={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0x4e000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:06:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f00000000c0)="0000000200000080000000000d5bbdd588c4cf76cd8b0000170000000000000000", 0x21}, {0x0, 0x0, 0x10000001002}, {&(0x7f0000000080)="82b44e3220ebae3dc47b0c1a4eaa", 0xe, 0x1b}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001640), 0x111000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x401ffc000) [ 2659.269801][T22365] sg_write: data in/out 263275809/44 bytes for SCSI command 0x68-- guessing data in; [ 2659.269801][T22365] program syz-executor.3 not setting count and/or reply_len properly 02:06:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x119) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) sendfile(r2, r3, 0x0, 0x401ffc000) 02:06:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {r3, r4}, {r3}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {r3}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {0x0, r4}, {}, {}, {r3, r4}, {r2}, {}, {}, {r2, r4}, {}, {r3, r4}, {}, {r2}, {r2, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r3}, {r3}, {}, {}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {}, {}, {r3, r4}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2}, {r3}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {0x0, r4}, {r2}, {r3, r4}, {r2, r4}, {r3, r4}, {r3}, {r2}, {}, {0x0, r4}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa64f, 0x0, @perf_bp, 0x0, 0x200, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000018c0)={0x3, 0x80, 0xb8, 0x2, 0x0, 0x7f, 0x0, 0x2, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x1}, 0x10, 0x9, 0xb4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000000400)={{}, r8, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16]}, @devid}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, r11, 0x80000000, 0x8, 0xffffffffffffffce, 0xfffffffeffffffff}) sendmsg$NLBL_CIPSOV4_C_REMOVE(r12, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYRESOCT, @ANYRES32=r7, @ANYRES32, @ANYRES64, @ANYRESHEX=r5], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) r13 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r13, 0x0, 0x401ffc000) 02:06:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000040)) sendfile(r1, r2, 0x0, 0x401ffc000) 02:06:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='binfmt_misc\x00', &(0x7f0000000140)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='+^\x00', &(0x7f0000000240)='silent\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='%[*\'-).-[,\x00', &(0x7f00000002c0)='-#(\xe9\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000580)='.-@&:(*\x00', &(0x7f00000005c0)="e5", 0x1) close(r1) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:06:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_nanosleep(0x10, 0x0, 0x0, 0x0) 02:06:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) openat2(r4, &(0x7f0000000280)='./file1\x00', &(0x7f0000000d80)={0x0, 0x20, 0x14}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000a40)='./file1\x00', 0x3, 0x2, &(0x7f0000000c80)=[{&(0x7f0000000a80)="171b837c968bf4bb92e5bb2e9f8695a7296689aa80a548c0c37f69d53955a1ad6e158640bf5c44aebe623b0dddb55c6f3dd845543c0085af3cec8577b4fee4188dd598cc5e7a480aaca489033e6645d1db6040b4d84fc838b0c9b2625091ddf426bb0c39ec8e57e26d2acd79370a43ecc148f5f69df067c90d0f94ab7c256625d8cc4d58cd51f7e59879c35a2d19c205f0c7567f35b80dfe0c4c5e3f656dba1f7e86a4af9948b8af2432cfefcc8746bc84d9114256dd1e4ef21b83074e6576b2220fb46a208edee5fe3045cb1d6604ae5cf43ba4e3d89db1cee3903038ded02cc40d6331bcdc", 0xe6, 0x330c}, {&(0x7f0000000b80)="c1ac1519c93615ab5f4bfafe2a0b74aa0c6089f00243dcf38bbac0739512fac11416a6b4631008570fcd8c3c0ae988da91ac3764711d7fb886750d6b8eaed28495ec6c0054e194f6f2b8ded31f26eab060788ffd47c506c8a75df361523042924e33114fd1b0a32414df42d737d5cafe764444473f7397ed1a92255deb4d33e09d90fdd67012a3a695e289dbe84554a8c906254e7724d27a9e90a008c9a3ecd4108106fd3910b466f3b6ba0179f2320045b621306c1d45581427e27b62117c7980c2", 0xc2, 0x100}], 0x80000, &(0x7f0000000cc0)={[{@data_err_ignore}, {@data_writeback}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xbd5}}, {@nogrpid}, {@nodelalloc}, {@journal_checksum}, {@nomblk_io_submit}, {@jqfmt_vfsv0}, {@block_validity}], [{@obj_user={'obj_user', 0x3d, 'vfat\x00'}}, {@permit_directio}, {@fsname={'fsname', 0x3d, '{$\xf6-\\+'}}]}) sendfile(r2, r3, 0x0, 0x401ffc000) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000300)="43cdc4c68706914d147ff0dd5be2b57584ee345f16bb6dec4c290116e54d12aa5b9a53e24b519320725353a30518d9f25de71bd52476aada95a3964055d1ee689e796f1ca693e47da70061685881bc7d51028779503688fdcd48ffc8cf6b68c76b627d8ee3f591088c5d48f674800d2e174fcceb6e4cb0ca4b7c99fab56a7d311fef395405286087178e9e08a6e680855f0347498a6a049eb487bbf650f1b53fcfa4b75c8c2797797ab5bcd06d2235930ebb288745766ba765b80d713edf546385ebb06c1c9f5d72bece5eb8a1d8d4c3aa5d1c8b86645b70f9", 0xd9}, {&(0x7f00000000c0)}, {&(0x7f0000000400)="318ad9e283a11b6da59e98bb3e08686c4f8c0fe691403bbfd8472da5b4c3347aaff4b92c6ece94cdaef9d7586e3bd985997380f32a732754a913e54548ad84a65b34cb4b1f082f577681dc27c9d4d5a1e6ea813dc0fa816d00bc724d4fa32005b8fa24d14365d457fc088d1703e05cc50ca3f109e33b11c9869f6a452b34d46246c8cc133b0345c5a52f339dbc9dac0600e8a8629184117d5c92f5c065b0b4ed7ef6c0d3ddfb6589c6388331a68b9821558dfe4f1c972a78e1a008", 0xbb}, {&(0x7f00000004c0)="e340c2aa49ed3375f480c99136cc39a434aae24cd08305a4aaff8744b2513abd486679b128d34a1068a0ce83a2fa49f62a99b840f5df0438c8797fa4659a6a9228011861b9993c80261ec0f19ceefc65031d905cbf95f79ed7fe643735dc51804f53e5bb4cd8765712c571bffd49", 0x6e}, {&(0x7f0000000540)="7a27426d0545d10c242af17a460c867b69da5845c8d822306ba75faf2fe8da8dcc660be4cec0b2143d6724efee08a7a2a19fdb7939b4d07ad17caa38935fde6425aa47ce65fb0dbfb57f50f91a4a00cd3509d967b890e9cc5f", 0x59}, {&(0x7f00000005c0)="47a00dea4ae735fc2c2af6713211cf304a8309af56629b3b8baee21831efb0e599c57d8aa74b651195f854a5401e69cec486777901c0cefd1af6af7ca820e20171ab882a6091c532c23d69fdf14d1191fe9ca40dfb1645c95f66fb35b38ce48ca9c5bbcb767dc97d144197c033eb4a1d9dafb4745cb8a8794ae42d9850910e436e405012ad601ca80223a685c5d348ac", 0x90}, {&(0x7f0000000680)="1b42ed35131b221f36517819f3054973b5e362a0e3d31eedc2b92a29cd6f881cfbbdff12f3d921e42e7ee2f95032e7e45b3f133775d04f3c7ea065c9692fdeb796bf573fed676fdb1fbadcffe02ef77013f22daec10b7aef8f5319aa50ed569459141a63743d338fda6dae56a86856238567a989cd922bb83d7673c44bd8f424b4467eb2811c34594ee7b4edf6f91e58aa9540e4d8fc852f4f18ee62fd353ce58342a16f3654faccaba249ab80d2a5e33d86a4b1d7e056087903478a272ca580ea70285ed86dc6832fa32181af4e9c48ab0de4bea85be37878914681a5f15a7aa94a6c3d9d5b0fa720866b6f7cc3", 0xee}, {&(0x7f0000000780)="c9eab6f895e20fa579f0996149dc2390d557aa09db7817274e560915e5387398fe8ebeb818c0cd1fbd952a6b2ec391da2f958b732ee3868d903dcd231666b2b6b4fdf5f2f811ea5eae234893bac50fe573a0ccd1b151765a3e9201b76695e1d5261b16d5e50646d984f112db31ae47c4f9ad798738628db4011217f38d95b00e81578768b90e40b3055f289cb4eed28c60c0ee52a5b45b24e5d522f333b381f01a51638041ce4997b60ca4dcfea1c1fa4a70ba1e8ccd0000ccc327f65d14a10b2d8970d43162ba812af343c6cad27218465f0c6a68", 0xd5}, {&(0x7f0000000880)="5709d7d1c73a90cad1a6248a026438b6407252cb33574c9f0da8204a563dfcaa67422c1b6b6ee421f4af7ed295afb5e73eef3934023ba3499698e7d1ee455eb7c55bf20a0dd10684229b8a6d474576097460e808b18a456faf44581e1e13f580aba221d430e98f", 0x67}], 0x9) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f00000009c0)="5a3fcbf01dee0373b6edd2d36eb5b327f932c5987c5d531a7613144df26db62690fdae08c13d2730819cab1dee58d9c1d02d9e95210799db1b55b0c5ebefd749842741bf5cb320", 0x47}, {&(0x7f0000000dc0)="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", 0x1000}], 0x2, 0x1) openat(r0, &(0x7f0000000040)='./file0\x00', 0x2600, 0x180) 02:06:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) chdir(&(0x7f0000000040)='./file0\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:06:53 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={&(0x7f00000001c0)="b5082cd6e6fd4911f9f994f3dce81aa284432cbd10c1ea308880164e19d823791009950efc87416e77128a5286dcbd63a3b7c4ca5334b06d4045e26d88c46297273165f7938564efc12255584086fae08a260ff7229b4891047be62db2b74559054a88d380112232bd4362d13f17ce3ac28d2acf2af304d09ba294957cfffde72378c40e168aa64a5494ad", &(0x7f0000000280)="9a2380ff9545f0b5a26a8a52360da0c982735902cd725d46036bfcdca54885f1f19e348827201f17f81d40c826b940240bd51c6ff5ec605d4fce603ca59c9ba80b5f3684c53402cd8ff661d9f80e37836f504b433dc667d2b4cf573d"}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000700)={{r3, r4+10000000}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_create(0x4, &(0x7f0000000300)={0x0, 0x1f, 0x2, @thr={&(0x7f00000004c0)="6ec9d2270e2876c2c35af16a7ba041734496eef65500b047f0d7cf72d18c4c4f5cb7727197d70a094d57b9ec6874bd94ad7f3c9dc28abfe6ff10acaa334222c48d696d72de0e5be28876d852c67c65a449b5c5ad46ca0b4ebac02879f67160081f95579a62cdbc84dc2af26f6240cfd58dd0c9b2bd2a7fa6d73ef1464441a5d053a0505cf65b7f3fb44e6337a4e50685a78b1dde72cf02b2a5601e2a2fb6c2098eb2466e09f54a37311622c48669c4cd70e9d08b09ac0664db63e44a458ecd03ed97fc2894ed9ebedc400fbe4589555915f6798968babc91c8951dfc3821e855057f7e8c8ef76f554777b8aa493252915759c7", &(0x7f0000000140)="dd72c2dd76f1438080f04c7496b47ff8c02f9b5553716267b48e44"}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000640)={{r7, r8+10000000}, {r9, r10+10000000}}, &(0x7f0000000680)) 02:06:54 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x26, 0x4, @thr={&(0x7f0000000280)="b62ce8d023d4cc134e49aad6c7ac32959ccaff62c9938b5fb3b8960fc9810ad679ff213970093ff6ffaf3e8172b573ed9606e8aa9c04118c3db777459d6160337c5ffc1c7573859b3673eb17c7ecc8da33d8f3a13bcfbf", &(0x7f0000000700)="24f3464dd1e70be7e00622197bee85c69207417ab65987e7cad4cd7a443d89223fa3aaa6bff51b2855b23e09e975a5cb8d6c84ca4c02355d1a6cd715c5ca2438f004b69a252b460f56725c0fa3f6c34946b37ded9d946d63ceb0497cf14584e04c404d88663de99a78cddbc78b2426f523537cbecd0c7e842a7fb0316a9c3315dea845ddd2273bd626d029a014e3bba512a3a16056d0bfe95e36dcdc519e2b57b749efea455aa5e526b79897a5ddb55e487446d6e14f1ca2b7b06fc5577c76d85ad934710a27a71217e5b43472b7565631d9ad659a98e1188cff8e3c58d413ec2a1d08c9314c4bc74b285be0e00a29e2b91b4eb873bdea80f7346fac4fe71acbd9b0574f4d63dceac0317c48ef391ff4b308007f5787c5332aa5b277825e1cbe272545bb2924b0608b9e9a74e7dd3cda06578b9b5c6d23833827ac8d1f1f2f067795bd53e2989862e6d7e5cb6df2f7c4e0cbe6b713c0332b6a0ea1dc3609d863f86c3569343896852bc2192bc73efc6232c7aaba01835c2a5f64ccb65308cc2e05d6fd4b6a1df1c357fbca8969a98be07fa6c94253ae81c78bf9466384b7221ad617af15e38af3e7cade2015813beced2e453e6beed78b9078593318d1d9019db71a6122ce4ae7dc6dd507883693f9d0660fcf6d976f7da9bd1885ecc483f444e6998a5ce5606e56b8a68b01da0a93477531126239226263bc40afe9a2e0ec83528cd767102ae9d3511b083cc09d30c4a2a05d89e5e92edb4c89c407a7a2f1b6047d890b55d086e76d9baef16d810e5b4099dbb8a8bf2b980a28a3ab012595b31fa4b8ebcfd8cd1fa0ae9a322955931a1d3f82852e16718c0322a7a5a2bb891cb72619b89e1fa813318c271ccbbccf6b6b39e6ecc2bc20605af93d5d6951613b05dd6e6ab01dacb2dd9e6eb62bf8d35a9a89a14a4d9f7b0b2f2f108f538de17ce43641ef6e99bed83ae809e959470168ce54044caa51eec297145a125a061b392d7bcda4a9d772035d5420be3df7ce24f134d82f2e4dce125c1d0672256aa8d878abeca295d346a37ae7b89ad0802806e788fae12ca449cc8d9482dda006624b90641b57bdde07881a54d855c6583e35f79863b9b72ccca183c0e060b837768b9ed71267b18dfc46c100be37befef9238fb2e224a436e913e6fbd706c6816d397948630c05f48676c1650884b62b074ecf6e5d2ca8ba59c4530f5aea1943216dca758fcfe90a0031be7f6a96dec2b03d24b8a6703f6453d3b8e404a97be87bf791b0f41011731cabfff56e253ba52c68929179cad7d3a1e4da892b8dd65afe4bef57dd83e3e60261e215fa7e814b51c148cbee55b0a1c428e7dbc43ff232abf9d503bd398540d71a84b140225057684e01d836cf280602d1682a0a73c70926d3fbee7f424d1f10260d26a66f1cb14a287f42ee3f50169ad29cc04a3c52f39bff1e979dde6b208c14aaaea904188df49091ced00a2f486e80e14d6ca92ec7f6f64f59ba31039e0939768b4816f3b207dc9a6e44a9d62e37b95e47ed83bab342dfbd1a0ec884128da1b972fdb2105ac8e36b8cab9c2f675743b7714eab64a2ae59daa6d66d56918daadf5c4b1a884908c40e27fe74b917e64cbb82871139d078b4baadc4fb41c64bc06e66d6712b8a43bc906c699dcf3c0b27d4a2a06f4ad0594b0c4b7c48a3a4f2419275bb54e269751c8b71dd0b9a547205848aba9c3a0a6709e862838d7558b4f6b40ff88ffcc29d1633bbf080f6a5a13113c20ea973b1926e2b6f42e7edd4b8df70d6e0366c9a63c15d9d38cde2c82a40551eb5fafdfd2d2f5ec1325cd90eefd4baa6a9a484535c695322e4472f5ae2242805c0040a34c6210b5f737ae2a14cccd4020ca9a1fdece72a2888e87fd2b166577dfe6d819c8a80888710d97d1dd2b1a017e1bd04e2b92a68b8fb3a6dcede1b363c4f9eb973a5594786e3687a36f072978fc61503a3d7a6f13d608d9a2333116ac0bc0351fed5a79b208eb001b55ea84d7ab9451032f308669dd168322ad932bc466d9cf399c3bd05f4796e9256b3cd8cdc26579a511f28ba69772503fc694650ec5fd49804d73f911a41c6159a863085ee21995feb488bc18ed2c3f1c82c6ddbb8b9737778b92fc628cb01f31351a12781e74a4f9f1925ffa4391aba8eb892699b63b7916be653193a201cb3e42a0d55509d37454ebf76fa4c16e2fd9e37d6af7ee69cd72f4d316d115c6988067467d56828115c7382c7f9422e9b80e473b4f6df76d3b3c7d1e8d5aa6bd5088ff8be8dfded1a1fcbc409c276c661ef17ef6e71ea5334b19fe2d8c10696675bf9e289c9df40682cad033727189113b1e9b7d2c00339f4dcfa9927ffab6f632ca45da99db2d7b0b659db6f15dfca65df386ebcef3afd74f95212b1227565567ac0cb93a5baf87ef6bb7c2e49b091a8d6ea996a3edb888bf948abf9cf90d7ceb791a749a29c07e71ea1c9e567908efbdefce742b30c005b69d79f0239868a138a3d889ad4b12ae4febb344a9b30c69b3eff3a2543c7f0311aa8eb26707cedddbfadcf4a0725f04621068871c5f645bb7125eaae9810edd742ad58a7d87ed98b3bb295ebe5a80ee25e754681ec5e92520e29388829e4129bc3eee2ae363c291c7039c4e38bd715e26d17882e850e774d9d33d04edd42f7ea184cfb23caf4d3a070dfeca9141b8fd8870d0936faa64ec5c13d1e0b8e89e44b9df2cf0e969b9273b5feb58bd4ccaddaf2c9e1c44f8894ee36dd0bb4279c20584c40d964f626b94782b1e90fd3d1f80257b27c7b691dafd22458db01cff559b2f19c15c4b52d190bdfc65d30fa05f08c2ed1ee9c372f1e72f1eaa311095fa059e6f3496406f64190b03ca434bc6d52108d5de0069f0beebd3e636f45e0414d1e7dc178393e159e58f2f1cdc7026a1e8a8339d1a68fe8a1f0da28f3203767fa894af8461a8b06bd5b56f756709cb9a94cc28a391a36ab42cb54671f70a49e1b855a17a40da9b85f866560ca5f09102e613bdd13e2527056e4aa28cc2e7fee8ea74d536aa169a62b2b32c841269e7a7a3d39d7c3f66fe1d7d03fa7b59c28fab76608d53e7748570fd6cb36a4f374b69a40bf20bac951c537135828b3ab6a4aa061a1c3b2b76fba5d9c7e2e9c98b214b73f24104a9cdbbd88a95f72205bfa2705a9a1398a3e82ff850bcc06e2a4e1105d855ff4d33ddc4740caf596981d3433facd86c8f8ee48a6934b164f9441c4e00f56b2c2635e44d05c20c91ff8946fbae14b63a00e037b0561687e09f715ffd9c044dafaf0c2e9cfbd74438c5c0ca28af618d32e33a13767b65882817296bc3f4f182b14deadab1a019b583d39097d9d141324628c72a0c1bfcc08dc01f322cf8319418e613f3d70549e869f850e27f942490a2703845e3f4e16917973d4537034b0add6c53097af619c511d76d9378b52bcea917f9c74496d1283d4939b4437dd15db4e562bd5daa91e0003becdd886525e2fa1cef1067ae1a74c1d0b3e83802d0e792af138c5e608fbd04f7d7adaa9ffcf8c1f331591ae5df8884b1b357689ff8db7ab6f85e4d0c44648eb12712ec65bfa782f036ad86fbaf6c8aa216ceae20eec97678d4776dd95c9292103bbdde5395b968c275a85fd18dfd2b32ecc6568bc38fedf1c77212bd786c1590ac60a588bb2e0efbfa6ef03db9c3ba0bd5711931625e9c2cb6ad055d9a84225937bf55c98360c7479e4a3ecaab2d8fc72f676cfaea27004692c7d8e7efd307822e2356fed01dbb9c8a054dcc84690536687794684c582dcce936c0030283f8499ab3b4df97fa8f3f05036540bb793a78d1392e1d8154623abb648b715c179a34538395fbc382c7f5b00e434610f7ecb62c7de07e88e3b438420615d5e8cd0184b8b2c12277b62e3cb5bdef0123bc411751cf554e739a75015a3f7687f9d9f3de744302df00862f522b8ddf3a7907ceddf8628c9061a1a32f855301082131e7b568cb78a44b0af4a1efc02d47913f8c5b9b6d094245d6ce12802170da77751f20e29f36a125e71891e9e76a636a48ca3feecd668deeba6b32c9ced30cdd032d3bdf28b0c619dede1b0141163a1f0f7d667575c04b24af970d3bdb5000d74d2d090e2b1581b11437f07e531dff7fc07278d21bbf6b3c7fbcc7cb27012500cd3ed5f09126f5e58f4b57d05fa2258b2aab11b56ea8a66259387a19b6a38f063f5cdb10bb0a7f4fc77d3964c7708831d9e7b966707bd79fec68ebf997038d3e7af03da89c12050f3b63ec7e260b073f00644ec9efb61c2d5512713630b408d63593aeaada74711d1ca26ed8aed657b027133d82b7b0d43cb57b921f7938612a8933abbb70d7a2736bce823fecf12b7ce302ab9da0ce598bddaa182e4e30bd049637540945fcf64b17ca0f6bab075052fc26c2785b2f3f8c909e10f026f3aec7f8f9f152db23262561aaa1e050ba826957b5440a8d499f9f9047a2927f1a62dca11fb92443c956049d720ca58bbcedfdf27019df64a6d901af05ff628110965b85612ee987a47a894b7ba736cb54caf8bac9044719d2994481abf204e5bd3cb9bd83d2c10b283c172990c6c458815ebc86068c427da5e496500e1ff14daf606b396c05dccd7f5be55b88f2e1475397f633a168b54cf46e6d3d084d233e290d8b2759fef27ebf5e06bc842774ab816f8200ae74e7c8e805c57f576dd35410227f4a5b66b128b3845704bb2ba052cf4969074f60299bef60962794009855b2e9e87e77cb5e6ec3460faa1a6fd61d5f546945bd89135e946080b019244ee232f12a56caab157b3a2fb5abf2b9aecf616cb696c6e253df6b94d7d8913ff4f158ebc4511d1e1f7321949a94423772bfb6bba2590cbb162d961f2cc2b0022e266624530d1362a90605dcb02a30ffe6dce48adf25c55fec50059324e48e356619d821de25f6a82cf7dffc68229cad331b2fcc4c2713f95891565cebae36cca22459589bd99f04a7580f6708ce408c731f3d1f30dda23e219c28bbdb92234419f26c645525099209dc32e9eda884e89cc563b43836390f6dab2511a74f26adde283a979eeeebbf2ff23827cd42b8bc2543ec520c5703c1d73cf05360cfe0a4b2a3dffdb45944e80c3ba0eeabfa141236935cf1fa4ccd31ab147af09b121b50a08a162589fcf4585397cfa18d332ef1d31539e3184d845d62c65f66e5214e0222d7308bf5fa3272633b71eef0966ac12cf61cd5ded6fcbabeedccad6244bc6085a37ccb51d9ad06011313d136f6c22bad3586c92089df9bbdc835826d5e4b2116da8bbc73d917182b1f763af4df966e8620ac31898369f12576976f9cbfd53f1c5d7dfc7d6be0384d21e75afa5daaec586f02474b1bf36e695e2101060ecda31d83a598a491fc9bc5d616a1f747495a0f6ebd651f1e3940abdc65876b89aa99ce5a021d61cc190a0a95d74c4b3815fb065f86f71d956b2e3cc5e6de87db62ba09d4a4478b686cd08f5688d5bee9b2d1ec164bd62155c1fa25009a0e1ba44737506fa0e819444bbfb06a6281ad2f49900c31e9a8363871dc214b9d9520d4a0f245e347a93d73b44586165ab66b905cee54e2109993355a5c1e529c181694a70326dfe0055446925b198223dc577cb4827dd507d6110f62b054a583a491502b010de026b11feb34e516e7f7fb3e5007e9f0784732434acb7ae786a44e03860f9b5fef0c6092a6a18974570b31f3dee747fed30920457a170655e341141dba5fd912be9365545e7e9c747f3ae12b370eb48ff20e84be79e1e8ebcb694b96758cbf63d7808b8b15c666488bd8ddba0836eda4e"}}, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000380)={{r2, r3+10000000}, {0x77359400}}, &(0x7f00000003c0)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) io_submit(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000680)="53000000fcffffff060000000200040000009600000000000000a40000000000348a67b68c4cc357f70b12535b38940d748bc0ec6c000000001b1bab0525dcda9f60dd168581a4095dc9fab22c7600f8d85f960511335d85", 0x58}, {&(0x7f0000000200)="5b40b27e4545b10fa4f49e9a517b21958bc33fa1fddbde370910cc03db2c791f4250dcfb68cfeb71820281db0a132ba7a197dd96d0fe580a83019d175e9b8e4e8257ff158acf06c80d31a7aff7d4a4c9e29672f9e6573ef624783ae6", 0x5c}], 0x2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:06:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_nanosleep(0x10, 0x0, 0x0, 0x0) 02:06:54 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}, {0x77359400}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000200), &(0x7f0000000280)) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000002c0)={0x0, 0xd349}, &(0x7f00006c8000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:06:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) mkdir(&(0x7f0000000040)='./file0\x00', 0x18) 02:06:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0/file0', [{0x20, '/'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, '{:'}, {0x20, '][@!'