0x55/0x320 [ 2136.742806] ? loop_info64_to_compat+0x5f0/0x5f0 [ 2136.743553] __kthread_create_on_node+0xd1/0x400 [ 2136.744468] ? __kthread_parkme+0x1d0/0x1d0 [ 2136.745163] ? __mutex_lock+0x4fe/0x10b0 [ 2136.745951] ? loop_configure+0xcb5/0x1480 [ 2136.746632] ? do_raw_spin_unlock+0x4f/0x220 [ 2136.747466] ? loop_info64_to_compat+0x5f0/0x5f0 [ 2136.748274] kthread_create_on_node+0xbb/0x100 [ 2136.749143] ? __kthread_create_on_node+0x400/0x400 [ 2136.749998] ? lockdep_init_map_type+0x2c7/0x780 [ 2136.750895] ? lockdep_init_map_type+0x2c7/0x780 [ 2136.751728] loop_configure+0x3e3/0x1480 [ 2136.752512] lo_ioctl+0xa72/0x1760 [ 2136.753068] ? avc_has_extended_perms+0x7f1/0xf40 [ 2136.754003] ? loop_set_status_old+0x250/0x250 [ 2136.754714] ? avc_ss_reset+0x180/0x180 [ 2136.755481] ? find_held_lock+0x2c/0x110 [ 2136.756191] ? __lock_acquire+0xbb1/0x5b00 [ 2136.757060] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2136.757949] ? generic_block_fiemap+0x60/0x60 [ 2136.758795] ? lock_downgrade+0x6d0/0x6d0 [ 2136.759500] ? build_open_flags+0x6f0/0x6f0 [ 2136.760329] ? loop_set_status_old+0x250/0x250 [ 2136.761034] blkdev_ioctl+0x291/0x710 [ 2136.761762] ? blkdev_common_ioctl+0x1930/0x1930 [ 2136.762501] ? selinux_file_ioctl+0xb6/0x270 [ 2136.763345] block_ioctl+0xf9/0x140 [ 2136.763965] ? blkdev_read_iter+0x1c0/0x1c0 [ 2136.764780] __x64_sys_ioctl+0x19a/0x210 [ 2136.765477] do_syscall_64+0x33/0x40 [ 2136.766184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2136.766970] RIP: 0033:0x7f5ed33ea8d7 [ 2136.767691] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2136.770466] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2136.771902] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed33ea8d7 [ 2136.773093] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2136.774427] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 2136.775623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2136.776712] R13: 0000000000000004 R14: 00000000200000b0 R15: 0000000000000002 [ 2136.783853] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2136.785253] EXT4-fs (loop6): group descriptors corrupted! 14:42:05 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 14:42:05 executing program 7: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newspdinfo={0x44, 0x24, 0x800, 0x70bd28, 0x25dfdbff, 0x7, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20008881) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x47e3, 0x81) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x2f, 0xc9, 0x9, 0x7, 0x2a, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x9, 0x8cb}}) dup2(r1, r0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{}, "accae1416aeab770", "df6e6f912062afacd186e2f9b6666572", "7d6c5f81", "58c61ee607b7c9c1"}, 0x7f) 14:42:05 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 28) 14:42:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/214}) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000001c0)={0x7, 0x3, 0x5}) ioctl$int_out(r0, 0x0, &(0x7f0000000180)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:42:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x54) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x200482, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:42:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 2137.002280] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! [ 2137.032812] FAULT_INJECTION: forcing a failure. [ 2137.032812] name failslab, interval 1, probability 0, space 0, times 0 [ 2137.034951] CPU: 0 PID: 12131 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2137.036356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2137.037912] Call Trace: [ 2137.038418] dump_stack+0x107/0x167 14:42:06 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x2, 0x8, &(0x7f0000000000)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef7a97c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024db4d3ec4b7b6dc1", 0x3b, 0xc, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r3) r5 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) add_key(0x0, 0x0, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r4) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x48020200) [ 2137.039261] should_fail.cold+0x5/0xa [ 2137.039936] ? create_object.isra.0+0x3a/0xa20 [ 2137.040804] should_failslab+0x5/0x20 [ 2137.041519] kmem_cache_alloc+0x5b/0x310 [ 2137.042301] create_object.isra.0+0x3a/0xa20 [ 2137.043149] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2137.044122] kmem_cache_alloc_trace+0x151/0x320 [ 2137.045004] ? loop_info64_to_compat+0x5f0/0x5f0 [ 2137.045904] __kthread_create_on_node+0xd1/0x400 [ 2137.046712] ? __kthread_parkme+0x1d0/0x1d0 [ 2137.047552] ? __mutex_lock+0x4fe/0x10b0 [ 2137.048328] ? loop_configure+0xcb5/0x1480 [ 2137.049134] ? do_raw_spin_unlock+0x4f/0x220 [ 2137.049963] ? loop_info64_to_compat+0x5f0/0x5f0 [ 2137.050852] kthread_create_on_node+0xbb/0x100 [ 2137.051761] ? __kthread_create_on_node+0x400/0x400 [ 2137.052705] ? lockdep_init_map_type+0x2c7/0x780 [ 2137.053603] ? lockdep_init_map_type+0x2c7/0x780 [ 2137.054519] loop_configure+0x3e3/0x1480 [ 2137.055236] lo_ioctl+0xa72/0x1760 [ 2137.055909] ? avc_has_extended_perms+0x7f1/0xf40 [ 2137.056818] ? loop_set_status_old+0x250/0x250 [ 2137.057677] ? avc_ss_reset+0x180/0x180 [ 2137.058431] ? find_held_lock+0x2c/0x110 [ 2137.059274] ? __traceiter_irq_enable+0xc0/0xc0 [ 2137.060136] ? __lock_acquire+0xbb1/0x5b00 [ 2137.060971] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2137.061918] ? generic_block_fiemap+0x60/0x60 [ 2137.062730] ? lock_downgrade+0x6d0/0x6d0 [ 2137.063542] ? build_open_flags+0x6f0/0x6f0 [ 2137.064218] ? loop_set_status_old+0x250/0x250 [ 2137.064949] blkdev_ioctl+0x291/0x710 [ 2137.065546] ? blkdev_common_ioctl+0x1930/0x1930 [ 2137.066312] ? selinux_file_ioctl+0xb6/0x270 [ 2137.067002] block_ioctl+0xf9/0x140 [ 2137.067580] ? blkdev_read_iter+0x1c0/0x1c0 [ 