}], 0xa, "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"}, 0x12c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f00000006c0), 0x345540, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000580)={'broute\x00', 0x0, 0x3, 0xf6, [0x7, 0x8, 0x9, 0x68b, 0x2e, 0x7ff], 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f0000000480)=""/246}, &(0x7f0000000200)=0x78) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES16], 0x8800000) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) getsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000600)=""/180, &(0x7f0000000280)=0xb4) sendfile(r3, r4, 0x0, 0x401ffc000) fcntl$setownex(r4, 0xf, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) 02:06:54 executing program 4 (fault-call:3 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2662.316030][T22453] FAULT_INJECTION: forcing a failure. [ 2662.316030][T22453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2662.329209][T22453] CPU: 1 PID: 22453 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2662.339099][T22453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2662.349162][T22453] Call Trace: [ 2662.352436][T22453] dump_stack_lvl+0xb7/0x103 [ 2662.357123][T22453] dump_stack+0x11/0x1a [ 2662.361325][T22453] should_fail+0x23c/0x250 [ 2662.365815][T22453] should_fail_usercopy+0x16/0x20 [ 2662.370837][T22453] _copy_from_user+0x1c/0xd0 [ 2662.375443][T22453] __x64_sys_io_uring_setup+0x4b/0x120 [ 2662.381028][T22453] ? fput+0x2d/0x130 [ 2662.383364][T22456] sg_write: data in/out 263275809/44 bytes for SCSI command 0x68-- guessing data in; [ 2662.383364][T22456] program syz-executor.3 not setting count and/or reply_len properly [ 2662.385012][T22453] ? fpregs_assert_state_consistent+0x7d/0x90 [ 2662.385035][T22453] ? syscall_trace_enter+0x153/0x290 [ 2662.414165][T22453] ? exit_to_user_mode_prepare+0x65/0x190 [ 2662.420011][T22453] do_syscall_64+0x3d/0x90 [ 2662.424473][T22453] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2662.430365][T22453] RIP: 0033:0x4665f9 [ 2662.434249][T22453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2662.454301][T22453] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 02:06:54 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup(r0) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x401ffc000) 02:06:54 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="16285d76d3ba6fcc21a1fd43a176ef2d2d9796e8c39c001451b0977888aad190fb400c79d34a23c268abadc2203c06107c2ad47de1a2f2be9a664b8802e5b7768ca6fe09f622209895ce414ccc674631d437aff575827b771cba003689425dd587538dfa41f89c07b6a06048b9ac0e5d553a88e91287d0107e681b1db3addd116b0e9dd31d313aa85785ca8fbcc2e840aeff08eb3580a688dd5761002786af3db097895fe6338e8ef55e9f89762da31d97cd6d2be16375cfce063cd359305e8f2a37a855490c9f76d8d27f3afe0d8ffa7f62fc02d79147af430611e830507ed4ea8e14adcc454fb90fea389e05b2ea287a9d478942e9868716e0fb2f9e931cc4") timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x10000, &(0x7f0000000280)="d9d5e87e156240eab4426ebcc54aea8f1dbf22ddadee5474ec4af3184e552e502fd0bd416631b22d6af0cd34244f4ec1de4015ad55826cc54b23d5b9f5307f2b5fdf3aa7ec5fa3cffd8408574599de7df2b8d4bb746a7d409261acea8484930dcd79bb1402108297ebce1d1bdee32d4d2ae28f8f6900044f8afb2925e44d467a77ba997b2b904fd054469c924bffbf231e0d0fee624d4ebe67298b45628dd207822dbbe3604c8929e701e21d633b8a45", &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="965adaa14879ad3a8c893e869d640741349367249c6f2727f823968441bc358ef6f2957cd6c5465a6788c92d75f5e0bf35ec70aa59b76b67c0a72c9bd34f8921eb668c5e82cf1c3600ab2a5bf37d4f6c1f16f6681bcec464c1ad05e41e8547ffa7061f7e1f9431b282ceaa25b02ead0c6ed6c3ff5169e9da57de06d60c6fbaa71f0ac6a792f7b0cfe8ec8212b728c8d8fcf55f5b59b32339ff6a3028691aee3ee9354ba6f006fa6529f12a16c058c496b38d525371f3935736e7103eee3861699606") exit_group(0x0) clone(0x10197800, &(0x7f0000000080)="247bb2419f2dd632d3c3cc4f2869c9dd", &(0x7f00000005c0), &(0x7f00000001c0), &(0x7f0000000200)="d73b80496323bc2604813f504e1504a7ac5b6e9b3e737c219808a0cf67bb42c72f517de1a13eaf96aa770b405201db0b26b479d9477f96afc1096dda78799b77efff65c7e901b7701f7100c3525cd0") ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 2662.462716][T22453] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2662.470860][T22453] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2662.478825][T22453] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2662.486788][T22453] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2662.494751][T22453] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:06:54 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:06:54 executing program 4 (fault-call:3 fault-nth:1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2662.671056][T22477] FAULT_INJECTION: forcing a failure. [ 2662.671056][T22477] name failslab, interval 1, probability 0, space 0, times 0 [ 2662.683775][T22477] CPU: 1 PID: 22477 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2662.693610][T22477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2662.703748][T22477] Call Trace: [ 2662.707024][T22477] dump_stack_lvl+0xb7/0x103 [ 2662.711625][T22477] dump_stack+0x11/0x1a [ 2662.715783][T22477] should_fail+0x23c/0x250 [ 2662.720208][T22477] __should_failslab+0x81/0x90 [ 2662.725667][T22477] ? io_uring_create+0x121/0x1980 [ 2662.730726][T22477] should_failslab+0x5/0x20 [ 2662.735240][T22477] kmem_cache_alloc_trace+0x49/0x310 [ 2662.740523][T22477] ? get_pid_task+0x8b/0xc0 [ 2662.745138][T22477] io_uring_create+0x121/0x1980 [ 2662.750008][T22477] ? proc_fail_nth_read+0x140/0x140 [ 2662.755382][T22477] ? vfs_write+0x5e0/0x8c0 [ 2662.759827][T22477] ? should_fail+0xd6/0x250 [ 2662.764584][T22477] __x64_sys_io_uring_setup+0xe1/0x120 [ 2662.770054][T22477] do_syscall_64+0x3d/0x90 [ 2662.774591][T22477] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2662.780533][T22477] RIP: 0033:0x4665f9 [ 2662.784486][T22477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2662.804207][T22477] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2662.812624][T22477] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 02:06:54 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES64=r2, @ANYRESOCT=r1, @ANYRESHEX=r3], 0x8800000) r4 = open(&(0x7f0000000040)='./file0\x00', 0x4e101, 0x54) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x401ffc000) 02:06:54 executing program 4 (fault-call:3 fault-nth:2): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2662.820596][T22477] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2662.828660][T22477] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2662.836659][T22477] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2662.844624][T22477] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2662.910168][T22488] FAULT_INJECTION: forcing a failure. [ 2662.910168][T22488] name failslab, interval 1, probability 0, space 0, times 0 [ 2662.923018][T22488] CPU: 1 PID: 22488 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2662.932852][T22488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2662.943170][T22488] Call Trace: [ 2662.946527][T22488] dump_stack_lvl+0xb7/0x103 [ 2662.951131][T22488] dump_stack+0x11/0x1a [ 2662.955285][T22488] should_fail+0x23c/0x250 [ 2662.959702][T22488] ? io_uring_create+0x18e/0x1980 [ 2662.964744][T22488] __should_failslab+0x81/0x90 [ 2662.969541][T22488] should_failslab+0x5/0x20 [ 2662.974049][T22488] __kmalloc+0x66/0x340 [ 2662.978204][T22488] ? kmem_cache_alloc_trace+0x20f/0x310 [ 2662.983755][T22488] ? io_uring_create+0x121/0x1980 [ 2662.988857][T22488] io_uring_create+0x18e/0x1980 [ 2662.993712][T22488] ? proc_fail_nth_read+0x140/0x140 [ 2662.998998][T22488] ? vfs_write+0x5e0/0x8c0 [ 2663.003424][T22488] __x64_sys_io_uring_setup+0xe1/0x120 [ 2663.008918][T22488] do_syscall_64+0x3d/0x90 [ 2663.013355][T22488] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2663.019393][T22488] RIP: 0033:0x4665f9 [ 2663.023284][T22488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2663.042894][T22488] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2663.051303][T22488] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2663.059270][T22488] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2663.067345][T22488] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2663.075311][T22488] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2663.083303][T22488] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:06:57 executing program 3 (fault-call:8 fault-nth:0): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:06:57 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{}, {r1, r2+60000000}}, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r4+10000000}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x3, &(0x7f00000016c0)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, &(0x7f0000000580)="a1c3ad49258079a69c9dbd6fab651636fc228cd470014a615981c23dfaf0675804587b1c0055fc09564cd248d9349f99aa92948797173c", 0x37, 0x5, 0x0, 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x27ee, r5, &(0x7f0000000600)="c874b5b9bdc2a0cf2b72595e187c93a3a0d3b351627237ae76debab5021766ed0deb208ff5ec4286b3ba67fbfd7cc17e87ea7dfc614ea52576e9d814bcda0e6f2addda09187d57ea34998e438a29773522eb25f45b28bbce7c535e1c62cf8f0ba850f4e100037d8a2460d2ccfc5e2c06bc712dd5a556c1211d39687e2414ce383b5b3a1ca13f4170b72fb9ea807ec68aad58962a00f1efea1139f58212e7517078e06700b74c04a0e33db0907479a4cc42827fb950eddb5187cb5c3c2207299558aa6761666f8e068c58f78b3b03fa950dc58444e2f5803e2e66a32d82913bf89078eb2f1e3979add81babb6b7fab18b27a107e1feec1a1aee48a71ac16ffa01bd72818b6a428e8991b992d4961acae69edadbc6ab678b4fe34e19cb54fa8c52bf2ccb102f62a61c9712acde74a8dde18bb2f905207957d1e5c6a462ea9054d9599c6c556f502adda7027ff7dcb794bce393b46d29e958c80fffbd8928782290a998afbb7ddd5f98690bb150b146406a858459eeb1c6fdc2fcbc5ecbfe8db8633df785f68c3656f8ceefec8926c25a65c58bf9aa37b346e92919d526abd1a88f8bb17f92b38c38cb9a7111d209b62d38cc357b8464d979787303706c5b2695ef981c8abccb59643a7992b9a6c1c7cfa149199f7aad7d69899c1785fbe3b3902c25a739b20294f1c05efb1aa4a735caf13d16b16c1f61125c99b9d049e3122a588ffa4fdb44486faf3eeb906082a5a55d8cca64720df226069f92d2b5ed4f2eb3a622e896d4b7b3d211c35a422b81b13d15524cb51cc323a627a40f868247cd786fc1031678a918ab6a33d3f5ea8d23545274907c407a65a3384d50c31d59f75c31984c7230c9b9833a695dd605bb1cc3645de9122eb58bd67724c1b36817334d56a5134edaf44db07d63b75b47c00b404dbaf4e645325bcde1a703a96334318442a09411288f9e7a83b75d5f502207cb7bb0a5dbbb6f5ab41ff98d73a198c1d589c1177b87e2639dd946d06dcb882c5261c6f230138c7a8274e110ddbb90ff0afd843641b9eeee20b95501067aaa3d3e85bcd23aa3f17e02fa537e2c8bf9a543d1a51668b92401f59a4a4a44c288de6cdb0fb3a0c9209af77a9a28b368ac3bfd07f42ccbe29cf8b35f961d0db8e7e43c792b66ca8b54f6e138b5f1dcd3667a41b600826bee9670fbc1d25bc68134d3f51a77a2010293c406f3114e9464e58fe1c6d300fabfce04f65dcb21e7dde84096360c5ef7d9bb189cd25434b2d1920ddcef306d1875d4d122e82302355c45f9bf004fab34c831c6337721c5a2eb9b9965dcba1063376f1003d0619ee060f8f11417f60ebdfb8057ae79404185d873b3b1632b6c23b81b08c3c0d0493fb9e2034759e3afc94285a45f5a3711cefa84ec6a49e6bd7f6669844972606b369f15f5c595f62e6ef5ffd7173a8e7cacd8233ac8ef044f85c6dcbd18740b2687e2b83272794d297b41339c75f90bb7a66b5877778965cb7ef92e5b13893341ea7a374d8417a76fd9484b2695cae59201c049130ae3b3dd685e7c1454dc525a98129e58b758676da2cc01f20ab5921c3ed9ab8d62ef6953e74a714202f28472d03a0a421cab2a460eede5d5a3892f810f360c9ce7b81ea232af8c8d2a602c96603382d0232e3be589db987bf9c7f8aa847c29be6980036524dee0dd30674a17b02f0ff0ebda6c3750de9d1349502124bc39585423ad63683f87b4049117d7174740f536180e4d3e9ad843f280e78184b157ed3059ec6d328abe8f3622c31293588e05c43a243ecd02b1c13766f17609cf6bd19a38652a0856fd937a5bcf97eecccee0eeb57895df0af52090dc11017fc820a48ebb3391c8b05da5d076bbc978832e98abd93e7b96de0b74b0cff49910fc7a7a424a084de829c7366bdfeacbeb0dabfe8899c6b6ed815adc7f0ea85b7fe591b7e2295c6ed026c6cef78c55ffd6dfc7b8176871a3091c08e469bd9d1b38db7c75084a10d8f628abe698343aa73d39f61a4815121fe92e86a56dc6e051096ac7adc48624b0a7d4204c933ccb22bf2bb9501ed8e0230568b7a2e7d142b5df7c95bff0b6bfdb67f61fe2947115720802a47aee8b300c5b42fb9f51d6e64c89e8d94ed125487c65b36faa66dba4eab6e0f750ac30a998a1fabc84c2ad4388b47ff4286aa1f435a20572c2c507c7905669c75de5b22f73e804d75441f39c101dc640829152e1e5b89826fde450ad5b4139aa23ebe89fe35a0a3502052aaecc9872071b02f5c0fbfafc488fbe222f60d0b012703fd74037bbde289f4ea66d6778c431e5c6789e153cb35e17f5f31acfe3619ec4295b7785ea12596343f0970da642373e30a1ce3c22034a63f7f2f1de05b212cafa1ff17fb13e73d17b631acda8fe830a242cc9f08747ab9bfa4a193aea1c091f641ced915373d5125749cee76199d646b20e42330b4fd9faa4da56b5851a86d8db9ce106e954dcf4861da096813e0f4061a7a9d33e0acf88cab2037cacbd6aa97200612d06414beaa32dd34e6f330ab5b92d330ebc7fdb99b429f85a39e48ee414450d2c8680a2850b1629ec4c8fc21c80931598b26fb9dbe659cbb3575ebc769aa09f1f7f90db197eccd2310c9826da7dd855d16d189a6b25c83d41252778cc5527338dfeacbe80f5af9839303c81aca9a502498eb972a3fa1d3d5c3447a4209b3f0d7e2031d4eef307f59a9704052c7f5dec3f3548b72ad9feba1090d5dae3186f1d641b2d77fb32ec8c02db802d5414036cdaa87975dfb0662e05da53fc0ba3ebe2b672e1242aaaa2a6981f7cd3eb49c18bbeb81941cc9fac49a5c62852eeae23b14c50133442b741f58e9002908f23eb74d72e953a7428c1c4decf7759575674c69301c5af3c4faa030de7736a2e2f96b10802268ddf276e5093792883298d9a5039767421c26bf7ded8d7cfa37e9bd4207422a56337f7208831eff00ab0a7b09f70dbad0f0ab1cca5559b31ac8e9ce31c05d3ef3b42f422b6891204e8d20b2670f7cc299d5d196851f1c0194fe36d4a5cd592706e8388bc3fefa3f79a675fd819ea4d650db397972e5b2374c936727c24c516472fb83fa06236d34227f1141f40474a6b4bbd5587cb528298f0dcd8d86a186064bc361e624d5db2eef06d2c553b28b9d119c3851ecda7c90b38c28341011e6ad0f91a1ec5728afabe40fd46c04675d0127c84bd37b9efe7fe67828f7d60d34f9a762c35a820fb41a3cc8aae156b2516a166b6d7438e6cdc52827d841f654edbac61a98769e4ee29f093cf4a1d28047bd738e428f656b22d4f6e3637cfce5c88506ec69dc1ac64f25ea87e1a7dda0ac9fe99ea5497b60a6ffe316c585183de7baa36d9bcb548511206da1e8efe1122461edade6fc87025bd1cb9a2ff3e342c76a7c3518612c38bd54ffe64287b76e25635f6799ab1a98c7f65131afa7471cc590641f30c624a85b9dfeb64d6129ca456f160ad8512d26fcff91da4c96af0ae5fe5d7708692c9f07afa6546030b6568c41fe4b2e5b79c7d99339b99132e9ecae12b7414e1c37a02ee6e2bd40290bf21503fbfed21135f098e00eac05a33007cbd883d568377474ac4c2e17ff1ace27b01c796a919c1aafb7b6ef8e08e1bf0139f8c80171c064869c0d95e266967d6d72f00d70b4c2d02036afddbdc90d6dce01dbda4d891729c1ddb7f3e1d59e81c1e6fbd932608924f3c6682edcb6a8f55089f0473c2ab19768682c85687e01ee485a32ae78683c0c230c57d340ab53f071348d3fe014dc05be94e4146473d5077aba1986a2e4865ea9a5a78cd993848f09988ba6ced9a22e2987d8916bbcb99e54c7a6911f3bfb2b7e6b6656d8747f3176f93913354cf3b9be573b8cc28cb3961bdd8fc42f0d8d8848a0acaded29060e1f8d933a26c6f25a63f75349afa722c19ec2fefdf0bab0f1e9d76b7a49e502656d6697ff8ff8e844a324cb6f1ffdf9b7a4be7084692de4fcac9e2b49eb9575cc443e0bdfdb40c661f5cea6bdc2436ca44a9e5b84f0535eaad1275f99ce1676a8540a8291af5d0beb8fcc1abfa229cd74badf39a42610f4a61831b4301cd9bbabc6bb9e6eac9ce298d90df320d9be0d5b56caa05ba4b053a8553d90446daa7456cbf3205d46ef067aeeb20584d7f28dd4483ea81b827f7a4738939bc777d170bac00fc0f5f07f0f5c9ddf802f6e8171352b99821a4c185502d5296aef56e0c4f7761f6b042cda80804caec9184fc8658165d8d6d70a31c406158022d5bcc670066d8649b4ec9029c6359d9082e064e0743382dd0ad3c1d18b225a4894f956ee3f872f271e3eb6ef595d77d611b7bb0eccaadc7c92d7d1160f31a2c695bba6ad049da30be78cc25a73f44c447faa2c5bdc58962c470e36ba8e4b9908505ef53d59426d45acc30c9b0ec9c81a1cd9e72278cd67f67163b0930c846fdac6b55569d53083630f0c5d856942546fdc2f37a7d36bd32508f038a792408ffd7139cb7d1e954f82b1cd7514ea3462c372ab0417d1d9cbf0911209cf26b18e9fc34de5504be61408e59499993c14e0877dad165332a1bbe9035689a3f31305fe5ce61776c1bf1be0be350dafbd6af1bec36d68df1d51b8bde37c58e6b38c948219c3a3b8d6b5f318c6fbe64782ab09a4874981cdfab0770cfca972eed36bdd1a7a2674f3ea0cbf29abd475f00b02faebb441b2e542f72db0364a29e26dc4c3debe9626ec85c5e3ffb1efdb9ac4667d2f99126f4cb8d21d772af51a4a932490fa21a8b03a7b59ebc0531df0911e759ed2b7f771b6cc1c415b3657840e74e6353253f1ec5c9fdf5567767a4bf546214fceeac4bf0d0e83b117cc3ce14a32077dae4b61a4f3fc1167b2f049b6aa9d60e74dcfc4a66fb7ace0d473052c2ff61193fc818921ac7bdc6c6daffe1de54ef2dc3e31fd1b5a1b1b2fc82ef6994fa17dd920a45758b229ee401a859049127d011636d81af362dd9c6f77856e98a604eafb462c7dd1cfab107205f4c272d3c56592196a1c417801056e1e9b36762d801636c11c58ba4c9dfa817d0d6bb8cf8ca2fc0c88fb97aa1f839ec975b43978d5247dea429516aa6b526231ed10caba2f1c9dec2e76fbb8526eaccaf9f3a3d1b0548942dc5f9265aa3f2bd253cb2ed07020b523da9699346dfe36e69424ff7bb378ce23cc0ee5a14dfb435f99fd46ed5bfcbc56fa0f00a9076c5bf83f57805b36f8f7d57a9171b3aaa18fa8a49e87654e8e5bfd5877cd714c823dbeb1370434f62669479cb501ffa214f29da78fa02af9be2ba0d668bbaa79d3d2edc150912a69becda2f38756e09aae8e2ec48c8c028205dda54fdbff3c1e0d13491ace47db630d0e8770938801f81d1f11450a8372ea67be7df12085a3a967111317fe91999553f565674f7c9d6e150e43b334cfb24260ada47e32bbfcfe59e384c3870fabe292a158e2907269693b644d0e7353f6e3c6e34147bb6423fc141045be46077e46b39eb7afc23fd26e457763b6e04b367cb9f9109c6e2d8d26214c188bd6a9f24c5d4b2f4a4f8a83311d27d2cb0a24fa8eae6472757ef438a87bbb8999c3dfa4a22fdb6aed20fb967eeb5c1dd81ae244b1a41880f7e9de2a95b818ba9dbed91a89ef788da618a238db385280cca1c822ba8509113f1e7bce0be37038f52b9e15112ef07fa2b2b54b89df4b59580d55e74ba97da877a29465744bb64a5bb5d6ce1a0fb42916f4dfeb4d85c01392d168d54c5a5ace4c17034faee8f19226612a89947e643ff722dd017005c4b11135e3e09c6192376282a997b88ded3d4a4c7471301b81420bc6e4e5e", 0x1000, 0x3f, 0x0, 0x1}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x8, 0x2, r5, &(0x7f0000001640)="0a43b9136a460e784e4ff79c55deefc43a632234c9bb3c5923dd8d", 0x1b, 0xfffffffffffff604, 0x0, 0x1, r6}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c0000005758a0a617c769d63b5c3c03d23fe8cde30c351c667e66720baef3360ea14d", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25020000000500040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008040) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0xe, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000000}, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:06:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16=r1], 0xfffffffffffffd39) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x401ffc000) 02:06:57 executing program 4 (fault-call:3 fault-nth:3): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:06:57 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x101000, 0x5) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="a9a5985f7449b771d5a46b9559ec02580587668288aa9832ea3dff60dacdcb4f15ed8ae7cbabe68bf2a93d3ff21bd5be19ba99e326e3bd2df4609ec649add3e11fa8b2b1b16a98ae7508c02b0f82e4c6f30ba0b1e74ee6830ca1d70ce7df68cd6759c1a9228d9f8b58e46edd91b7e64dc6235a7b1d4bac80a05ed98615d08c5ce2b91ee72328eaae5be11f5ad99412bda94d272f8303ee2bea797d7ef068734856cc2d0fa04f047359dab0cbd4c3a83e6ec736", 0xb3, 0x6}], 0x140000, &(0x7f00000003c0)={[{@map_normal}, {@session={'session', 0x3d, 0x1d}}], [{@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@seclabel}, {@uid_lt={'uid<', 0xee00}}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x401ffc000) 02:06:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x38, 0x0, @tid=r0}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 2665.368636][T22516] FAULT_INJECTION: forcing a failure. [ 2665.368636][T22516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2665.369957][T22514] FAULT_INJECTION: forcing a failure. [ 2665.369957][T22514] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.382105][T22516] CPU: 0 PID: 22516 Comm: syz-executor.3 Tainted: G W 5.14.0-syzkaller #0 [ 2665.405175][T22516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2665.415565][T22516] Call Trace: [ 2665.418831][T22516] dump_stack_lvl+0xb7/0x103 [ 2665.423513][T22516] dump_stack+0x11/0x1a [ 2665.427742][T22516] should_fail+0x23c/0x250 [ 2665.432145][T22516] should_fail_usercopy+0x16/0x20 [ 2665.437154][T22516] _copy_from_user+0x1c/0xd0 [ 2665.441837][T22516] get_timespec64+0x31/0xd0 [ 2665.446354][T22516] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2665.452002][T22516] ? exit_to_user_mode_prepare+0x65/0x190 [ 2665.457779][T22516] do_syscall_64+0x3d/0x90 [ 2665.462268][T22516] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2665.468147][T22516] RIP: 0033:0x4665f9 [ 2665.472034][T22516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2665.491832][T22516] RSP: 002b:00007f1d554ad188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2665.500293][T22516] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2665.508390][T22516] RDX: 0000000020000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 2665.516497][T22516] RBP: 00007f1d554ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2665.524453][T22516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2665.532480][T22516] R13: 00007ffde36cc18f R14: 00007f1d554ad300 R15: 0000000000022000 [ 2665.540463][T22514] CPU: 1 PID: 22514 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2665.550374][T22514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2665.560430][T22514] Call Trace: [ 2665.563705][T22514] dump_stack_lvl+0xb7/0x103 [ 2665.568321][T22514] dump_stack+0x11/0x1a [ 2665.572575][T22514] should_fail+0x23c/0x250 [ 2665.576998][T22514] __should_failslab+0x81/0x90 [ 2665.581854][T22514] ? io_uring_create+0x1df/0x1980 [ 2665.587055][T22514] should_failslab+0x5/0x20 [ 2665.591610][T22514] kmem_cache_alloc_trace+0x49/0x310 [ 2665.596987][T22514] ? io_uring_create+0x18e/0x1980 [ 2665.602093][T22514] io_uring_create+0x1df/0x1980 [ 2665.606945][T22514] ? proc_fail_nth_read+0x140/0x140 [ 2665.612145][T22514] ? vfs_write+0x5e0/0x8c0 [ 2665.616568][T22514] __x64_sys_io_uring_setup+0xe1/0x120 [ 2665.622031][T22514] do_syscall_64+0x3d/0x90 [ 2665.626444][T22514] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2665.632354][T22514] RIP: 0033:0x4665f9 [ 2665.636248][T22514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2665.656058][T22514] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 02:06:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000280)="8c371e574eb324e6f4f429a161bbef65c45a34c971a138bb24573c4f2a4ee68969546d456e41ee63e1089209902cb3c11678456bf71707e0897944f84e483dfe55be36346c1a234629835e6519d3f9507686024550929851112cd77f044d052e5044851ff20a3d5356fdf3223fd89b83eaea3f473aa5b9594ade2a8b51201a2d16e6024bfdd91ad85517c3d5c3bf39617ac64c6f8e5fbe0a708241cd1ba72635dd8cdf5fc7887abe6140ece1f9b9163fd16edc0fca971fe7d8aea10b9c3f3c962a7cf855c16a224019d75dc3f53b0c2065489ce8b42402eb9419fa81dcce94f305718eedd1", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000380)="b59b2374e30e7a2ef738b3a5ede8a05f0b60fe4562284e15c9c5d9e86737dd0f1fde4a745391057acc11a4fccf99fb5c202b4a2d8fa3fe3793c2cd286cb026abf1487a3822ff1049f73f45acdf373283c7622576b8a5c6c90a295c67ff2df65eece6860b") timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f0000000140)) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 2665.664555][T22514] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2665.672703][T22514] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2665.681093][T22514] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2665.689098][T22514] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2665.697087][T22514] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:06:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) mmap(&(0x7f0000329000/0x4000)=nil, 0x4000, 0x6, 0x4008030, r4, 0xa79a4000) sendfile(r2, r3, 0x0, 0x401ffc000) 02:06:57 executing program 4 (fault-call:3 fault-nth:4): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:06:57 executing program 3 (fault-call:8 fault-nth:1): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2665.783383][T22531] FAULT_INJECTION: forcing a failure. [ 2665.783383][T22531] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.796025][T22531] CPU: 0 PID: 22531 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2665.806043][T22531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2665.816186][T22531] Call Trace: [ 2665.819590][T22531] dump_stack_lvl+0xb7/0x103 [ 2665.824411][T22531] dump_stack+0x11/0x1a [ 2665.829155][T22531] should_fail+0x23c/0x250 [ 2665.833570][T22531] ? io_uring_create+0x1980/0x1980 [ 2665.838692][T22531] __should_failslab+0x81/0x90 [ 2665.843659][T22531] ? percpu_ref_init+0x96/0x250 [ 2665.848510][T22531] should_failslab+0x5/0x20 [ 2665.853011][T22531] kmem_cache_alloc_trace+0x49/0x310 [ 2665.858297][T22531] ? io_uring_create+0x1980/0x1980 [ 2665.863499][T22531] percpu_ref_init+0x96/0x250 [ 2665.868350][T22531] io_uring_create+0x226/0x1980 [ 2665.873247][T22531] ? proc_fail_nth_read+0x140/0x140 [ 2665.878444][T22531] ? vfs_write+0x5e0/0x8c0 [ 2665.883088][T22531] __x64_sys_io_uring_setup+0xe1/0x120 [ 2665.888621][T22531] do_syscall_64+0x3d/0x90 [ 2665.893056][T22531] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2665.899211][T22531] RIP: 0033:0x4665f9 [ 2665.903150][T22531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2665.922936][T22531] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 02:06:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x12802, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:06:57 executing program 4 (fault-call:3 fault-nth:5): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2665.931561][T22531] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2665.939970][T22531] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2665.948030][T22531] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2665.956004][T22531] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2665.964144][T22531] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2666.008253][T22544] FAULT_INJECTION: forcing a failure. [ 2666.008253][T22544] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2666.021665][T22544] CPU: 1 PID: 22544 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2666.031743][T22544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2666.048134][T22544] Call Trace: [ 2666.051602][T22544] dump_stack_lvl+0xb7/0x103 [ 2666.056303][T22544] dump_stack+0x11/0x1a [ 2666.060460][T22544] should_fail+0x23c/0x250 [ 2666.064878][T22544] __alloc_pages+0x102/0x320 [ 2666.069560][T22544] alloc_pages+0x382/0x3d0 [ 2666.074065][T22544] __get_free_pages+0x8/0x30 [ 2666.078792][T22544] io_uring_create+0x944/0x1980 [ 2666.084055][T22544] __x64_sys_io_uring_setup+0xe1/0x120 [ 2666.089585][T22544] do_syscall_64+0x3d/0x90 [ 2666.093998][T22544] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2666.100074][T22544] RIP: 0033:0x4665f9 [ 2666.104000][T22544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2666.124216][T22544] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2666.132629][T22544] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2666.140760][T22544] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2666.148894][T22544] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 02:06:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000700)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) ioctl(r1, 0xd4, &(0x7f0000000300)="0b43903e3c709a6aefdced20b8dfa35b5aedf35d4cb4549a4c3fc2bda462838b7ed5ce2a0d1390eacbd16a55003fb55d557cea57b13cada37b0d15bf9128bd5aa7623fc4fdf4d5b6e2751a620912ef63a861a93189eed1aba6720a7c4ad10f25c10ea709d30add26f633cd3cd3e30736c1345395908ce3f8375d1c9d0334ea6f9456e4daaa7dd819132fb03de2972a") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind$unix(r2, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e20}, 0x6e) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x8800000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00') r4 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x401ffc000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0xfff6) preadv(r6, &(0x7f0000000600)=[{&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000003c0)=""/78, 0x4e}, {&(0x7f0000000440)=""/182, 0xb6}, {&(0x7f0000000500)=""/111, 0x6f}, {&(0x7f0000000580)=""/104, 0x68}], 0x5, 0x3, 0x2) r7 = openat$incfs(r0, &(0x7f00000000c0)='.pending_reads\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @aes256, 0x3, @desc1}) [ 2666.156887][T22544] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2666.164878][T22544] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2666.583225][T22534] FAULT_INJECTION: forcing a failure. [ 2666.583225][T22534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2666.596314][T22534] CPU: 1 PID: 22534 Comm: syz-executor.3 Tainted: G W 5.14.0-syzkaller #0 [ 2666.606367][T22534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2666.616419][T22534] Call Trace: [ 2666.619789][T22534] dump_stack_lvl+0xb7/0x103 [ 2666.624368][T22534] dump_stack+0x11/0x1a [ 2666.628506][T22534] should_fail+0x23c/0x250 [ 2666.632908][T22534] should_fail_usercopy+0x16/0x20 [ 2666.637927][T22534] _copy_to_user+0x1c/0x90 [ 2666.642339][T22534] simple_read_from_buffer+0xab/0x120 [ 2666.647714][T22534] proc_fail_nth_read+0xf6/0x140 [ 2666.652649][T22534] ? proc_fault_inject_write+0x200/0x200 [ 2666.658355][T22534] vfs_read+0x1ea/0x730 [ 2666.662542][T22534] ? __fget_light+0x21b/0x260 [ 2666.667384][T22534] ? __cond_resched+0x11/0x40 [ 2666.672049][T22534] ksys_read+0xce/0x180 [ 2666.676337][T22534] __x64_sys_read+0x3e/0x50 [ 2666.680948][T22534] do_syscall_64+0x3d/0x90 [ 2666.685414][T22534] ? irqentry_exit+0xe/0x30 [ 2666.689906][T22534] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2666.695789][T22534] RIP: 0033:0x41937c [ 2666.699669][T22534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2666.719437][T22534] RSP: 002b:00007f1d554ad170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2666.727871][T22534] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041937c [ 2666.735947][T22534] RDX: 000000000000000f RSI: 00007f1d554ad1e0 RDI: 0000000000000004 [ 2666.743905][T22534] RBP: 00007f1d554ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2666.751861][T22534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2666.759815][T22534] R13: 00007ffde36cc18f R14: 00007f1d554ad300 R15: 0000000000022000 02:07:00 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{r3, r4+10000000}}, &(0x7f00000001c0)) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:00 executing program 4 (fault-call:3 fault-nth:6): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000000400)=""/150, 0x96}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000001540)=""/146, 0x92}], 0x6, &(0x7f0000001680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x1, 0x1, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x7, 0x1, &(0x7f0000001800)=[{&(0x7f0000001700)="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", 0xfc, 0x2}], 0x68804, &(0x7f0000001840)={[{@utf8no}], [{@uid_eq={'uid', 0x3d, r1}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@measure}, {@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@euid_lt={'euid<', r1}}, {@dont_appraise}]}) openat(r2, &(0x7f00000018c0)='./file0\x00', 0x1, 0xf0c37aac73f12698) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x8800000) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000300)={@id={0x2, 0x0, @d}}) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x401ffc000) 02:07:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000140)={{r2, r3+10000000}}, &(0x7f00000001c0)) 02:07:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2668.384304][T22587] FAULT_INJECTION: forcing a failure. [ 2668.384304][T22587] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2668.397563][T22587] CPU: 1 PID: 22587 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2668.407952][T22587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2668.418010][T22587] Call Trace: [ 2668.421288][T22587] dump_stack_lvl+0xb7/0x103 [ 2668.425894][T22587] dump_stack+0x11/0x1a [ 2668.430132][T22587] should_fail+0x23c/0x250 [ 2668.434558][T22587] __alloc_pages+0x102/0x320 [ 2668.439271][T22587] alloc_pages+0x382/0x3d0 [ 2668.443682][T22587] __get_free_pages+0x8/0x30 [ 2668.448374][T22587] io_uring_create+0xa37/0x1980 [ 2668.453453][T22587] __x64_sys_io_uring_setup+0xe1/0x120 [ 2668.458925][T22587] do_syscall_64+0x3d/0x90 [ 2668.463354][T22587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2668.469326][T22587] RIP: 0033:0x4665f9 [ 2668.473278][T22587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2668.493015][T22587] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2668.501531][T22587] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2668.509673][T22587] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2668.517816][T22587] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2668.525986][T22587] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 02:07:00 executing program 4 (fault-call:3 fault-nth:7): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2668.533958][T22587] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:00 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x220100, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) [ 2668.620797][T22600] FAULT_INJECTION: forcing a failure. [ 2668.620797][T22600] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.633435][T22600] CPU: 1 PID: 22600 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2668.643391][T22600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2668.653614][T22600] Call Trace: [ 2668.656972][T22600] dump_stack_lvl+0xb7/0x103 [ 2668.661575][T22600] dump_stack+0x11/0x1a [ 2668.665940][T22600] should_fail+0x23c/0x250 [ 2668.670490][T22600] __should_failslab+0x81/0x90 [ 2668.675255][T22600] ? io_uring_create+0xbf0/0x1980 [ 2668.680337][T22600] should_failslab+0x5/0x20 [ 2668.685000][T22600] kmem_cache_alloc_trace+0x49/0x310 [ 2668.690295][T22600] ? alloc_pages+0x382/0x3d0 [ 2668.695046][T22600] io_uring_create+0xbf0/0x1980 [ 2668.700101][T22600] __x64_sys_io_uring_setup+0xe1/0x120 [ 2668.705653][T22600] do_syscall_64+0x3d/0x90 [ 2668.710109][T22600] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2668.716050][T22600] RIP: 0033:0x4665f9 [ 2668.719991][T22600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2668.739768][T22600] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2668.748361][T22600] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2668.756416][T22600] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 02:07:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xa, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:00 executing program 4 (fault-call:3 fault-nth:8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2668.764396][T22600] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2668.772715][T22600] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2668.780779][T22600] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockname$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000040)=0x6e) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x401ffc000) [ 2668.851778][T22610] FAULT_INJECTION: forcing a failure. [ 2668.851778][T22610] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.864438][T22610] CPU: 1 PID: 22610 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2668.874421][T22610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2668.885041][T22610] Call Trace: [ 2668.888312][T22610] dump_stack_lvl+0xb7/0x103 [ 2668.893582][T22610] dump_stack+0x11/0x1a [ 2668.897797][T22610] should_fail+0x23c/0x250 02:07:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000300)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x242841, 0x8c) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4010) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x401ffc000) [ 2668.902216][T22610] __should_failslab+0x81/0x90 [ 2668.906979][T22610] should_failslab+0x5/0x20 [ 2668.911487][T22610] kmem_cache_alloc_node+0x58/0x2b0 [ 2668.916728][T22610] ? _raw_spin_lock_irqsave+0x25/0x80 [ 2668.922152][T22610] ? __list_del_entry_valid+0x54/0xc0 [ 2668.927533][T22610] ? dup_task_struct+0x63/0x680 [ 2668.932382][T22610] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 2668.938255][T22610] dup_task_struct+0x63/0x680 [ 2668.943175][T22610] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 02:07:00 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x2376, &(0x7f00000003c0)={0x0, 0x0, 0x9ad133763666ce7b, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xb, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@sha1={0x1, "a4bebf2341fdcf56cec68cfd7c9dbe97860094b7"}, 0x15, 0x3) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) mkdir(&(0x7f0000000200)='./file0\x00', 0x125) [ 2668.949328][T22610] copy_process+0x3ff/0x2f90 [ 2668.953918][T22610] ? __perf_event_task_sched_in+0x7e7/0x850 [ 2668.959986][T22610] ? finish_task_switch+0xce/0x290 [ 2668.965191][T22610] ? io_fallback_req_func+0x230/0x230 [ 2668.970680][T22610] create_io_thread+0x81/0xa0 [ 2668.975497][T22610] ? io_fallback_req_func+0x230/0x230 [ 2668.980878][T22610] io_uring_create+0x126c/0x1980 [ 2668.985859][T22610] __x64_sys_io_uring_setup+0xe1/0x120 [ 2668.991327][T22610] do_syscall_64+0x3d/0x90 [ 2668.995739][T22610] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2669.001819][T22610] RIP: 0033:0x4665f9 [ 2669.005711][T22610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2669.026215][T22610] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2669.034629][T22610] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2669.042604][T22610] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 02:07:01 executing program 4 (fault-call:3 fault-nth:9): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2669.050574][T22610] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2669.058579][T22610] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2669.066576][T22610] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2669.109700][T22636] FAULT_INJECTION: forcing a failure. [ 2669.109700][T22636] name failslab, interval 1, probability 0, space 0, times 0 [ 2669.122590][T22636] CPU: 0 PID: 22636 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2669.132501][T22636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2669.142547][T22636] Call Trace: [ 2669.145817][T22636] dump_stack_lvl+0xb7/0x103 [ 2669.150403][T22636] dump_stack+0x11/0x1a [ 2669.154554][T22636] should_fail+0x23c/0x250 [ 2669.159048][T22636] __should_failslab+0x81/0x90 [ 2669.163833][T22636] should_failslab+0x5/0x20 [ 2669.168482][T22636] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 2669.174275][T22636] ? __list_del_entry_valid+0x54/0xc0 [ 2669.179653][T22636] ? __get_vm_area_node+0x11b/0x260 [ 2669.184846][T22636] __get_vm_area_node+0x11b/0x260 [ 2669.189866][T22636] __vmalloc_node_range+0xb2/0x600 [ 2669.194983][T22636] ? copy_process+0x3ff/0x2f90 [ 2669.200003][T22636] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 2669.205557][T22636] dup_task_struct+0x496/0x680 [ 2669.210319][T22636] ? copy_process+0x3ff/0x2f90 [ 2669.215313][T22636] ? rb_erase+0x4cb/0x750 [ 2669.219637][T22636] copy_process+0x3ff/0x2f90 [ 2669.224225][T22636] ? get_page_from_freelist+0x55e/0x830 [ 2669.229830][T22636] ? io_fallback_req_func+0x230/0x230 [ 2669.235213][T22636] create_io_thread+0x81/0xa0 [ 2669.239960][T22636] ? io_fallback_req_func+0x230/0x230 [ 2669.245345][T22636] io_uring_create+0x126c/0x1980 [ 2669.250311][T22636] __x64_sys_io_uring_setup+0xe1/0x120 [ 2669.255772][T22636] do_syscall_64+0x3d/0x90 [ 2669.260187][T22636] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2669.266083][T22636] RIP: 0033:0x4665f9 [ 2669.269968][T22636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2669.289640][T22636] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2669.298245][T22636] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2669.306216][T22636] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2669.314343][T22636] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2669.322317][T22636] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2669.330370][T22636] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2669.338460][T22636] syz-executor.4: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 2669.353672][T22636] CPU: 0 PID: 22636 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2669.363472][T22636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2669.373648][T22636] Call Trace: [ 2669.377010][T22636] dump_stack_lvl+0xb7/0x103 [ 2669.381611][T22636] dump_stack+0x11/0x1a [ 2669.385771][T22636] warn_alloc+0x105/0x160 [ 2669.390325][T22636] __vmalloc_node_range+0x207/0x600 [ 2669.395692][T22636] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 2669.401235][T22636] dup_task_struct+0x496/0x680 [ 2669.406094][T22636] ? copy_process+0x3ff/0x2f90 02:07:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x11000000, &(0x7f0000000080)="369a21f4d757e4441ce802649765ca5f8be2be56309d7278817624ad50a370bf0ffdb47b265f6b97db3d7dbf", &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)="140f808836ef8fc24c5bb4ec69e45c6ce6b4d43c3d6c2a2be72ab9d96adb2bc844b21bc6829f720dc91ad3afb49f0e5c4f8a2b63f2be5bbe") 02:07:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) r0 = syz_open_dev$vcsu(&(0x7f0000000280), 0x1, 0x98b01) dup(r0) chdir(&(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x40010, r2, 0x17330000) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x401ffc000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4440, 0x0) openat(r5, &(0x7f0000000180)='./file0\x00', 0x531100, 0x20) 02:07:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000200)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x109000, 0x80) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) statx(r1, &(0x7f0000000380)='./file0\x00', 0x4000, 0x800, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f0000000500)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000040)="a856a5ffbe6aea5432", 0x9}], 0x1, &(0x7f00000004c0)=[@rights={{0x20, 0x1, 0x1, [r4, r5, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r6}}}], 0x40, 0x800}, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:01 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000200)={{r1, r2+60000000}, {0x77359400}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000140)) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x185400, 0x0) mknodat$null(r5, &(0x7f00000002c0)='./file0\x00', 0x400, 0x103) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) [ 2669.410860][T22636] ? rb_erase+0x4cb/0x750 [ 2669.415429][T22636] copy_process+0x3ff/0x2f90 [ 2669.420051][T22636] ? get_page_from_freelist+0x55e/0x830 [ 2669.425606][T22636] ? io_fallback_req_func+0x230/0x230 [ 2669.431173][T22636] create_io_thread+0x81/0xa0 [ 2669.435895][T22636] ? io_fallback_req_func+0x230/0x230 [ 2669.441280][T22636] io_uring_create+0x126c/0x1980 [ 2669.446351][T22636] __x64_sys_io_uring_setup+0xe1/0x120 [ 2669.451830][T22636] do_syscall_64+0x3d/0x90 [ 2669.456419][T22636] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2669.462316][T22636] RIP: 0033:0x4665f9 [ 2669.466315][T22636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2669.486010][T22636] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2669.494600][T22636] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2669.502776][T22636] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2669.510744][T22636] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2669.518716][T22636] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2669.526685][T22636] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2669.534710][T22636] Mem-Info: [ 2669.537813][T22636] active_anon:4981 inactive_anon:120584 isolated_anon:0 [ 2669.537813][T22636] active_file:11917 inactive_file:57331 isolated_file:0 [ 2669.537813][T22636] unevictable:0 dirty:1378 writeback:0 [ 2669.537813][T22636] slab_reclaimable:5115 slab_unreclaimable:13752 [ 2669.537813][T22636] mapped:62003 shmem:13155 pagetables:27541 bounce:0 [ 2669.537813][T22636] kernel_misc_reclaimable:0 [ 2669.537813][T22636] free:1705549 free_pcp:964 free_cma:0 [ 2669.580021][T22636] Node 0 active_anon:19924kB inactive_anon:482336kB active_file:47668kB inactive_file:232108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:248012kB dirty:8296kB writeback:0kB shmem:52620kB writeback_tmp:0kB kernel_stack:16912kB pagetables:110164kB all_unreclaimable? no 02:07:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) [ 2669.607162][T22636] Node 0 DMA free:15360kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2669.633103][T22636] lowmem_reserve[]: 0 2942 7920 7920 [ 2669.638467][T22636] Node 0 DMA32 free:3014332kB min:4224kB low:7236kB high:10248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:3017168kB mlocked:0kB bounce:0kB free_pcp:2836kB local_pcp:56kB free_cma:0kB [ 2669.666056][T22636] lowmem_reserve[]: 0 0 4978 4978 [ 2669.671172][T22636] Node 0 Normal free:3787464kB min:7152kB low:12248kB high:17344kB reserved_highatomic:0KB active_anon:19924kB inactive_anon:482336kB active_file:47668kB inactive_file:233964kB unevictable:0kB writepending:10164kB present:5242880kB managed:5098288kB mlocked:0kB bounce:0kB free_pcp:1304kB local_pcp:512kB free_cma:0kB [ 2669.701147][T22636] lowmem_reserve[]: 0 0 0 0 02:07:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x400140, 0x4) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x401ffc000) [ 2669.705763][T22636] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2669.718430][T22636] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 3*128kB (M) 3*256kB (M) 4*512kB (M) 2*1024kB (M) 1*2048kB (M) 734*4096kB (M) = 3014332kB [ 2669.734414][T22636] Node 0 Normal: 78*4kB (ME) 551*8kB (ME) 1504*16kB (UME) 756*32kB (UME) 200*64kB (UME) 62*128kB (UME) 11*256kB (ME) 11*512kB (UM) 0*1024kB 4*2048kB (UE) 902*4096kB (UM) = 3784944kB [ 2669.752503][T22636] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=2 hugepages_size=2048kB 02:07:01 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x2c, 0x2, @thr={&(0x7f00000001c0)="d4f6b6cc4f6d323373f0628db34a72b0dc0995d46ac523da34280a8339fc1956877c925a811df3a2401bc1652c48284702c1e9c95139df1aa0b98fbd32fbbe0dfa0f842820d69bad2802da7a7c86d4c38e0c48f1bc1a2d118f65ace260aceac01ff4266de5fff9948a97832df579ed774b27b90b76c0bd561a68808b37540cc9893c2d5f1d64a0c957525219a00b85a3acb8bbbf7b040412f46cf514c50d890fd17325cfbfc24438a92b9ccb3cdc4dae847032f388943163684ba77b43e5791b67952f2376a8ac2bc41d79c3c3ef9c535864b73b5efba36ae89e6c33a0eff9ba3594815ae41dcfe9a979e7a6b1", &(0x7f00000000c0)="135752ea9671062957a68fad03ac0420e49a9f1556a7a8f45b5c6c7e01914c6acc1820194e3899ff1a97877452432761b4"}}, &(0x7f00000002c0)) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x40, 0x2, @thr={&(0x7f0000000080)="5001af11b308e862", &(0x7f0000000140)="aff33de0e718e414e5046ed6d47931"}}, &(0x7f0000000200)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:01 executing program 4 (fault-call:3 fault-nth:10): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2669.761802][T22636] 44927 total pagecache pages [ 2669.766485][T22636] 0 pages in swap cache [ 2669.771324][T22636] Swap cache stats: add 0, delete 0, find 0/0 [ 2669.777517][T22636] Free swap = 0kB [ 2669.781228][T22636] Total swap = 0kB [ 2669.785073][T22636] 2097051 pages RAM [ 2669.788886][T22636] 0 pages HighMem/MovableOnly [ 2669.793639][T22636] 64347 pages reserved [ 2669.855212][T22688] FAULT_INJECTION: forcing a failure. [ 2669.855212][T22688] name failslab, interval 1, probability 0, space 0, times 0 [ 2669.868151][T22688] CPU: 1 PID: 22688 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2669.878249][T22688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2669.888301][T22688] Call Trace: [ 2669.891623][T22688] dump_stack_lvl+0xb7/0x103 [ 2669.896245][T22688] dump_stack+0x11/0x1a [ 2669.900400][T22688] should_fail+0x23c/0x250 02:07:01 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xe, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:01 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1a}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f0000000240)) timer_gettime(r1, &(0x7f00000001c0)) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) [ 2669.905129][T22688] __should_failslab+0x81/0x90 [ 2669.909910][T22688] ? io_uring_alloc_task_context+0x49/0x2c0 [ 2669.915806][T22688] should_failslab+0x5/0x20 [ 2669.920379][T22688] kmem_cache_alloc_trace+0x49/0x310 [ 2669.925669][T22688] io_uring_alloc_task_context+0x49/0x2c0 [ 2669.931460][T22688] ? io_fallback_req_func+0x230/0x230 [ 2669.936945][T22688] io_uring_create+0x13d3/0x1980 [ 2669.941888][T22688] __x64_sys_io_uring_setup+0xe1/0x120 [ 2669.947352][T22688] do_syscall_64+0x3d/0x90 [ 2669.951771][T22688] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2669.957942][T22688] RIP: 0033:0x4665f9 [ 2669.961842][T22688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2669.981450][T22688] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2669.989875][T22688] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2669.997852][T22688] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 02:07:01 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x800014, 0x4, @thr={&(0x7f00000000c0)="b5b53fa505f398fd2f69d8d3457ef45ea020203af2b48418531c262fcaf8d5c5", &(0x7f0000000700)="deea48dd698f1bcaf71564aff327a9596e6d49cbdb4fdb4ecb0d18ce03d0d788dd0c3ac448d0e310e682ada25c9250a2770dc4d651a87b4b843c5ef91e5b32019e3aece25b4ee6247999d2a3ec43de321a5d5f129cef5f8399441b428d5835ea6cc290573d7c5dc5"}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) timer_settime(r1, 0x1, &(0x7f0000000680)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000006c0)) timer_settime(r0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000640)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat(r3, &(0x7f0000000000)='/proc/self/exe\x00', 0x800, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0x1c}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_create(0x5, &(0x7f0000000140)={0x0, 0x3c, 