2137.068258] __x64_sys_ioctl+0x19a/0x210 [ 2137.068894] do_syscall_64+0x33/0x40 [ 2137.069473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2137.070272] RIP: 0033:0x7f5ed33ea8d7 [ 2137.070856] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2137.073657] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2137.074829] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed33ea8d7 [ 2137.076010] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2137.077095] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 2137.078181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2137.079283] R13: 0000000000000004 R14: 00000000200000b0 R15: 0000000000000002 [ 2137.183525] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2137.184940] CPU: 0 PID: 12119 Comm: syz-executor.4 Not tainted 5.10.222 #1 [ 2137.186028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2137.187328] Call Trace: [ 2137.187746] dump_stack+0x107/0x167 [ 2137.188340] sysfs_warn_dup.cold+0x1c/0x29 [ 2137.189006] sysfs_do_create_link_sd+0x122/0x140 [ 2137.189766] sysfs_create_link+0x5f/0xc0 [ 2137.190404] device_add+0x703/0x1c50 [ 2137.190993] ? devlink_add_symlinks+0x970/0x970 [ 2137.191764] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2137.192598] wiphy_register+0x1da6/0x2850 [ 2137.193276] ? wiphy_unregister+0xb90/0xb90 [ 2137.193986] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2137.194877] ieee80211_register_hw+0x23c5/0x38b0 [ 2137.195639] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2137.196387] ? net_generic+0xdb/0x2b0 [ 2137.196991] ? lockdep_init_map_type+0x2c7/0x780 [ 2137.197732] ? memset+0x20/0x50 [ 2137.198239] ? __hrtimer_init+0x12c/0x270 [ 2137.198888] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 2137.199687] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2137.200405] ? hwsim_new_radio_nl+0x967/0x1080 [ 2137.201157] ? memcpy+0x39/0x60 [ 2137.201679] hwsim_new_radio_nl+0x991/0x1080 [ 2137.202363] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2137.203180] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2137.204185] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2137.205185] genl_family_rcv_msg_doit+0x22d/0x330 [ 2137.205935] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2137.206956] ? cap_capable+0x1cd/0x230 [ 2137.207587] ? ns_capable+0xe2/0x110 [ 2137.208184] genl_rcv_msg+0x33c/0x5a0 [ 2137.208786] ? genl_get_cmd+0x480/0x480 [ 2137.209416] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2137.210225] ? lock_release+0x680/0x680 [ 2137.210848] ? __lockdep_reset_lock+0x180/0x180 [ 2137.211625] netlink_rcv_skb+0x14b/0x430 [ 2137.212259] ? genl_get_cmd+0x480/0x480 [ 2137.212918] ? netlink_ack+0xab0/0xab0 [ 2137.213546] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2137.214297] ? is_vmalloc_addr+0x7b/0xb0 [ 2137.214933] genl_rcv+0x24/0x40 [ 2137.215483] netlink_unicast+0x549/0x7f0 [ 2137.216121] ? netlink_attachskb+0x870/0x870 [ 2137.216860] netlink_sendmsg+0x90f/0xdf0 [ 2137.217500] ? netlink_unicast+0x7f0/0x7f0 [ 2137.218166] ? netlink_unicast+0x7f0/0x7f0 [ 2137.218830] __sock_sendmsg+0x154/0x190 [ 2137.219457] ____sys_sendmsg+0x70d/0x870 [ 2137.220097] ? sock_write_iter+0x3d0/0x3d0 [ 2137.220749] ? do_recvmmsg+0x6d0/0x6d0 [ 2137.221360] ? SOFTIRQ_verbose+0x10/0x10 [ 2137.222005] ? __lockdep_reset_lock+0x180/0x180 [ 2137.222762] ? __lockdep_reset_lock+0x180/0x180 [ 2137.223486] ___sys_sendmsg+0xf3/0x170 [ 2137.224101] ? sendmsg_copy_msghdr+0x160/0x160 [ 2137.224821] ? __fget_files+0x2cf/0x520 [ 2137.225439] ? lock_downgrade+0x6d0/0x6d0 [ 2137.226087] ? lock_downgrade+0x6d0/0x6d0 [ 2137.226737] ? futex_exit_release+0x220/0x220 [ 2137.227452] ? __fget_files+0x2f8/0x520 [ 2137.228084] ? __fget_light+0xea/0x290 [ 2137.228697] __sys_sendmsg+0xe5/0x1b0 [ 2137.229323] ? __sys_sendmsg_sock+0x40/0x40 [ 2137.229996] ? __traceiter_irq_enable+0xc0/0xc0 [ 2137.230786] do_syscall_64+0x33/0x40 [ 2137.231370] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2137.232207] RIP: 0033:0x7f111cdceb19 [ 2137.232781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2137.235784] RSP: 002b:00007f111a344188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2137.236959] RAX: ffffffffffffffda RBX: 00007f111cee1f60 RCX: 00007f111cdceb19 [ 2137.238126] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2137.239229] RBP: 00007f111ce28f6d R08: 0000000000000000 R09: 0000000000000000 [ 2137.240399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2137.241500] R13: 00007ffe9407dbef R14: 00007f111a344300 R15: 0000000000022000 [ 2137.245843] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.7'. 14:42:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:42:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0xfb, 0xec, 0xff6}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000340)={0x80, 0x8000, 0x8000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000500)="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", 0x1000, r0}, 0x68) dup(r0) ioctl$TCXONC(r0, 0x540a, 0x1) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000002c0)={0x8000, 0x7, 0x1}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa8040, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x4, 0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000001500)={{0x10b, 0x1f, 0x1, 0x296, 0x1ae, 0x4833, 0x9a, 0x7000}, "db33d92d267deab2d970f8b79875fd330e7f501e9a7a8d4145a3e72318c11bcf378485262146cbf8a083", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74a) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="940300355b4a77001928944a82b7271c67033ae7f8fee20d13b1ba061f1900b8bc9f2b7b37ac1d15e8bf220c11540e29dd7de3690ed51e8d7e4c7ecab7b1e3e6d26f24fb474d4d25fffa7c29f3c50f998c8b5fc905758c6256d3e083000c83e2164c306489f6e79af89b55410e58c3dcdf7749ddb8759431bd160600c36a702499db43557fbba8a58fdf723a96e5ecd009f65b19", @ANYRES16=r4, @ANYBLOB="06000000000000002e2f66696c653000"]) pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)="14a410e8752e278a4cc4deb5d96e4afe56d1c5e1223eacbc6fa8905a39a9b3cd646bff8813ed1d8e4524241bb8d5ee7401f0a320a1770efd5011944ab2239e2be313cc8fd386aea42e7989131328913ef8b5132d06c1659b2af3c3913d687937063fe18b7ac6ecc2f7696159b706c50d8019b2b14f2e9cef912c2a493b2656cec3fa3da24124162bdc7b8e8783aa6e1155b1d92cbe9d62d62e763f7e303b2472403f6dc932eaf981ba69243ec02dd978834cf7ab2a15a94d52fd52c3817f164d30ad54061f9efa46b70a29c82f9122859feebc451eeb4dd452f5b3fd1465235d38b2cdb11e0e21", 0xe7}], 0x1, 0x2, 0x2) 14:42:21 executing program 7: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a9", 0x1f) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0xfffffffffffffd69, 0x0) syz_io_uring_setup(0x7781, &(0x7f0000000400)={0x0, 0x69ec, 0x10, 0x0, 0x3aa}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00000000000000ff010000000000000000000000000001000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000ff0100000000000000000000000000012000"/199], 0x110) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0x0, 0x7e850000, 0x5, 0x0, 0x0, [{{r0}, 0x8e}, {{}, 0x2}, {{r3}, 0x20f}, {{r4}, 0x800}, {{r0}, 0x1ff}]}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r1, r5, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)={@mcast2}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x42, 0x80080, 0x23456}, 0x40) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0)=0x1) unshare(0x48020200) 14:42:21 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 29) 14:42:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000e00) 14:42:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x57}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:42:21 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000020027a4230562624f8b94c4ed637cb7bc3c4f1b33833da23cc2ed85384bf62347d4967278f98e7e2616330ee42e9723ca96bc7e3d2627c2080baa2908b5727a52bdc6ca2103a1f483e4036a3c3d62a012e9bb5fc9d3c5bc96c19148e994a0fe153c1461607e35828adf15f", @ANYRES32=0x0, @ANYBLOB="0c00110020"], 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004e014}, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) 14:42:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) ioctl$FIOCLEX(r5, 0x5451) close(r5) readv(r5, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f00000012c0)=""/68, 0x44}], 0x5) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) [ 2152.796265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=544 sclass=netlink_route_socket pid=12153 comm=syz-executor.4 [ 2152.807608] FAULT_INJECTION: forcing a failure. [ 2152.807608] name failslab, interval 1, probability 0, space 0, times 0 [ 2152.808755] CPU: 1 PID: 12159 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2152.809412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2152.810189] Call Trace: [ 2152.810449] dump_stack+0x107/0x167 [ 2152.810799] should_fail.cold+0x5/0xa [ 2152.811169] ? __kernfs_new_node+0xd4/0x860 [ 2152.811588] should_failslab+0x5/0x20 [ 2152.811954] kmem_cache_alloc+0x5b/0x310 [ 2152.812345] __kernfs_new_node+0xd4/0x860 [ 2152.812739] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2152.813191] ? perf_trace_lock+0xac/0x490 [ 2152.813323] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2152.813585] ? perf_trace_lock+0xac/0x490 [ 2152.815545] EXT4-fs (loop6): group descriptors corrupted! [ 2152.815832] ? lock_chain_count+0x20/0x20 [ 2152.815854] ? __lockdep_reset_lock+0x180/0x180 [ 2152.817744] ? __lockdep_reset_lock+0x180/0x180 [ 2152.818194] ? update_load_avg+0x162/0x1870 [ 2152.818602] ? find_held_lock+0x2c/0x110 [ 2152.818995] kernfs_new_node+0x18d/0x250 [ 2152.819394] kernfs_create_dir_ns+0x49/0x160 [ 2152.819817] internal_create_group+0x793/0xb30 [ 2152.820257] ? set_user_nice.part.0+0x2fd/0x760 [ 2152.820701] ? sysfs_remove_group+0x170/0x170 [ 2152.821130] ? lockdep_init_map_type+0x2c7/0x780 [ 2152.821587] ? blk_queue_flag_set+0x22/0x30 [ 2152.821997] ? __loop_update_dio+0x2d2/0x690 [ 2152.822417] loop_configure+0x954/0x1480 [ 2152.822811] lo_ioctl+0xa72/0x1760 [ 2152.823156] ? avc_has_extended_perms+0x7f1/0xf40 [ 2152.823627] ? loop_set_status_old+0x250/0x250 [ 2152.824065] ? avc_ss_reset+0x180/0x180 [ 2152.824447] ? find_held_lock+0x2c/0x110 [ 2152.824845] ? __lock_acquire+0xbb1/0x5b00 [ 2152.825281] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2152.825779] ? generic_block_fiemap+0x60/0x60 [ 2152.826202] ? lock_downgrade+0x6d0/0x6d0 [ 2152.826596] ? build_open_flags+0x6f0/0x6f0 [ 2152.827008] ? loop_set_status_old+0x250/0x250 [ 2152.827451] blkdev_ioctl+0x291/0x710 [ 2152.827814] ? blkdev_common_ioctl+0x1930/0x1930 [ 2152.828265] ? selinux_file_ioctl+0xb6/0x270 [ 2152.828689] block_ioctl+0xf9/0x140 [ 2152.829039] ? blkdev_read_iter+0x1c0/0x1c0 [ 2152.829449] __x64_sys_ioctl+0x19a/0x210 [ 2152.829839] do_syscall_64+0x33/0x40 [ 2152.830195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2152.830684] RIP: 0033:0x7f5ed33ea8d7 [ 2152.831043] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2152.832769] RSP: 002b:00007f5ed095ff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2152.833490] RAX: ffffffffffffffda RBX: 00007f5ed3434970 RCX: 00007f5ed33ea8d7 [ 2152.834156] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2152.834822] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 2152.835495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2152.836166] R13: 0000000000000004 R14: 00000000200000b0 R15: 0000000000000002 14:42:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000f00) 14:42:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x59}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:42:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:42:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) [ 2153.094546] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2153.095517] EXT4-fs (loop6): group descriptors corrupted! 