0x0, @thr={&(0x7f0000000240)="93ce4cc018aac574a9c4aa84800bdcf0bded0f15bba46be43388d7db1fa643f470dc85b4ab6aa9dba4cecf542b212534447233b91c8f766a9b44ccc8dc36a28f6fe9502274aaf4b5758fc7b1ea0669f3c4286a6d5537e5c024ef4b218216087f5ef43a043c09e1241f3b61b7a4aee576fea5a713993110ff69d39100ceb1164c30a3913836fe9cb8ce6534b20b3d32103e3b64063a227b5941f452b00525e3fd007b87b2ea9257e9a99ec15b70652f32b7ba586e43781d2b8a851d88f3a998d677d26127afa85c4f4a659af234115ef2e3e63449f0cec93fc257ab079341ee45", &(0x7f00000004c0)="7f0571945cc518a551fb4a4106c27b2248cd26dba307eb298ec9fc8cb1e08cb06fcbc3ba46abfe385581f358b71d615bb6bdd5e0905b3698ccc063a31a196790eb9b143026f3b628c76e9d00d13a308bb54f6c27b6756e006fed10b0171b522599d833191bbd86e184d5e6662eca1fe554e392b920696b86dca51a5b52a26c38376313540c8c53cc4dea061a01151190c8564efa5c8488db3769125085f9712751b76f520b77a105581c9f17eb38ab7e7a443a6ab18c3d6963a50a32dc45c4bdeb993a563a6ab9f3e67b2770425721313df290984a81a6cd2a3443abae2615"}}, &(0x7f0000000380)=0x0) timer_settime(r5, 0x1, &(0x7f00000005c0)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) timer_delete(r5) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:01 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xa00, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:01 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xb00, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2670.005828][T22688] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2670.013801][T22688] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2670.021774][T22688] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:02 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(r0, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:02 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xe00, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000003c0)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}, {&(0x7f0000000300)="1212d0c27fe3599910630bd766e6b5ab6ab2ce4284cedfbb8f389688752bb1ae41e476e88d8ae959c7557f15c1b15f05d064fd83102062d25d4bc5e5031eb8e5d5b4491674bce190e76ca152530796f9c45eb05958e8268e819c0678a83671bac52ef6c8cee031c07b938be1053e531d3bee0c257b7353cc587eb35d2e808b3cea169d3cbafcfca3bf29d1dd42e3f42ce8f822e450ac0b06bdee9b8bcec8cf729629a89cfaed378803e06c7468723d3369e3", 0xb2, 0xed}, {&(0x7f0000000040)="ace13284b0cef39b424ea5241bc51348e8043f97df2360a64ce1348f7fd74d98df3e1d623bcd04037124c4bbbfaa51f2a84ee107f6", 0x35, 0x100000000}], 0x109448c, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:02 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75f9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:04 executing program 4 (fault-call:3 fault-nth:11): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:04 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x200000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:04 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0', [{0x20, ',^]\x8a([@'}, {0x20, 'cgroup.controllers\x00'}], 0xa, "b7c8d7b376fde9c69f69d0ec23dfa2095b3b594632221e4b528211651d12dd"}, 0x46) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x401ffc000) 02:07:04 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000280)=0x4, 0x7) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1, 0x5, 0x80000000) ioctl$int_out(r0, 0x2, &(0x7f0000000180)) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x401ffc000) 02:07:04 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x1000000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2672.824720][T22761] FAULT_INJECTION: forcing a failure. [ 2672.824720][T22761] name failslab, interval 1, probability 0, space 0, times 0 [ 2672.837368][T22761] CPU: 0 PID: 22761 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2672.847184][T22761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2672.857230][T22761] Call Trace: [ 2672.860552][T22761] dump_stack_lvl+0xb7/0x103 [ 2672.865140][T22761] dump_stack+0x11/0x1a [ 2672.869470][T22761] should_fail+0x23c/0x250 [ 2672.873956][T22761] __should_failslab+0x81/0x90 [ 2672.878726][T22761] should_failslab+0x5/0x20 [ 2672.883389][T22761] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 2672.889128][T22761] ? __kmalloc_node+0x30/0x40 [ 2672.893800][T22761] ? __get_vm_area_node+0x226/0x260 [ 2672.899009][T22761] __kmalloc_node+0x30/0x40 [ 2672.903507][T22761] __vmalloc_node_range+0x231/0x600 [ 2672.908774][T22761] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 2672.914229][T22761] dup_task_struct+0x496/0x680 [ 2672.919113][T22761] ? copy_process+0x3ff/0x2f90 [ 2672.923881][T22761] copy_process+0x3ff/0x2f90 [ 2672.928495][T22761] ? get_page_from_freelist+0x55e/0x830 [ 2672.934043][T22761] ? io_fallback_req_func+0x230/0x230 [ 2672.939476][T22761] create_io_thread+0x81/0xa0 [ 2672.944180][T22761] ? io_fallback_req_func+0x230/0x230 [ 2672.949707][T22761] io_uring_create+0x126c/0x1980 [ 2672.954704][T22761] __x64_sys_io_uring_setup+0xe1/0x120 [ 2672.960280][T22761] do_syscall_64+0x3d/0x90 [ 2672.964692][T22761] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2672.970834][T22761] RIP: 0033:0x4665f9 [ 2672.974728][T22761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2672.994331][T22761] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2673.002741][T22761] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2673.011111][T22761] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 02:07:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x11000, 0x173) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xa000000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2673.019171][T22761] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2673.027160][T22761] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2673.035124][T22761] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:05 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000140)={{r4, r5+60000000}, {0x77359400}}, &(0x7f00000001c0)) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:05 executing program 4 (fault-call:3 fault-nth:12): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:05 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) dup3(r1, r3, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000300)='system_u:object_r:ksm_device_t:s0\x00', 0x9) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = dup2(r0, 0xffffffffffffffff) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="0000000000429722d92e2cec860000", @ANYRESHEX=r0, @ANYBLOB=',uname=,cache=mmap,access=any,dfltgid=', @ANYRESHEX=r9, @ANYBLOB=',smackfsdef=cgroup.controllers\x00,\x00']) sendfile(r2, r5, 0x0, 0x401ffc000) 02:07:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xb000000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2673.120069][T22795] FAULT_INJECTION: forcing a failure. [ 2673.120069][T22795] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.133245][T22795] CPU: 1 PID: 22795 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2673.143374][T22795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2673.153770][T22795] Call Trace: [ 2673.157055][T22795] dump_stack_lvl+0xb7/0x103 [ 2673.161772][T22795] dump_stack+0x11/0x1a [ 2673.165959][T22795] should_fail+0x23c/0x250 [ 2673.170551][T22795] ? io_wq_create+0x7b/0x6f0 [ 2673.175137][T22795] __should_failslab+0x81/0x90 [ 2673.180325][T22795] should_failslab+0x5/0x20 [ 2673.183779][T22802] SELinux: Context system_u: is not valid (left unmapped). [ 2673.184819][T22795] __kmalloc+0x66/0x340 [ 2673.196246][T22795] ? should_fail+0xd6/0x250 [ 2673.200754][T22795] io_wq_create+0x7b/0x6f0 [ 2673.205764][T22795] ? kmem_cache_alloc_trace+0x20f/0x310 [ 2673.211383][T22795] ? io_uring_alloc_task_context+0xd9/0x2c0 [ 2673.215535][T22802] 9pnet: Insufficient options for proto=fd [ 2673.217320][T22795] io_uring_alloc_task_context+0x181/0x2c0 [ 2673.217352][T22795] ? io_wq_free_work+0xd0/0xd0 [ 2673.217388][T22795] ? tctx_task_work+0x4d0/0x4d0 [ 2673.239806][T22795] io_uring_create+0x13d3/0x1980 [ 2673.244751][T22795] __x64_sys_io_uring_setup+0xe1/0x120 [ 2673.250283][T22795] do_syscall_64+0x3d/0x90 [ 2673.254699][T22795] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2673.260680][T22795] RIP: 0033:0x4665f9 [ 2673.264562][T22795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.284437][T22795] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2673.292889][T22795] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2673.300850][T22795] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2673.308881][T22795] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2673.317021][T22795] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2673.324986][T22795] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2673.565930][T22815] 9pnet: Insufficient options for proto=fd 02:07:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x4, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={&(0x7f00000001c0)="05636846e19f88980c9d6c031b1ee07bb12a2a0e99878401aabda9ee1de0bdc2541c7b8f479671949ccefdeb5b79b8c6d6b94566448d72e4b2b7dccc22ae4623a05bbe90becdaf107c2ad1bd526a3a17c6c9e42180fe26096151c62eeede3ebe", &(0x7f0000000080)="f52fe043391c5978dc710b9ea2453f98f62b"}}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000300)={{r4, r5+10000000}, {0x0, 0x3938700}}, &(0x7f0000000340)) timer_settime(r1, 0x1, &(0x7f00000002c0)={{}, {r2, r3+10000000}}, 0x0) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xe000000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e666174000201012a000240008080f8", 0x17}, {0x0, 0x0, 0x10000001000}], 0x301c014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x100) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x401ffc000) 02:07:05 executing program 4 (fault-call:3 fault-nth:13): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={{r3, r4/1000+10000}, {r5, r6/1000+10000}}) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:05 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb2, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xfeffffff, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xffffff7f, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2673.695170][T22839] FAULT_INJECTION: forcing a failure. [ 2673.695170][T22839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2673.708430][T22839] CPU: 1 PID: 22839 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2673.718217][T22839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2673.728267][T22839] Call Trace: [ 2673.731605][T22839] dump_stack_lvl+0xb7/0x103 [ 2673.736278][T22839] dump_stack+0x11/0x1a [ 2673.740424][T22839] should_fail+0x23c/0x250 [ 2673.744911][T22839] __alloc_pages_bulk+0xf9/0x700 [ 2673.749965][T22839] ? __kmalloc_node+0x30/0x40 [ 2673.754719][T22839] __vmalloc_node_range+0x2fe/0x600 [ 2673.759914][T22839] dup_task_struct+0x496/0x680 [ 2673.764689][T22839] ? copy_process+0x3ff/0x2f90 [ 2673.769489][T22839] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2673.776069][T22839] copy_process+0x3ff/0x2f90 [ 2673.780655][T22839] ? __perf_event_task_sched_in+0x7e7/0x850 [ 2673.786698][T22839] ? finish_task_switch+0xce/0x290 [ 2673.791841][T22839] ? io_fallback_req_func+0x230/0x230 [ 2673.797256][T22839] create_io_thread+0x81/0xa0 [ 2673.801926][T22839] ? io_fallback_req_func+0x230/0x230 [ 2673.807389][T22839] io_uring_create+0x126c/0x1980 [ 2673.812326][T22839] __x64_sys_io_uring_setup+0xe1/0x120 [ 2673.817852][T22839] do_syscall_64+0x3d/0x90 [ 2673.822269][T22839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2673.828196][T22839] RIP: 0033:0x4665f9 [ 2673.832078][T22839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.851875][T22839] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2673.860346][T22839] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2673.868312][T22839] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2673.876498][T22839] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2673.884461][T22839] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 02:07:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xfffffffe, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2673.892489][T22839] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:05 executing program 4 (fault-call:3 fault-nth:14): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x225c17d03, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2673.960239][T22869] FAULT_INJECTION: forcing a failure. [ 2673.960239][T22869] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.973030][T22869] CPU: 1 PID: 22869 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2673.983010][T22869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2673.993057][T22869] Call Trace: [ 2673.996332][T22869] dump_stack_lvl+0xb7/0x103 [ 2674.000985][T22869] dump_stack+0x11/0x1a [ 2674.005179][T22869] should_fail+0x23c/0x250 [ 2674.009627][T22869] __should_failslab+0x81/0x90 [ 2674.014411][T22869] ? io_uring_create+0x14a6/0x1980 [ 2674.019524][T22869] should_failslab+0x5/0x20 [ 2674.024172][T22869] kmem_cache_alloc_trace+0x49/0x310 [ 2674.029532][T22869] ? wake_up_new_task+0x28c/0x300 [ 2674.034594][T22869] io_uring_create+0x14a6/0x1980 [ 2674.039569][T22869] __x64_sys_io_uring_setup+0xe1/0x120 [ 2674.045105][T22869] do_syscall_64+0x3d/0x90 [ 2674.049610][T22869] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2674.055560][T22869] RIP: 0033:0x4665f9 02:07:06 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xfeffffff, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2674.059462][T22869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2674.079499][T22869] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2674.092535][T22869] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2674.100524][T22869] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2674.108685][T22869] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2674.116654][T22869] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2674.124627][T22869] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {r0, r1+60000000}}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002201f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000200)) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:06 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) timer_create(0x1, &(0x7f0000000280)={0x0, 0xf, 0x0, @tid=r0}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000006280)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006000)=[{{&(0x7f0000001580)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001600)=""/68, 0x44}], 0x1, &(0x7f00000016c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001740)=""/33, 0x21}], 0x1, &(0x7f00000017c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000001900)=""/19, 0x13}, {&(0x7f0000001940)=""/184, 0xb8}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/27, 0x1b}], 0x5, &(0x7f0000002b00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000002b40), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002bc0)=""/170, 0xaa}], 0x1, &(0x7f0000002cc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000002dc0), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002e40)=""/194, 0xc2}], 0x1, &(0x7f0000002f80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000003000), 0x6e, &(0x7f00000055c0)=[{&(0x7f0000003080)=""/125, 0x7d}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/13, 0xd}, {&(0x7f0000004140)=""/202, 0xca}, {&(0x7f0000004240)=""/239, 0xef}, {&(0x7f0000004340)=""/156, 0x9c}, {&(0x7f0000004400)=""/36, 0x24}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/154, 0x9a}, {&(0x7f0000005500)=""/188, 0xbc}], 0xa}}, {{&(0x7f0000005680)=@abs, 0x6e, &(0x7f00000058c0)=[{&(0x7f0000005700)=""/241, 0xf1}, {&(0x7f0000005800)=""/191, 0xbf}], 0x2, &(0x7f0000005900)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000005940)=@abs, 0x6e, &(0x7f0000005ac0)=[{&(0x7f00000059c0)=""/93, 0x5d}, {&(0x7f0000005a40)=""/33, 0x21}, {&(0x7f0000005a80)=""/41, 0x29}], 0x3, &(0x7f0000005b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000005c40)=@abs, 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000005cc0)=""/169, 0xa9}, {&(0x7f0000005d80)=""/20, 0x14}], 0x2, &(0x7f0000005e00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000005e40), 0x6e, &(0x7f0000005f40)=[{&(0x7f0000005ec0)=""/65, 0x41}], 0x1, &(0x7f0000005f80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}}], 0xa, 0x21, &(0x7f00000062c0)={r1, r2+10000000}) timer_create(0x6, &(0x7f0000000000)={0x0, 0x6, 0x2, @thr={&(0x7f00000004c0)="abd1e5475a79692bbec55ad43b41db0d2364b12b2056d9ca7a0f40f9199f414c22e271f6552e42555a3872295e785220971bd2669b12e1275b543ee054e88f57007d0e18a741565bfcd322ec9706d66021c98ab3e6b5eee21a3b60fc4d7f29b736346334506dc82d49601c81f59047814256f41cc6a10f7f454295b05680edc8bf36f1654f4188d2a44a2bfbc848f665c4b53b91150c65c0cef3415e310a7ac2d5ce0b44122c8a4731b842a997b23224ea0e938ab22379d5f4386f0de45b9af06ae104615a7d833ab0a4e2dbff56", &(0x7f00000005c0)="0ef730c57d89d67f4fc723f638f60f88ed656738c326a0e49c7a5628d36b2b2ba689eb87387f94e541c9383d5472b024255ac8c1f6c15d01e327fff5223aafbec2c0f7724f9caa4fc9813c310b5010fcd7be7e6024379804b02ecadbbb2aa18c8fa521d1f75bcf241c91b0dcb02b55a792406de018283b9976d9e7751443b5d7cff8d53163103fae858f01ce14578cf59390ba6339eb08c519b4a455419be7d69e4093847861c74e8498149c2e096371640882d4c49d5b0a7abca9e66b381305bfb3c85eeb8ea34fbd01cb92d1f39b2cd23f793bd782d5"}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r4+10000000}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r6, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:06 executing program 4 (fault-call:3 fault-nth:15): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x26c7de2d324, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:06 executing program 0 (fault-call:8 fault-nth:0): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) lstat(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r2, 0x0) lstat(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x7}, [{0x2, 0x1, r2}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x1, r3}], {0x4, 0x4}, [{0x8, 0x2, r5}, {0x8, 0x2, r6}], {0x10, 0x1}}, 0x54, 0x1) ftruncate(r0, 0x80) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x401ffc000) [ 2674.561875][T22903] FAULT_INJECTION: forcing a failure. [ 2674.561875][T22903] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.574556][T22903] CPU: 1 PID: 22903 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2674.584378][T22903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2674.594511][T22903] Call Trace: [ 2674.597793][T22903] dump_stack_lvl+0xb7/0x103 [ 2674.602473][T22903] dump_stack+0x11/0x1a [ 2674.606630][T22903] should_fail+0x23c/0x250 [ 2674.611038][T22903] __should_failslab+0x81/0x90 [ 2674.615796][T22903] ? io_uring_alloc_task_context+0x49/0x2c0 [ 2674.621691][T22903] should_failslab+0x5/0x20 [ 2674.626191][T22903] kmem_cache_alloc_trace+0x49/0x310 [ 2674.631481][T22903] io_uring_alloc_task_context+0x49/0x2c0 [ 2674.637202][T22903] ? io_fallback_req_func+0x230/0x230 [ 2674.642591][T22903] io_uring_create+0x13d3/0x1980 [ 2674.647529][T22903] __x64_sys_io_uring_setup+0xe1/0x120 [ 2674.653080][T22903] do_syscall_64+0x3d/0x90 02:07:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x26c86d3a4a4, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:06 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x6}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_create(0x3, &(0x7f0000000300)={0x0, 0x1, 0x1, @thr={&(0x7f00000001c0)="a0c0b27a", &(0x7f0000000200)="3cde1a0c6542f7bf5b0042c3893e4cf5090ad3d4528dec1728bb2be0487830805e5971a5afdd27f20d4479e0a98e1f8e52737f895613e3dd0bb18ce30db7227bb0dc0f112c3b0e133651a770e699767bdb29283bf0b1c0699a1df0fea870f6f1892256d032aaf63befbbc380cb756f3635d5a31fc05964f9311cad53d7f84040f977bb2dbb242e759056d273df6dbecfadc6c440dbdc4db64b5df53d5d2901946204bc9bf761671308f2b417591acd786fe835e6e8307d58a8361944de1c9fe15771f01105fdcc2e679cdb348330300f3ebc94f6d91fe239132976f60e8e81ce77fdc0f40f4253308eb9c04d17554e6e"}}, &(0x7f0000000340)) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000140)) clone(0x400, &(0x7f0000000380)="9bc6e2df7ea538c9441f1c215329bebad331669fe409c8d742202179623659000077412ad8ffbb779b2784a2afd341d13d3298f662ac75eaf50919e8e1796ddc1a80ebf32e227d6bc9a62d7f05ad37a9a4719e6fff07066643e38550cffd4e0012b94f9d247c", &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="c36ade51088615c10901152e63f0f6636d761c6740dad90bebd3b96211eda9109e5fe17bf09696cfb7b0e00b4638e734ae8d9e69615cf756c8854c35cd0e042fc790bdb91fa7499f7817c31698e333dbfdd3864d546bfe495c9dd76fcf97be3f14f5b80726845abd33bf33b96947cd8f8dbe3ef01bbf4d76d0040559c793144604b36179ab195c450e77b249e3961bd6da4b3a6f839e475adbe53ee349b50dd7db9a13ffec21b93811f333252ff0678159723977766b91619e742170") exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='-\x00') [ 2674.657492][T22903] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2674.663385][T22903] RIP: 0033:0x4665f9 [ 2674.667275][T22903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2674.686972][T22903] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2674.695485][T22903] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2674.703571][T22903] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 02:07:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x26c8cb302e6, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:06 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x1c, 0x0, @thr={&(0x7f00000001c0)="b594be06350a9d4b100ce32606fdd72865f50fe7551175367b3ee72886361c36ffab20ab004883fc94366bf7eef7accad97f053271556109d30add1567a5d01f121ec00a95c0233e7acd0295ff7879b92c6bee2ef58861d98b1e24686e7df375f9abc57559892d741c836b2811a483d61ee3ee87bd16524e9b8ecf050859cb42a9217af1a6beb0113c0366170613cd44978dbec9489496c1c7cebcffc1aef78cef4fa17f44caa494b5ecf9af485a109176c2389113d85a", &(0x7f0000000280)="8b7772a998d268321465b786252f29ba9c1172d6ec1c10c43a49a4368ce7ee996eadf0906203cd003fae01777479649be61e314330fa08c3de9c741821538bc814088b28446c41"}}, &(0x7f0000000140)=0x0) clock_gettime(0x5, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000380)={{0x77359400}, {r3, r4+10000000}}, &(0x7f00000004c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000540)={{}, {r6, r7+10000000}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:06 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2674.711873][T22903] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2674.719843][T22903] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2674.727920][T22903] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:06 executing program 4 (fault-call:3 fault-nth:16): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x200000000000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2674.839773][T22951] FAULT_INJECTION: forcing a failure. [ 2674.839773][T22951] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.852508][T22951] CPU: 1 PID: 22951 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2674.862321][T22951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2674.872727][T22951] Call Trace: [ 2674.876002][T22951] dump_stack_lvl+0xb7/0x103 [ 2674.880594][T22951] dump_stack+0x11/0x1a [ 2674.884745][T22951] should_fail+0x23c/0x250 [ 2674.889150][T22951] ? io_wq_create+0x7b/0x6f0 [ 2674.893821][T22951] __should_failslab+0x81/0x90 [ 2674.898584][T22951] should_failslab+0x5/0x20 [ 2674.903105][T22951] __kmalloc+0x66/0x340 [ 2674.907277][T22951] ? should_fail+0xd6/0x250 [ 2674.911868][T22951] io_wq_create+0x7b/0x6f0 [ 2674.916299][T22951] ? kmem_cache_alloc_trace+0x20f/0x310 [ 2674.921840][T22951] ? io_uring_alloc_task_context+0xd9/0x2c0 [ 2674.927731][T22951] io_uring_alloc_task_context+0x181/0x2c0 [ 2674.933533][T22951] ? io_wq_free_work+0xd0/0xd0 [ 2674.938375][T22951] ? tctx_task_work+0x4d0/0x4d0 [ 2674.943277][T22951] io_uring_create+0x13d3/0x1980 [ 2674.948251][T22951] __x64_sys_io_uring_setup+0xe1/0x120 [ 2674.953772][T22951] do_syscall_64+0x3d/0x90 [ 2674.958188][T22951] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2674.964311][T22951] RIP: 0033:0x4665f9 [ 2674.968244][T22951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2674.987843][T22951] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2674.996258][T22951] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2675.004226][T22951] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2675.012277][T22951] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2675.020252][T22951] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2675.028378][T22951] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x100000000000000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:07 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x77359400}, {r4, r5+10000000}}, &(0x7f0000000200)) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f00000000c0)=0x8, 0x0, 0x4) 02:07:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sky2', 0x121406, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x401ffc000) 02:07:07 executing program 4 (fault-call:3 fault-nth:17): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x37dc12502000000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2675.217065][T22972] FAULT_INJECTION: forcing a failure. [ 2675.217065][T22972] name failslab, interval 1, probability 0, space 0, times 0 [ 2675.229901][T22972] CPU: 1 PID: 22972 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2675.239753][T22972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2675.249900][T22972] Call Trace: [ 2675.253175][T22972] dump_stack_lvl+0xb7/0x103 [ 2675.257787][T22972] dump_stack+0x11/0x1a [ 2675.261977][T22972] should_fail+0x23c/0x250 [ 2675.266433][T22972] ? io_wq_create+0x7b/0x6f0 [ 2675.271065][T22972] __should_failslab+0x81/0x90 [ 2675.275816][T22972] should_failslab+0x5/0x20 [ 2675.280689][T22972] __kmalloc+0x66/0x340 [ 2675.284947][T22972] ? should_fail+0xd6/0x250 [ 2675.289618][T22972] io_wq_create+0x7b/0x6f0 [ 2675.294015][T22972] ? kmem_cache_alloc_trace+0x20f/0x310 [ 2675.299540][T22972] ? io_uring_alloc_task_context+0xd9/0x2c0 [ 2675.305427][T22972] io_uring_alloc_task_context+0x181/0x2c0 [ 2675.311332][T22972] ? io_wq_free_work+0xd0/0xd0 [ 2675.316091][T22972] ? tctx_task_work+0x4d0/0x4d0 [ 2675.320924][T22972] io_uring_create+0x13d3/0x1980 [ 2675.325866][T22972] __x64_sys_io_uring_setup+0xe1/0x120 [ 2675.331445][T22972] do_syscall_64+0x3d/0x90 [ 2675.335848][T22972] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2675.341725][T22972] RIP: 0033:0x4665f9 [ 2675.345606][T22972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2675.365198][T22972] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2675.373595][T22972] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2675.381556][T22972] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2675.390136][T22972] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2675.398090][T22972] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2675.406046][T22972] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) sendfile(r1, r0, 0x0, 0x9) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xa00000000000000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:07 executing program 4 (fault-call:3 fault-nth:18): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) ftruncate(r2, 0x7) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x280) fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) [ 2675.758771][T22999] FAULT_INJECTION: forcing a failure. [ 2675.758771][T22999] name failslab, interval 1, probability 0, space 0, times 0 [ 2675.771545][T22999] CPU: 0 PID: 22999 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2675.771562][T22999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2675.771568][T22999] Call Trace: [ 2675.771573][T22999] dump_stack_lvl+0xb7/0x103 [ 2675.771610][T22999] dump_stack+0x11/0x1a [ 2675.771627][T22999] should_fail+0x23c/0x250 [ 2675.771645][T22999] __should_failslab+0x81/0x90 [ 2675.771664][T22999] should_failslab+0x5/0x20 [ 2675.771682][T22999] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 2675.771699][T22999] ? __cpuhp_state_add_instance_cpuslocked+0x1dc/0x330 [ 2675.771781][T22999] ? io_wq_create+0x217/0x6f0 [ 2675.771862][T22999] io_wq_create+0x217/0x6f0 [ 2675.771877][T22999] io_uring_alloc_task_context+0x181/0x2c0 [ 2675.771900][T22999] ? io_wq_free_work+0xd0/0xd0 [ 2675.771934][T22999] ? tctx_task_work+0x4d0/0x4d0 [ 2675.771956][T22999] io_uring_create+0x13d3/0x1980 [ 2675.771979][T22999] __x64_sys_io_uring_setup+0xe1/0x120 [ 2675.772012][T22999] do_syscall_64+0x3d/0x90 [ 2675.772027][T22999] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2675.772046][T22999] RIP: 0033:0x4665f9 [ 2675.772057][T22999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2675.772072][T22999] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 02:07:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x1, &(0x7f00000001c0), &(0x7f0000000200)) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 2675.772089][T22999] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2675.772100][T22999] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2675.772110][T22999] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2675.772121][T22999] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2675.772134][T22999] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc4}}) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:07 executing program 4 (fault-call:3 fault-nth:19): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2676.023711][T23022] FAULT_INJECTION: forcing a failure. [ 2676.023711][T23022] name failslab, interval 1, probability 0, space 0, times 0 [ 2676.036416][T23022] CPU: 1 PID: 23022 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2676.046419][T23022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2676.056466][T23022] Call Trace: [ 2676.059754][T23022] dump_stack_lvl+0xb7/0x103 [ 2676.064344][T23022] dump_stack+0x11/0x1a [ 2676.068518][T23022] should_fail+0x23c/0x250 02:07:08 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x2f}, &(0x7f00000000c0)=0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x5, 0x78f49ece414ec62f, @thr={&(0x7f00000001c0)="29d5288f477f7792df26934c6087c08a4798d046bf09950973af02d2b163ccf2d5ae929efc4a70fac7e0cee168ef76154ccbb7d2ec1ad1598612748c059c1a661c89e2ab73aeed3c", &(0x7f00000000c0)}}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000040), 0x0, 0xd9f, 0x2) r3 = syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x1c8c2, 0x4, 0x1d}, 0x18) preadv(r6, &(0x7f0000000bc0)=[{&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f00000002c0)=""/105, 0x69}, {&(0x7f0000000c80)=""/265, 0x109}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000740)=""/82, 0x52}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/100, 0x64}, {&(0x7f0000000900)=""/212, 0xd4}, {&(0x7f0000000a00)=""/207, 0xcf}, {&(0x7f0000000b00)=""/148, 0x94}], 0xa, 0x3, 0x6) timer_settime(0x0, 0x1, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}, 0x5) 02:07:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xa, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2676.072932][T23022] __should_failslab+0x81/0x90 [ 2676.077695][T23022] ? io_uring_create+0x14a6/0x1980 [ 2676.082815][T23022] should_failslab+0x5/0x20 [ 2676.087319][T23022] kmem_cache_alloc_trace+0x49/0x310 [ 2676.092688][T23022] ? wake_up_new_task+0x28c/0x300 [ 2676.098124][T23022] io_uring_create+0x14a6/0x1980 [ 2676.103145][T23022] __x64_sys_io_uring_setup+0xe1/0x120 [ 2676.108598][T23022] do_syscall_64+0x3d/0x90 [ 2676.113018][T23022] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2676.119184][T23022] RIP: 0033:0x4665f9 02:07:08 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000240)) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_io_uring_setup(0xeb3, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x4, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x4956, &(0x7f00000005c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x10001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0xc2) 02:07:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xb, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2676.123065][T23022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2676.142763][T23022] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2676.151180][T23022] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2676.159145][T23022] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 02:07:08 executing program 4 (fault-call:3 fault-nth:20): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2676.167107][T23022] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2676.175073][T23022] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2676.183078][T23022] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2676.234698][T23045] FAULT_INJECTION: forcing a failure. [ 2676.234698][T23045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2676.247881][T23045] CPU: 0 PID: 23045 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2676.258081][T23045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2676.268417][T23045] Call Trace: [ 2676.271681][T23045] dump_stack_lvl+0xb7/0x103 [ 2676.276321][T23045] dump_stack+0x11/0x1a [ 2676.280461][T23045] should_fail+0x23c/0x250 [ 2676.284861][T23045] should_fail_usercopy+0x16/0x20 [ 2676.289972][T23045] _copy_to_user+0x1c/0x90 [ 2676.294390][T23045] io_uring_create+0x164d/0x1980 [ 2676.299333][T23045] __x64_sys_io_uring_setup+0xe1/0x120 [ 2676.304879][T23045] do_syscall_64+0x3d/0x90 [ 2676.309302][T23045] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2676.315176][T23045] RIP: 0033:0x4665f9 [ 2676.319146][T23045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2676.338819][T23045] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2676.347222][T23045] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2676.355624][T23045] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2676.363672][T23045] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2676.371635][T23045] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2676.379614][T23045] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xb00000000000000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x20e041, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:08 executing program 4 (fault-call:3 fault-nth:21): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2676.492882][T23059] FAULT_INJECTION: forcing a failure. [ 2676.492882][T23059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2676.505972][T23059] CPU: 0 PID: 23059 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2676.515873][T23059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2676.526018][T23059] Call