14:42:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) (fail_nth: 30) 14:42:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$KDENABIO(r3, 0x4b36) 14:42:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:42:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0xffc}) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000480)={0x19, 0x10, &(0x7f0000000080)="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"}) [ 2153.217300] FAULT_INJECTION: forcing a failure. [ 2153.217300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2153.219704] CPU: 0 PID: 12191 Comm: syz-executor.5 Not tainted 5.10.222 #1 [ 2153.220820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2153.222148] Call Trace: [ 2153.222582] dump_stack+0x107/0x167 [ 2153.223175] should_fail.cold+0x5/0xa [ 2153.223810] _copy_from_user+0x2e/0x1b0 [ 2153.224565] kstrtouint_from_user+0xbd/0x220 [ 2153.225276] ? kstrtou8_from_user+0x210/0x210 [ 2153.226007] ? lock_acquire+0x197/0x470 [ 2153.226645] ? ksys_write+0x12d/0x260 [ 2153.227282] proc_fail_nth_write+0x78/0x220 [ 2153.227975] ? proc_task_getattr+0x1f0/0x1f0 [ 2153.228698] ? proc_task_getattr+0x1f0/0x1f0 [ 2153.229401] vfs_write+0x29a/0xb10 [ 2153.229984] ksys_write+0x12d/0x260 [ 2153.230574] ? __ia32_sys_read+0xb0/0xb0 [ 2153.231251] do_syscall_64+0x33/0x40 [ 2153.231846] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2153.232669] RIP: 0033:0x7f5ed339d5ff [ 2153.233269] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2153.236190] RSP: 002b:00007f5ed0960170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2153.237409] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ed339d5ff [ 2153.238545] RDX: 0000000000000001 RSI: 00007f5ed09601e0 RDI: 0000000000000003 [ 2153.239689] RBP: 00007f5ed09601d0 R08: 0000000000000000 R09: ffffffffffffffff [ 2153.240824] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2153.241957] R13: 00007ffdbf380c2f R14: 00007f5ed0960300 R15: 0000000000022000 [ 2153.257731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=544 sclass=netlink_route_socket pid=12195 comm=syz-executor.4 14:42:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x5a}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:42:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./file1\x00', 0x331440, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000001c0)=0x7) sendfile(r0, r1, 0x0, 0x20d314) pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)="20b08d899511bf7baa659148d301d75bf936f2ffc07dc6ff58c993460e43cd9e8307039faeb2fa48eaded343dc78b2c6b460dbcc7c6f7dfc8f757e07d95c65", 0x3f}, {&(0x7f0000000040)="438f9259f39eb64daa3f35bd2924f13daa658e682bd9c0b9923ce55ef25e279113bcd923867c573991ff29b7066b561520ad5a732349c3b0738a9a557f92da34e9ad22b4db66dd889c5d62e37f1cd07f1de22c1382f649770b1f6a4df5bd2a239b231751c9a7e2a271b72f9fd3640d44cfc4ee49d7d2fcc5e4ce9038b378d040", 0x80}, {&(0x7f0000000100)="ef6b20f08ce378f232ab84ee3d736cadd05666c59d6cc7c8a39b8c77768939fd9078656cf793fe846c68e963ca458e950c6e5606a789a457afb66e3a7aec9480dab2088f4cf7197ca07c6de89dc6a79e1faf49e7636fb38dabb77e792496c71d1df79d476153acec4f9ce28a7f763ef11e1d03f1d0b74f8d09332ef70362fd7daa311e8357b62677c0b70a701d754b5696ac4b8a9748dc7ed74b1325069a197a997ef7ec8bbf61b60489cdd1d8", 0xad}, {&(0x7f00000002c0)="ba9ec68f91d3f4f8c49ed9ab8d6985299bd327ae553272c5e8e77be951f77d27949ee9b0b0a19e463b048219c963474015ac058393c9a20d88bc8629f3a06d9ea84fcf08e57e5382", 0x48}, {&(0x7f0000000340)="53d02cb38813a6bb29f79bae26129353260ccf55e7fafb411285185dc9f76bbb90241480ffda0f7664775ceaa2aabffb035bf10853f8c2d474f3a8a273d55cba9015d92ee49b4d54d230daa5d0516925bf26c092817530dccb1ed073de5ff0031b5991fe2be060c8b7132049e6ba1c1a2a75022e11df91dc9c781a91d40ab4b2a878fdc7f35ddb816c966f479f0337a9c826766186c15292a990f875c91300d7bafea70a5d161157b11be01cdd5533444a18055a964099d6c17fd1cea584a30dd4d578c5ab420288a562d4b06cab8a5239865ae6f5a697629c2d5c0cce2ad3b7fb2de189d61a3354375aefd65c7060f5bfc32ef1b06bee", 0xf7}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="9232a0d516d6ef0b8e43ef2ee29ee5355e5fcdfd9c72c9221cfcc0cd357e134683dd00ff779397160174e201653d0fb854db4cd3f9de6367e7a416924553ce087f279f51fd84f78b51aef2e99aeadde1fbe2", 0x52}], 0x7, 0x5, 0x78) 14:42:22 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0xfb, 0xec, 0xff6}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000340)={0x80, 0x8000, 0x8000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000500)="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", 0x1000, r0}, 0x68) dup(r0) ioctl$TCXONC(r0, 0x540a, 0x1) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000002c0)={0x8000, 0x7, 0x1}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa8040, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x4, 0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000001500)={{0x10b, 0x1f, 0x1, 0x296, 0x1ae, 0x4833, 0x9a, 0x7000}, "db33d92d267deab2d970f8b79875fd330e7f501e9a7a8d4145a3e72318c11bcf378485262146cbf8a083", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74a) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="940300355b4a77001928944a82b7271c67033ae7f8fee20d13b1ba061f1900b8bc9f2b7b37ac1d15e8bf220c11540e29dd7de3690ed51e8d7e4c7ecab7b1e3e6d26f24fb474d4d25fffa7c29f3c50f998c8b5fc905758c6256d3e083000c83e2164c306489f6e79af89b55410e58c3dcdf7749ddb8759431bd160600c36a702499db43557fbba8a58fdf723a96e5ecd009f65b19", @ANYRES16=r4, @ANYBLOB="06000000000000002e2f66696c653000"]) pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)="14a410e8752e278a4cc4deb5d96e4afe56d1c5e1223eacbc6fa8905a39a9b3cd646bff8813ed1d8e4524241bb8d5ee7401f0a320a1770efd5011944ab2239e2be313cc8fd386aea42e7989131328913ef8b5132d06c1659b2af3c3913d687937063fe18b7ac6ecc2f7696159b706c50d8019b2b14f2e9cef912c2a493b2656cec3fa3da24124162bdc7b8e8783aa6e1155b1d92cbe9d62d62e763f7e303b2472403f6dc932eaf981ba69243ec02dd978834cf7ab2a15a94d52fd52c3817f164d30ad54061f9efa46b70a29c82f9122859feebc451eeb4dd452f5b3fd1465235d38b2cdb11e0e21", 0xe7}], 0x1, 0x2, 0x2) 14:42:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008844}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00083e8cf88e56ce3ac6b2ba4fa33330a2d9d2646e4b385458839b62c335ef7e654ad012ea3351a5026688d4b9c6c354044d135ac46d5b2a35450551b9c2668bf47448ae529bcc2da8e88902d1c9745701523842527a9ec60f1b1b8f20f04bb88d4440dc7e8310d3ad0f0cd2bbc602436d50083d0c973fe527d46a7aad7b9b633f15"]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x93, 0x0, 0x9, 0x0, 0x10001, 0x8040, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xc680, 0x2, @perf_bp={&(0x7f0000000140), 0xe}, 0x0, 0xffff, 0x0, 0x2, 0xfffffffffffffffe, 0x8, 0x8, 0x0, 0x5, 0x0, 0x1}, r0, 0xb, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x8000) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x6) umount2(&(0x7f0000000000)='./file0\x00', 0x0) [ 2153.390138] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2153.390931] EXT4-fs (loop6): group descriptors corrupted! 14:42:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fffffff5) 14:42:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) 14:42:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 14:42:41 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f0000000580)={0x30201, 0x20, 0x2}, &(0x7f00000005c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r6}}, 0xff) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './mnt\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r8, {0x1}}, './mnt\x00'}) 14:42:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x5c}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:42:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:42:41 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffffffffffff08, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) 14:42:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) ioctl$FIOCLEX(r5, 0x5451) close(r5) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1}, 0xe2c7) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000000)) 14:42:41 executing program 2: syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) ioctl$FIOCLEX(r2, 0x5451) close(r2) openat(r2, &(0x7f0000000000)='./file0\x00', 0x80, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:42:41 executing program 4: r0 = syz_open_procfs(0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000140)={0x894, 0x1, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) fadvise64(r1, 0x0, 0x8, 0x2) pread64(r0, &(0x7f0000001100)=""/4090, 0xffa, 0x100) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0xe3d, 0x0, {0x1, 0x2, 0x9e, 0x3, 0xe4}, 0xbe}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {r4}}, './file1\x00'}) openat(r6, &(0x7f0000000200)='./file1\x00', 0x0, 0x102) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000500000000000000020000003f000000040000000000000001000000000000007f000000000000000010000000000000000000000000000000000000000000008021000000000000000000000000000001800000000000001f00000000000000070000000000000000000000000000000000000000000000040000000000000000000000000000000100000000000000ffffffff00000000050000000000000000000000000000006543f4c3a3614a883f99425556000000000000000000100000000000000000000000000000ff0700000000000000000000000000d703000000000000000000000000000000000000000000000000000000000000000000000000000000fa74b82a4026ab47d9ef5ee3b54d5776f5ab48284e61c3689b7b3c913619048c598016fb9e78ab5752df41808df2a1816871001a62f51e30b2ae72ed8c7f96c00e898c0ea10673d56d2d0417ff64441344a312316203f962d8520e103b69556422a1fc84b47494b82e8ec619df5a32c5c9ff280ebc7bce8c01339a71d404b9c6dcadc2a189590881dff7a42f5e91520046b23713580c3410ea39a4cea9bb58031188f583b0870bf4349abd9e5dfe457cd6915495c9d0774d"]) setsockopt$inet6_opts(r7, 0x29, 0x3b, 0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r7, &(0x7f0000004d00), 0x400000000000070, 0x0) 14:42:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x9, 0x42, 0xffc}) 14:42:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:42:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x2, 0x4) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:42:41 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) 14:42:41 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x5) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x725}}, './file1\x00'}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) 14:42:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x5d}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:42:41 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5c, 0x400}, {&(0x7f0000010300)="0200ebff0300000004", 0x9, 0x800}, {&(0x7f0000000580)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000065060004dd6911c863206fb4535d624406e17cbb619041ce4601ce57469242790af0e8c666bfcef1037e45ea42d3507e3c1ba58bb8f129b9d0f9be28346f127fc2492558ea3bf60397ce36cffe63062a886903b1cc2818b74272667080f93271d4a08f26874ae523b89e5464a017232e8299be4ec95c069524c94e7b350f7301bc34372d69a30cf902", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) umount2(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x101200, 0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r3 = dup2(r0, r1) open(&(0x7f0000000040)='./file0\x00', 0x664f40, 0x100) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000001c0)) fsetxattr(0xffffffffffffffff, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00', &(0x7f00000002c0)='/%-\x00', 0x4, 0x1) syz_io_uring_setup(0x5eb1, &(0x7f0000000480)={0x0, 0x8ad, 0x10, 0x3, 0x2a6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r4, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x156, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 14:42:58 executing program 7: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96333f", 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)={@empty, @remote, @val={@val={0x9100, 0x0, 0x1, 0x4}, {0x8100, 0x4, 0x0, 0x2}}, {@generic={0x800, "7bcd332471bde75216743ca405e3306f7ff9f294ac005e3b71d82f0d1ef8ac7b0b302fe63f27bf53c072877c78627e038a70da1c44b0998dae81fb13"}}}, &(0x7f00000003c0)={0x0, 0x2, [0x41d, 0xe73, 0xf5b, 0xc71]}) syz_emit_ethernet(0x257, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x1, 0x3, [0x896, 0x83f, 0xd08, 0x80b]}) 14:42:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) syz_io_uring_setup(0x3c67, &(0x7f00000002c0)={0x0, 0x56f1, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) ioctl$FIOCLEX(r6, 0x5451) close(r6) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000000)) 14:42:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x5e}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:42:58 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:42:58 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x4, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) 14:42:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FIOCLEX(r1, 0x5451) 14:42:59 executing program 0: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x8) r3 = getuid() sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x32, 0x400, 0x70bd2b, 0x25dfdbff, {0x8}, [@typed={0x8, 0x57, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x96, 0x0, 0x0, @u64=0x401}]}, 0x28}}, 0x8010) write(r2, &(0x7f0000000240)="01", 0x1) r4 = fork() ptrace(0x10, r4) ptrace$getenv(0x4201, r4, 0xba, &(0x7f0000000200)) fcntl$setown(0xffffffffffffffff, 0x8, r4) sendfile(r0, r1, 0x0, 0x20d314) 14:42:59 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a08020000010000010100535007", 0x25, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00cc606e5e7ebb4aee43c0c3bc5bdd565d5ca938191c1df6b898304a285bc49a562d96bb53ae9a8f61a87ff0e2c3bc400b187691fcf08cb787795952cf7f6e2b818fae4f0dde6883641a6016128c3b199df54d6e4fbe96d8cd5073acc6feae3eaf2c3484ad97c2f9db1b42aaa20d9bc138819e7fc66173d7a01eb1697d31ec95e5b488a8691001520a3c9c469d73ea0f833f17605c213e12c14750c3aac4d86a301aaf12bc353c13b04c84b2be2c"]) 14:42:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd2f}}, './file0\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) 14:42:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0xffc}) 14:42:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x5f}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:42:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) close_range(r0, r1, 0x0) 14:42:59 executing program 3: syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) ioctl$FIOCLEX(r2, 0x5451) close(r2) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x8}, 0x0) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = openat(r5, &(0x7f0000000140)='./file1\x00', 0x145142, 0xb0) r7 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x100000001) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r10}, 0x0) ioctl$FIOCLEX(r10, 0x5451) close(r10) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x3, 0x4000, @fd_index=0x9, 0x2, &(0x7f0000000080), 0x0, 0xc}, 0x8) openat(r10, &(0x7f0000000080)='./file1\x00', 0x800, 0x8) 14:42:59 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x42, 0x0, 0x100100000000) preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0xfffffffe) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000440)=ANY=[@ANYBLOB="014500a6ea6e11a6080000000000000000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ptrace$cont(0x9, 0x0, 0x68c, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0xee, 0x8, 0x1, 0x0, 0x5, 0xa01, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x8000}, 0x4200, 0x6, 0x8, 0x5, 0x4, 0x5, 0x1, 0x0, 0x5, 0x0, 0xac4}, 0x0, 0x10, 0xffffffffffffffff, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000240)) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fallocate(r0, 0x3, 0x0, 0x18000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000140)='./file1\x00', 0x100, 0x88) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000380)={0x2b8, 0xcb, 0x14, 0x3, 0x1}) r4 = dup2(r2, r1) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@rc, &(0x7f00000000c0)=0x80) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x3, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20000, 0x10e) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r4, 0x0, 0x7ffffff9) 14:42:59 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/file0/file0\x00', 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x8000, 0x1) creat(&(0x7f00000000c0)='./file0/file1\x00', 0xc1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x8000, 0x1f) 14:42:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:43:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x60}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:43:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r0, 0x5428) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000004c0)={0x0, 0x40, 0xff4}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x1, 0x7e57, 0x3, 0x7d943b89, 0x14, "9dfdd392d39d2e4b4f8d6139d3765fff4a816d"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netpci0\x00'}) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r4 = openat(r3, &(0x7f0000000140)='./file0\x00', 0x88100, 0xe3af352258e6353f) r5 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000240)={0x80, 0x0, 0x0, 0x7fffffff, 0x400}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'vlan0\x00'}) fcntl$setpipe(r5, 0x407, 0x5) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x7, 0x400, 0x1, 0x242bf8a3, 0xf28}) open(&(0x7f0000000280)='./file0\x00', 0x20800, 0x4) 14:43:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:43:14 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x18401) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r3, &(0x7f00000007c0)=""/180, 0x200007d8) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000440)) getdents64(r3, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="010027bd7000fddbdf250100000000f6de00004100000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x1) r4 = syz_genetlink_get_family_id$ipvs(0x0, r3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="019add4a2e337ab2b2dc8570", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00'}) lseek(r1, 0x1, 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 14:43:14 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x6, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) 14:43:14 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(r0, r0, 0x0, 0x8) 14:43:14 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002500)={0x0, 0x0, "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", "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"}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) r2 = signalfd4(r1, &(0x7f00000000c0)={[0x8001]}, 0x8, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) ioctl$FIOCLEX(r7, 0x5451) close(r7) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r9, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x18}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}]]}, 0x64}, 0x1, 0x0, 0x0, 0x4000990}, 0x4004010) 14:43:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) [ 2205.593277] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2205.642452] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2205.644104] CPU: 1 PID: 12368 Comm: syz-executor.7 Not tainted 5.10.222 #1 [ 2205.645120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.646332] Call Trace: [ 2205.646727] dump_stack+0x107/0x167 [ 2205.647274] sysfs_warn_dup.cold+0x1c/0x29 [ 2205.647915] sysfs_do_create_link_sd+0x122/0x140 [ 2205.648607] sysfs_create_link+0x5f/0xc0 [ 2205.649211] device_add+0x703/0x1c50 [ 2205.649767] ? devlink_add_symlinks+0x970/0x970 [ 2205.650459] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2205.651245] wiphy_register+0x1da6/0x2850 [ 2205.651882] ? wiphy_unregister+0xb90/0xb90 [ 2205.652540] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2205.653330] ieee80211_register_hw+0x23c5/0x38b0 [ 2205.654051] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2205.654754] ? net_generic+0xdb/0x2b0 [ 2205.655329] ? lockdep_init_map_type+0x2c7/0x780 [ 2205.656043] ? memset+0x20/0x50 [ 2205.656527] ? __hrtimer_init+0x12c/0x270 [ 2205.657141] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 2205.657894] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2205.658562] ? hwsim_new_radio_nl+0x967/0x1080 [ 2205.659236] ? memcpy+0x39/0x60 [ 2205.659728] hwsim_new_radio_nl+0x991/0x1080 [ 2205.660382] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2205.661163] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2205.662121] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2205.663073] genl_family_rcv_msg_doit+0x22d/0x330 [ 2205.663783] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2205.664755] ? cap_capable+0x1cd/0x230 [ 2205.665341] ? ns_capable+0xe2/0x110 [ 2205.665892] genl_rcv_msg+0x33c/0x5a0 [ 2205.666459] ? genl_get_cmd+0x480/0x480 [ 2205.667045] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2205.667811] ? lock_release+0x680/0x680 [ 2205.668406] ? __lockdep_reset_lock+0x180/0x180 [ 2205.669098] netlink_rcv_skb+0x14b/0x430 [ 2205.669696] ? genl_get_cmd+0x480/0x480 [ 2205.670282] ? netlink_ack+0xab0/0xab0 [ 2205.670869] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2205.671535] ? is_vmalloc_addr+0x7b/0xb0 [ 2205.672147] genl_rcv+0x24/0x40 [ 2205.672626] netlink_unicast+0x549/0x7f0 [ 2205.673234] ? netlink_attachskb+0x870/0x870 [ 2205.673897] netlink_sendmsg+0x90f/0xdf0 [ 2205.674500] ? netlink_unicast+0x7f0/0x7f0 [ 2205.675138] ? netlink_unicast+0x7f0/0x7f0 [ 2205.675759] __sock_sendmsg+0x154/0x190 [ 2205.676361] ____sys_sendmsg+0x70d/0x870 [ 2205.676968] ? sock_write_iter+0x3d0/0x3d0 [ 2205.677591] ? do_recvmmsg+0x6d0/0x6d0 [ 2205.678172] ? SOFTIRQ_verbose+0x10/0x10 [ 2205.678776] ? __lockdep_reset_lock+0x180/0x180 [ 2205.679462] ___sys_sendmsg+0xf3/0x170 [ 2205.680047] ? sendmsg_copy_msghdr+0x160/0x160 [ 2205.680725] ? __fget_files+0x2cf/0x520 [ 2205.681310] ? lock_downgrade+0x6d0/0x6d0 [ 2205.681919] ? SOFTIRQ_verbose+0x10/0x10 [ 2205.682518] ? futex_exit_release+0x220/0x220 [ 2205.683192] ? __fget_files+0x2f8/0x520 [ 2205.683785] ? __fget_light+0xea/0x290 [ 2205.684374] __sys_sendmsg+0xe5/0x1b0 [ 2205.684934] ? __sys_sendmsg_sock+0x40/0x40 [ 2205.685567] ? __do_sys_futex+0x2bb/0x480 [ 2205.686208] do_syscall_64+0x33/0x40 [ 2205.686758] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2205.687502] RIP: 0033:0x7f02a3197b19 [ 2205.688062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.690731] RSP: 002b:00007f02a070d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2205.691881] RAX: ffffffffffffffda RBX: 00007f02a32aaf60 RCX: 00007f02a3197b19 [ 2205.692929] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2205.693971] RBP: 00007f02a31f1f6d R08: 0000000000000000 R09: 0000000000000000 [ 2205.695009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2205.696049] R13: 00007ffcac41982f R14: 00007f02a070d300 R15: 0000000000022000 14:43:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xffc}) r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = pidfd_open(0x0, 0x0) dup2(r1, r2) 14:43:14 executing program 3: syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) ioctl$FIOCLEX(r2, 0x5451) close(r2) r3 = openat(r2, &(0x7f0000000040)='./file1\x00', 0xc0, 0xc) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x2, 0x1ff) sendfile(r3, r4, 0x0, 0x100000001) 14:43:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) fallocate(r1, 0x0, 0x81, 0x1) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:43:14 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x7, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) [ 2205.811891] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 14:43:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:43:14 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0xf, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) 14:43:14 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) 14:43:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x62}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:43:14 executing program 7: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x100000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4", 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000004200210e00000000bc9e63a030bfbb4e471b6ac04e0000000000000000"], 0x14}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00000000000000ff010000000000000000f50000000001000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000006aab9c848249000000000000000000"], 0x110) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000180)={0x2, 0x7e850000, 0x80000000000020c, 0x0, 0x0, [{{r0}, 0x8e}, {{}, 0x2}, {{r2}, 0x20f}, {{r3}, 0x800}, {{}, 0x1ff}]}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r1, r5, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000140)) r6 = syz_open_dev$rtc(&(0x7f0000000080), 0x9, 0x101001) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000002c0)=0x1) unshare(0x48020200) unshare(0x58040280) unshare(0x10040200) 14:43:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) signalfd4(r2, &(0x7f0000000100)={[0x8000]}, 0x8, 0x800) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000900)={{r2}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000030000f30000e10005000000000000000100f0ff00000000fcffffff00000000040000fffffffc008180000000000000ffffffff000400000000000000000000ea54ffffffff040001000000002500"/96]}, @devid=r3}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000040)={r3, "adb8d6f41c7b6c16b8f98e5430af26e7"}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000500)={{r0}, 0x0, 0x10, @unused=[0x3, 0x9, 0x6, 0x60], @devid=r3}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000004c0)={0x0, 0x0, 0xc7}) 14:43:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fchmodat(r0, &(0x7f0000000000)='./file1\x00', 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x4000, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) sendfile(r0, r1, 0x0, 0x100000001) 14:43:30 executing program 7: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4a8e, &(0x7f0000000340)={0x0, 0x1c9a, 0x4, 0x1, 0x9f8, 0x0, r6}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f0000000000)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r5}}, 0xe6) fork() 14:43:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x63}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 14:43:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x10d042, 0x10) syz_mount_image$vfat(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="37e3"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sendfile(r0, r1, 0x0, 0x20d314) 14:43:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:43:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x27}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004810}, 0x4c000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000000) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r0) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="370bd4fd", @ANYRES16=r3, @ANYBLOB="000125bd7000fbdbdf25210000000500200000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000050) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000080005000000000014000600766574683100000000000000000000002500070073797374656d5f753a6f626a6563745f723a67657474795f6c6f675f743a73300000000008000400e0000002"], 0x60}}, 0x0) 14:43:30 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) 14:43:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="0031acd025000000f61a00000000c1aa396415dd0a7f001ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0xc) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x700) 14:43:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, @out_args}, './file1\x00'}) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) kcmp(r6, 0x0, 0x0, r7, r8) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000008e40)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_any}]}}) sendfile(0xffffffffffffffff, r0, 0x0, 0x20d314) 14:43:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x301542, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002000600000000000000000038000000000000000000000000002000010000000000000000000000030000004900000000000000000000003f"], 0x58) close(r2) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 14:43:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x64}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) VM DIAGNOSIS: 14:48:36 Registers: info registers vcpu 0 RAX=ffffffff83e74f90 RBX=0000000000000000 RCX=ffffffff83e5cd8c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e75598 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85675788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e74f9e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5bd5551010 CR3=000000000c2e0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=00000000000d0602 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041892a2600000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e74f90 RBX=0000000000000001 RCX=ffffffff83e5cd8c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e75598 RBP=ffffed1001130000 RSP=ffff88800898fe70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85675788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e74f9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563fb8568678 CR3=000000000c2e0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000007000000060000000000000000 XMM02=6169727420636578650b0a0100010101 XMM03=7a696d696e696d20636578650d006567 XMM04=650a0073746e696820636578650a0065 XMM05=756365786511006c61746f7420636578 XMM06=78650800737472617473657220726f74 XMM07=7a7566206365786509006e6567206365 XMM08=696d20636578650d0065676169727420 XMM09=6e696820636578650a00657a696d696e XMM10=11006c61746f7420636578650a007374 XMM11=7472617473657220726f747563657865 XMM12=65786509006e65672063657865080073 XMM13=6e616320636578650e007a7a75662063 XMM14=65657320636578650a00657461646964 XMM15=00006873616d7320636578650a007364