Trace: [ 2676.529292][T23059] dump_stack_lvl+0xb7/0x103 [ 2676.533889][T23059] dump_stack+0x11/0x1a [ 2676.538092][T23059] should_fail+0x23c/0x250 [ 2676.542516][T23059] should_fail_usercopy+0x16/0x20 [ 2676.547641][T23059] _copy_to_user+0x1c/0x90 [ 2676.552060][T23059] io_uring_create+0x164d/0x1980 [ 2676.557005][T23059] __x64_sys_io_uring_setup+0xe1/0x120 [ 2676.562560][T23059] do_syscall_64+0x3d/0x90 [ 2676.566991][T23059] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2676.572884][T23059] RIP: 0033:0x4665f9 [ 2676.576800][T23059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2676.596417][T23059] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2676.604977][T23059] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2676.612941][T23059] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2676.620968][T23059] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2676.628931][T23059] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 02:07:08 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}}, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) [ 2676.636902][T23059] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x7, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:08 executing program 4 (fault-call:3 fault-nth:22): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:08 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}}, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb000221010003792cc16cf801", 0xd, 0x3}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), &(0x7f0000000280), 0x2, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mknodat$loop(r2, &(0x7f0000000340)='./file1\x00', 0x2, 0x0) unlink(&(0x7f0000000300)='./file0\x00') fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:hald_exec_t:s0\x00', 0x21, 0x1) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x401ffc000) [ 2676.877279][T23097] FAULT_INJECTION: forcing a failure. [ 2676.877279][T23097] name failslab, interval 1, probability 0, space 0, times 0 [ 2676.890510][T23097] CPU: 0 PID: 23097 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2676.900453][T23097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2676.910504][T23097] Call Trace: [ 2676.913786][T23097] dump_stack_lvl+0xb7/0x103 [ 2676.918494][T23097] dump_stack+0x11/0x1a [ 2676.922651][T23097] should_fail+0x23c/0x250 [ 2676.927079][T23097] ? __alloc_file+0x2e/0x1a0 [ 2676.931678][T23097] __should_failslab+0x81/0x90 [ 2676.936691][T23097] should_failslab+0x5/0x20 [ 2676.941206][T23097] kmem_cache_alloc+0x46/0x2e0 [ 2676.946332][T23097] __alloc_file+0x2e/0x1a0 [ 2676.950795][T23097] alloc_empty_file+0xcd/0x1c0 [ 2676.955561][T23097] alloc_file+0x3a/0x280 [ 2676.960269][T23097] alloc_file_pseudo+0xe2/0x130 [ 2676.965288][T23097] anon_inode_getfile+0x9f/0x120 [ 2676.970247][T23097] io_uring_create+0x16e8/0x1980 [ 2676.975565][T23097] __x64_sys_io_uring_setup+0xe1/0x120 [ 2676.981160][T23097] do_syscall_64+0x3d/0x90 [ 2676.985913][T23097] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2676.991903][T23097] RIP: 0033:0x4665f9 [ 2676.995790][T23097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2677.015527][T23097] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 02:07:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x284000, 0x20) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:tmp_t:s0\x00', 0x1b, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:09 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xe00000000000000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:09 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer, 0x0) r4 = syz_io_uring_setup(0x4956, &(0x7f00000005c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x2, 0x4004, @fd_index=0x5, 0xfb97, &(0x7f00000000c0)=[{&(0x7f00000001c0)="9f77a63675e890df598799291f18057e84cd779943c55d71adc3d238924ba4f3e2c5f6f94750500dc362d834a258813953d0edb0f7531c05b13dd39b86a4223b21d46f3634493ecd622e1fc22fe52c259ea02abd6ed21d902c0fc09dd08b919608b4e9ab0b5341bb0c99d28135356ffd10c281ea9cdbd8b61fe8e9fd189e90bb6c13c456714438986c9dcdefb8461f3d36c58f6551bd6325042b657376c087ecba58b32352fa36222b6801146a05efd4e15a5676ec2a241b931b2183307f4ed646e508348f8bcbed5672ea4942a10bd1518ba56baf565cd277388d59619e1e06aa18a633585f9cdaabd22bbab349b6658a01", 0xf2}], 0x1, 0x8, 0x0, {0x2}}, 0x101) timer_settime(0x0, 0x1, 0x0, 0x0) [ 2677.023948][T23097] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2677.031995][T23097] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2677.039971][T23097] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2677.048008][T23097] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2677.056018][T23097] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:09 executing program 4 (fault-call:3 fault-nth:23): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2677.121243][T23119] FAULT_INJECTION: forcing a failure. [ 2677.121243][T23119] name failslab, interval 1, probability 0, space 0, times 0 [ 2677.133896][T23119] CPU: 1 PID: 23119 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2677.143708][T23119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2677.154153][T23119] Call Trace: [ 2677.157448][T23119] dump_stack_lvl+0xb7/0x103 [ 2677.162039][T23119] dump_stack+0x11/0x1a [ 2677.166185][T23119] should_fail+0x23c/0x250 [ 2677.170595][T23119] ? security_inode_alloc+0x30/0x180 [ 2677.175974][T23119] __should_failslab+0x81/0x90 [ 2677.180787][T23119] should_failslab+0x5/0x20 [ 2677.185297][T23119] kmem_cache_alloc+0x46/0x2e0 [ 2677.190056][T23119] security_inode_alloc+0x30/0x180 [ 2677.195184][T23119] inode_init_always+0x20d/0x440 [ 2677.200200][T23119] ? sockfs_init_fs_context+0x70/0x70 [ 2677.205570][T23119] new_inode_pseudo+0x73/0x1c0 [ 2677.210482][T23119] __sock_create+0x122/0x4e0 [ 2677.215241][T23119] ? should_fail+0xd6/0x250 [ 2677.219788][T23119] sock_create_kern+0x34/0x40 [ 2677.224773][T23119] io_uring_create+0x1693/0x1980 [ 2677.229721][T23119] __x64_sys_io_uring_setup+0xe1/0x120 [ 2677.235195][T23119] do_syscall_64+0x3d/0x90 [ 2677.239605][T23119] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2677.245503][T23119] RIP: 0033:0x4665f9 [ 2677.249427][T23119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2677.269305][T23119] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2677.277866][T23119] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2677.285916][T23119] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2677.294097][T23119] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2677.302132][T23119] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2677.310091][T23119] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:09 executing program 4 (fault-call:3 fault-nth:24): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2677.318111][T23119] socket: no more sockets [ 2677.351939][T23127] FAULT_INJECTION: forcing a failure. [ 2677.351939][T23127] name failslab, interval 1, probability 0, space 0, times 0 [ 2677.364571][T23127] CPU: 1 PID: 23127 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2677.374355][T23127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2677.384485][T23127] Call Trace: [ 2677.387857][T23127] dump_stack_lvl+0xb7/0x103 [ 2677.392436][T23127] dump_stack+0x11/0x1a [ 2677.396600][T23127] should_fail+0x23c/0x250 [ 2677.400998][T23127] ? sk_prot_alloc+0x41/0x190 [ 2677.405700][T23127] __should_failslab+0x81/0x90 [ 2677.410472][T23127] should_failslab+0x5/0x20 [ 2677.414994][T23127] kmem_cache_alloc+0x46/0x2e0 [ 2677.419752][T23127] sk_prot_alloc+0x41/0x190 [ 2677.424236][T23127] sk_alloc+0x2e/0x220 [ 2677.428283][T23127] unix_create1+0x93/0x3d0 [ 2677.432688][T23127] unix_create+0xf8/0x110 [ 2677.437069][T23127] __sock_create+0x2c7/0x4e0 [ 2677.441669][T23127] sock_create_kern+0x34/0x40 [ 2677.446436][T23127] io_uring_create+0x1693/0x1980 [ 2677.451389][T23127] __x64_sys_io_uring_setup+0xe1/0x120 [ 2677.456889][T23127] do_syscall_64+0x3d/0x90 [ 2677.461301][T23127] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2677.467200][T23127] RIP: 0033:0x4665f9 [ 2677.471074][T23127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2677.490974][T23127] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 02:07:09 executing program 4 (fault-call:3 fault-nth:25): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2677.499506][T23127] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2677.507526][T23127] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2677.515489][T23127] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2677.523544][T23127] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2677.531551][T23127] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2677.599638][T23133] FAULT_INJECTION: forcing a failure. [ 2677.599638][T23133] name failslab, interval 1, probability 0, space 0, times 0 [ 2677.612490][T23133] CPU: 1 PID: 23133 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2677.622294][T23133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2677.632423][T23133] Call Trace: [ 2677.635696][T23133] dump_stack_lvl+0xb7/0x103 [ 2677.640294][T23133] dump_stack+0x11/0x1a [ 2677.644447][T23133] should_fail+0x23c/0x250 [ 2677.648936][T23133] ? io_wq_create+0x7b/0x6f0 [ 2677.653520][T23133] __should_failslab+0x81/0x90 [ 2677.658337][T23133] should_failslab+0x5/0x20 [ 2677.662981][T23133] __kmalloc+0x66/0x340 [ 2677.667134][T23133] io_wq_create+0x7b/0x6f0 [ 2677.671605][T23133] ? _raw_spin_lock_irqsave+0x25/0x80 [ 2677.677138][T23133] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 2677.683015][T23133] io_uring_alloc_task_context+0x181/0x2c0 [ 2677.689001][T23133] ? io_wq_free_work+0xd0/0xd0 [ 2677.693821][T23133] ? tctx_task_work+0x4d0/0x4d0 [ 2677.698682][T23133] io_uring_add_tctx_node+0x66/0x200 [ 2677.703984][T23133] io_uring_create+0x17e0/0x1980 [ 2677.708985][T23133] __x64_sys_io_uring_setup+0xe1/0x120 [ 2677.714527][T23133] do_syscall_64+0x3d/0x90 [ 2677.719035][T23133] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2677.725105][T23133] RIP: 0033:0x4665f9 [ 2677.729159][T23133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:07:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) 02:07:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, @thr={&(0x7f0000000140)="3d7e4aaddc7be742931c0e5d78c9f3e90276c341a130015cd36b436aade8168b089292e1e5b5f334b6aa8db87b44698bb08d9266b0f102", &(0x7f00000001c0)="5b68ea97343adec998f60ed0ee6c058b6bd97911a7efda94afb90a8d23775429d6115de4b6bacdee07edd6c5c3788ee850f107a87bb550d13857270f80a7724fe635e085cadb6e97b079b2cdf182b09ccb6d8779a2873776f3c473c7d73c7fad986e4c1eb00bb96a1753f05649e300950c7fb87d2049d8171f20da20a05707a2558c25afeb651bcf910164762f5b5cf2be6d06d334d49a587e0738952a35"}}, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{r2, r3+60000000}, {r4, r5+10000000}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000300)={{0x77359400}, {0x77359400}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_gettime(r0, &(0x7f0000000080)) 02:07:09 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0xe, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2677.749124][T23133] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2677.757721][T23133] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2677.765689][T23133] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2677.774396][T23133] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2677.783591][T23133] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2677.791731][T23133] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:09 executing program 4 (fault-call:3 fault-nth:26): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2677.882854][T23159] FAULT_INJECTION: forcing a failure. [ 2677.882854][T23159] name failslab, interval 1, probability 0, space 0, times 0 [ 2677.895751][T23159] CPU: 1 PID: 23159 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2677.905646][T23159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2677.915882][T23159] Call Trace: [ 2677.919574][T23159] dump_stack_lvl+0xb7/0x103 [ 2677.924272][T23159] dump_stack+0x11/0x1a [ 2677.928447][T23159] should_fail+0x23c/0x250 [ 2677.932896][T23159] __should_failslab+0x81/0x90 [ 2677.937682][T23159] should_failslab+0x5/0x20 [ 2677.942197][T23159] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 2677.947915][T23159] ? __cpuhp_state_add_instance_cpuslocked+0x1dc/0x330 [ 2677.954980][T23159] ? io_wq_create+0x217/0x6f0 [ 2677.959653][T23159] io_wq_create+0x217/0x6f0 [ 2677.964180][T23159] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 2677.970038][T23159] io_uring_alloc_task_context+0x181/0x2c0 [ 2677.975956][T23159] ? io_wq_free_work+0xd0/0xd0 [ 2677.980724][T23159] ? tctx_task_work+0x4d0/0x4d0 [ 2677.985582][T23159] io_uring_add_tctx_node+0x66/0x200 [ 2677.990876][T23159] io_uring_create+0x17e0/0x1980 [ 2677.995828][T23159] __x64_sys_io_uring_setup+0xe1/0x120 [ 2678.001370][T23159] do_syscall_64+0x3d/0x90 [ 2678.005853][T23159] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2678.011744][T23159] RIP: 0033:0x4665f9 [ 2678.015635][T23159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2678.035241][T23159] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2678.043643][T23159] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2678.051605][T23159] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2678.059571][T23159] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2678.068144][T23159] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 02:07:10 executing program 4 (fault-call:3 fault-nth:27): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:10 executing program 5: timer_create(0x5, &(0x7f00000004c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x28, 0x1, @thr={&(0x7f00000001c0)="4d9678bf2b61afa3d032017f82352b77eb1edb7509ba8f85d1714db9b57d63bf33c9e47e06898a25e9967fc338eaf9da279f67247bf654a41453d0f540e3de1513e71dcdc306", &(0x7f0000000240)="986ca2e63b92aea6ee084b96beb548da071baa60047228f05ac19a5bcac404b0c3dfeeee1a6cc2cd06d8f0b76ee526641295dba681c1411373fde0d12f24c3fdc54088c3ddf239128ee2c7c2df3fac98cab4dfbd41997e22df9eb136feae23dc72f172452a6c7d52ad058c85000a825f2fe86086b37ec71349d73b2fff7e756b7f4e6391eeb345ea30e30773e6323f66d00cc17bd702bfa192fa3e329f39aea92c498f95cb0a23a6"}}, &(0x7f0000000140)=0x0) timer_settime(r3, 0x1, &(0x7f0000000300), &(0x7f0000000380)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) [ 2678.076189][T23159] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2678.125459][T23167] FAULT_INJECTION: forcing a failure. [ 2678.125459][T23167] name failslab, interval 1, probability 0, space 0, times 0 [ 2678.138385][T23167] CPU: 1 PID: 23167 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2678.148182][T23167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2678.158360][T23167] Call Trace: [ 2678.161702][T23167] dump_stack_lvl+0xb7/0x103 [ 2678.166298][T23167] dump_stack+0x11/0x1a [ 2678.170453][T23167] should_fail+0x23c/0x250 [ 2678.174863][T23167] __should_failslab+0x81/0x90 [ 2678.179614][T23167] ? io_uring_add_tctx_node+0xdc/0x200 [ 2678.185168][T23167] should_failslab+0x5/0x20 [ 2678.189700][T23167] kmem_cache_alloc_trace+0x49/0x310 [ 2678.194981][T23167] ? xa_load+0x249/0x260 [ 2678.199297][T23167] io_uring_add_tctx_node+0xdc/0x200 [ 2678.204630][T23167] io_uring_create+0x17e0/0x1980 [ 2678.209557][T23167] __x64_sys_io_uring_setup+0xe1/0x120 [ 2678.215141][T23167] do_syscall_64+0x3d/0x90 [ 2678.219559][T23167] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2678.225506][T23167] RIP: 0033:0x4665f9 [ 2678.229532][T23167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2678.251270][T23167] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2678.259668][T23167] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 02:07:10 executing program 4 (fault-call:3 fault-nth:28): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2678.268484][T23167] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2678.276495][T23167] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2678.284869][T23167] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2678.292905][T23167] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2678.331455][T23173] FAULT_INJECTION: forcing a failure. [ 2678.331455][T23173] name failslab, interval 1, probability 0, space 0, times 0 [ 2678.344159][T23173] CPU: 0 PID: 23173 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2678.354059][T23173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2678.364316][T23173] Call Trace: [ 2678.367632][T23173] dump_stack_lvl+0xb7/0x103 [ 2678.372245][T23173] dump_stack+0x11/0x1a [ 2678.376425][T23173] should_fail+0x23c/0x250 [ 2678.380888][T23173] __should_failslab+0x81/0x90 [ 2678.385657][T23173] ? io_uring_alloc_task_context+0x49/0x2c0 [ 2678.391537][T23173] should_failslab+0x5/0x20 [ 2678.396035][T23173] kmem_cache_alloc_trace+0x49/0x310 [ 2678.401560][T23173] ? alloc_empty_file+0x107/0x1c0 [ 2678.406660][T23173] ? errseq_sample+0x2b/0x40 [ 2678.411230][T23173] io_uring_alloc_task_context+0x49/0x2c0 [ 2678.416942][T23173] ? alloc_fd+0x388/0x3e0 [ 2678.421362][T23173] io_uring_add_tctx_node+0x66/0x200 [ 2678.426892][T23173] io_uring_create+0x17e0/0x1980 [ 2678.432186][T23173] __x64_sys_io_uring_setup+0xe1/0x120 [ 2678.437648][T23173] do_syscall_64+0x3d/0x90 [ 2678.442323][T23173] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2678.448282][T23173] RIP: 0033:0x4665f9 [ 2678.452155][T23173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2678.471852][T23173] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 02:07:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x24d3e27d6c020000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:10 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x8, 0x80) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getxattr(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)=@known='security.selinux\x00', &(0x7f0000000380)=""/79, 0x4f) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)=@md5={0x1, "04a1e999595efbd384db0de19de4cc24"}, 0x11, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x400000, 0x20) sendfile(r2, r3, 0x0, 0x401ffc000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(r4, &(0x7f0000000400)='./file1\x00', 0xc4) 02:07:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xa4a4d3866c020000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2678.481311][T23173] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2678.489283][T23173] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2678.497449][T23173] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2678.505526][T23173] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2678.513765][T23173] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:10 executing program 4 (fault-call:3 fault-nth:29): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xe602b38c6c020000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2678.578288][T23187] FAULT_INJECTION: forcing a failure. [ 2678.578288][T23187] name failslab, interval 1, probability 0, space 0, times 0 [ 2678.590962][T23187] CPU: 1 PID: 23187 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2678.600812][T23187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2678.611090][T23187] Call Trace: [ 2678.614468][T23187] dump_stack_lvl+0xb7/0x103 [ 2678.619059][T23187] dump_stack+0x11/0x1a [ 2678.623210][T23187] should_fail+0x23c/0x250 02:07:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xfeffffff00000000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2678.627625][T23187] __should_failslab+0x81/0x90 [ 2678.632381][T23187] ? io_uring_alloc_task_context+0x49/0x2c0 [ 2678.638314][T23187] should_failslab+0x5/0x20 [ 2678.642815][T23187] kmem_cache_alloc_trace+0x49/0x310 [ 2678.648117][T23187] ? alloc_empty_file+0x107/0x1c0 [ 2678.653317][T23187] ? errseq_sample+0x2b/0x40 [ 2678.658190][T23187] io_uring_alloc_task_context+0x49/0x2c0 [ 2678.663908][T23187] ? alloc_fd+0x388/0x3e0 [ 2678.668328][T23187] io_uring_add_tctx_node+0x66/0x200 [ 2678.673618][T23187] io_uring_create+0x17e0/0x1980 [ 2678.678709][T23187] __x64_sys_io_uring_setup+0xe1/0x120 [ 2678.684599][T23187] do_syscall_64+0x3d/0x90 [ 2678.689542][T23187] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2678.695437][T23187] RIP: 0033:0x4665f9 [ 2678.699330][T23187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2678.719276][T23187] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2678.727694][T23187] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2678.735742][T23187] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2678.743879][T23187] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2678.752100][T23187] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2678.760086][T23187] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:12 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0xd4, 0xff, 0x3, 0x80, 0x0, 0x1ff, 0x80200, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000080), 0x9}, 0x2, 0x4, 0x0, 0x1, 0xfffffffffffff801, 0x100, 0x8000, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0xa, r0, 0x2) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x50, 0x4, 0x31, 0x0, 0x9, 0x12c9, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xa2, 0x3}, 0x814, 0x9, 0x8, 0x7, 0x0, 0x200, 0x7f, 0x0, 0x2, 0x0, 0x81}, 0x0, 0x2, r2, 0x8) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x700, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:12 executing program 4 (fault-call:3 fault-nth:30): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x2) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) [ 2680.896952][T23222] FAULT_INJECTION: forcing a failure. [ 2680.896952][T23222] name failslab, interval 1, probability 0, space 0, times 0 [ 2680.909587][T23222] CPU: 1 PID: 23222 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2680.919383][T23222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2680.929431][T23222] Call Trace: [ 2680.932712][T23222] dump_stack_lvl+0xb7/0x103 [ 2680.937299][T23222] dump_stack+0x11/0x1a [ 2680.941494][T23222] should_fail+0x23c/0x250 [ 2680.945901][T23222] ? io_wq_create+0x7b/0x6f0 [ 2680.950508][T23222] __should_failslab+0x81/0x90 [ 2680.955280][T23222] should_failslab+0x5/0x20 [ 2680.959782][T23222] __kmalloc+0x66/0x340 [ 2680.963929][T23222] io_wq_create+0x7b/0x6f0 [ 2680.968367][T23222] ? _raw_spin_lock_irqsave+0x25/0x80 [ 2680.973759][T23222] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 2680.979574][T23222] io_uring_alloc_task_context+0x181/0x2c0 [ 2680.985473][T23222] ? io_wq_free_work+0xd0/0xd0 [ 2680.990244][T23222] ? tctx_task_work+0x4d0/0x4d0 [ 2680.995110][T23222] io_uring_add_tctx_node+0x66/0x200 [ 2681.000398][T23222] io_uring_create+0x17e0/0x1980 [ 2681.005427][T23222] __x64_sys_io_uring_setup+0xe1/0x120 [ 2681.010909][T23222] do_syscall_64+0x3d/0x90 [ 2681.015321][T23222] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2681.021309][T23222] RIP: 0033:0x4665f9 [ 2681.025197][T23222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2681.044804][T23222] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2681.053353][T23222] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2681.061407][T23222] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2681.069356][T23222] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2681.077447][T23222] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2681.085398][T23222] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:13 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat(r3, &(0x7f0000000140)='./file0\x00', 0x422000, 0x30) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:13 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xffffff7f00000000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:13 executing program 4 (fault-call:3 fault-nth:31): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2681.165673][T23233] FAULT_INJECTION: forcing a failure. [ 2681.165673][T23233] name failslab, interval 1, probability 0, space 0, times 0 [ 2681.178563][T23233] CPU: 0 PID: 23233 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2681.188382][T23233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2681.198487][T23233] Call Trace: [ 2681.201791][T23233] dump_stack_lvl+0xb7/0x103 [ 2681.206386][T23233] dump_stack+0x11/0x1a [ 2681.210542][T23233] should_fail+0x23c/0x250 [ 2681.215059][T23233] __should_failslab+0x81/0x90 [ 2681.219823][T23233] should_failslab+0x5/0x20 [ 2681.224352][T23233] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 2681.230074][T23233] ? __cpuhp_state_add_instance_cpuslocked+0x1dc/0x330 [ 2681.237098][T23233] ? io_wq_create+0x217/0x6f0 [ 2681.241775][T23233] io_wq_create+0x217/0x6f0 [ 2681.246374][T23233] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 2681.252197][T23233] io_uring_alloc_task_context+0x181/0x2c0 [ 2681.258065][T23233] ? io_wq_free_work+0xd0/0xd0 [ 2681.262907][T23233] ? tctx_task_work+0x4d0/0x4d0 [ 2681.267772][T23233] io_uring_add_tctx_node+0x66/0x200 [ 2681.273093][T23233] io_uring_create+0x17e0/0x1980 [ 2681.278015][T23233] __x64_sys_io_uring_setup+0xe1/0x120 [ 2681.283469][T23233] do_syscall_64+0x3d/0x90 [ 2681.287884][T23233] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2681.293989][T23233] RIP: 0033:0x4665f9 02:07:13 executing program 2: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000040)={0x3ff}) sendfile(r1, r2, 0x0, 0x401ffc000) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000200)="5a69c86ec0b554654ec5709e4fe04c2b5b7e3637af4fab572526d443d7175f2fc457bf2be679d039472279408c748c3b0cac5d09ef4562a3c7769ebaca6ea5db6a120152eb1fb21bacd85993c8e82f9a6f75a77f0cf905f83cbc1790f1967cce8ecdc296682c4268f3144320bbb62584fc34b5b359ee6d5334e62a598c2041cede88c1030e0e6c87583772e3b43281eee2c2fd20213484f4bdd9c8b50be346", 0x9f}, {&(0x7f00000000c0)="dd1e4d61ba59f5b12bedd60a1bf13c11af293ab4cf2649430aaea49555ee9b22c42a40d3b58588badc1692a92ffa92f99d94cba500d1a416fe160664a9dde98bc1b66b8a2603b39e7a608231c58fe05cb2d23f91129d9910471e91532cdc8b97ab410b8434735a6a0b77804e5fcc0e2f9e9a3ad3f2dfb7", 0x77}, {&(0x7f00000002c0)="5ecbea73402bb1ab0423f16a74ca1c0b1de9eae303c5413f7682612137fedb545e95f866f6d62ab8515d7bc2485fc7d1207ff911b21f5f6e7e46fa0fef7e720cfd4808a96db53722c662c9cfe60f7d5cef43e766003cbb3f168cd17e205488ce6ee33abf2c4ebce33ae5ce35f05b6596cf63bff1919ab4a9342b5fed930a69b6a61b562f0930e70e8ea4745f05ec7101e810fb5961b4d79f6521f4173cbbd6047124a603811a3085ea00aa5de6c42ec76abb844cd119993202718bb7212fb462d17c8a61863f427522f2476befe8", 0xce}, {&(0x7f0000000180)="f8e0f154eb877ba449f533cebde4b61a04ecad70ffe92215760a", 0x1a}], 0x4) [ 2681.297873][T23233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2681.317482][T23233] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2681.325974][T23233] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2681.333943][T23233] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2681.341907][T23233] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2681.349890][T23233] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2681.358016][T23233] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:13 executing program 4 (fault-call:3 fault-nth:32): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2681.421413][T23242] FAULT_INJECTION: forcing a failure. [ 2681.421413][T23242] name failslab, interval 1, probability 0, space 0, times 0 [ 2681.434048][T23242] CPU: 0 PID: 23242 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2681.444326][T23242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2681.454374][T23242] Call Trace: [ 2681.457648][T23242] dump_stack_lvl+0xb7/0x103 [ 2681.462336][T23242] dump_stack+0x11/0x1a [ 2681.466604][T23242] should_fail+0x23c/0x250 [ 2681.471027][T23242] ? xas_create+0x96b/0xb30 [ 2681.475596][T23242] __should_failslab+0x81/0x90 [ 2681.480386][T23242] should_failslab+0x5/0x20 [ 2681.484884][T23242] kmem_cache_alloc+0x46/0x2e0 [ 2681.489646][T23242] xas_create+0x96b/0xb30 [ 2681.493976][T23242] xas_store+0x70/0xca0 [ 2681.498136][T23242] ? io_wq_create+0x217/0x6f0 [ 2681.502812][T23242] ? io_wq_create+0x4fc/0x6f0 [ 2681.507529][T23242] __xa_store+0xcb/0x320 [ 2681.511773][T23242] xa_store+0x30/0x70 [ 2681.515748][T23242] io_uring_add_tctx_node+0x111/0x200 [ 2681.521123][T23242] io_uring_create+0x17e0/0x1980 [ 2681.526115][T23242] __x64_sys_io_uring_setup+0xe1/0x120 [ 2681.531787][T23242] do_syscall_64+0x3d/0x90 [ 2681.536193][T23242] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2681.542107][T23242] RIP: 0033:0x4665f9 [ 2681.545995][T23242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:07:13 executing program 4 (fault-call:3 fault-nth:33): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2681.565600][T23242] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2681.574030][T23242] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2681.582176][T23242] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2681.590319][T23242] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2681.598491][T23242] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2681.606654][T23242] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2681.644272][T23249] FAULT_INJECTION: forcing a failure. [ 2681.644272][T23249] name failslab, interval 1, probability 0, space 0, times 0 [ 2681.657374][T23249] CPU: 1 PID: 23249 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2681.667179][T23249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2681.677402][T23249] Call Trace: [ 2681.680682][T23249] dump_stack_lvl+0xb7/0x103 [ 2681.685275][T23249] dump_stack+0x11/0x1a [ 2681.689517][T23249] should_fail+0x23c/0x250 [ 2681.693935][T23249] ? xas_create+0x96b/0xb30 [ 2681.698438][T23249] __should_failslab+0x81/0x90 [ 2681.703260][T23249] should_failslab+0x5/0x20 [ 2681.708135][T23249] kmem_cache_alloc+0x46/0x2e0 [ 2681.712897][T23249] xas_create+0x96b/0xb30 [ 2681.717310][T23249] xas_store+0x70/0xca0 [ 2681.721576][T23249] ? io_wq_create+0x217/0x6f0 [ 2681.726307][T23249] ? io_wq_create+0x4fc/0x6f0 [ 2681.731145][T23249] __xa_store+0xcb/0x320 [ 2681.735496][T23249] xa_store+0x30/0x70 [ 2681.739503][T23249] io_uring_add_tctx_node+0x111/0x200 [ 2681.744979][T23249] io_uring_create+0x17e0/0x1980 [ 2681.750082][T23249] __x64_sys_io_uring_setup+0xe1/0x120 [ 2681.755628][T23249] do_syscall_64+0x3d/0x90 [ 2681.760121][T23249] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2681.766023][T23249] RIP: 0033:0x4665f9 [ 2681.769955][T23249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:07:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="eb3c8f0000fdc3a79136e1a4bd9500732e666174000201fb932ebc537e9c56ec5d0ba82aff161106a650af932a009337ca93f0c4c6281a56eebd908750b221f3", 0x40}, {0x0, 0x0, 0x10000001000}], 0x2040820, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x68) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4800, 0xd8) sendfile(r2, r3, 0x0, 0x401ffc000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) sendfile(r0, r4, &(0x7f0000000180)=0x200, 0x9) 02:07:13 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0xe00, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2681.789735][T23249] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2681.798269][T23249] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2681.806272][T23249] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2681.814244][T23249] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2681.822231][T23249] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2681.830294][T23249] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:13 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xffffffff00000000, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:13 executing program 4 (fault-call:3 fault-nth:34): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2681.930042][T23284] FAULT_INJECTION: forcing a failure. [ 2681.930042][T23284] name failslab, interval 1, probability 0, space 0, times 0 [ 2681.942807][T23284] CPU: 1 PID: 23284 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2681.952605][T23284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2681.962752][T23284] Call Trace: [ 2681.966281][T23284] dump_stack_lvl+0xb7/0x103 [ 2681.970955][T23284] dump_stack+0x11/0x1a [ 2681.975121][T23284] should_fail+0x23c/0x250 [ 2681.979529][T23284] ? xas_create+0x96b/0xb30 [ 2681.984071][T23284] __should_failslab+0x81/0x90 [ 2681.988839][T23284] should_failslab+0x5/0x20 [ 2681.993341][T23284] kmem_cache_alloc+0x46/0x2e0 [ 2681.998122][T23284] ? xas_create+0x96b/0xb30 [ 2682.002618][T23284] xas_create+0x96b/0xb30 [ 2682.006971][T23284] xas_store+0x70/0xca0 [ 2682.011122][T23284] ? io_wq_create+0x217/0x6f0 [ 2682.015867][T23284] ? io_wq_create+0x4fc/0x6f0 [ 2682.020530][T23284] __xa_store+0xcb/0x320 [ 2682.024835][T23284] xa_store+0x30/0x70 [ 2682.028893][T23284] io_uring_add_tctx_node+0x111/0x200 [ 2682.034350][T23284] io_uring_create+0x17e0/0x1980 [ 2682.039289][T23284] __x64_sys_io_uring_setup+0xe1/0x120 [ 2682.044876][T23284] do_syscall_64+0x3d/0x90 [ 2682.049319][T23284] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2682.055201][T23284] RIP: 0033:0x4665f9 [ 2682.059111][T23284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:07:14 executing program 4 (fault-call:3 fault-nth:35): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2682.078703][T23284] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2682.087120][T23284] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2682.095081][T23284] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2682.103035][T23284] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2682.111108][T23284] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2682.119076][T23284] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2682.152376][T23290] FAULT_INJECTION: forcing a failure. [ 2682.152376][T23290] name failslab, interval 1, probability 0, space 0, times 0 [ 2682.165008][T23290] CPU: 1 PID: 23290 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2682.174927][T23290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2682.185078][T23290] Call Trace: [ 2682.188342][T23290] dump_stack_lvl+0xb7/0x103 [ 2682.192941][T23290] dump_stack+0x11/0x1a [ 2682.197078][T23290] should_fail+0x23c/0x250 [ 2682.201473][T23290] ? xas_create+0x96b/0xb30 [ 2682.206055][T23290] __should_failslab+0x81/0x90 [ 2682.210878][T23290] should_failslab+0x5/0x20 [ 2682.215377][T23290] kmem_cache_alloc+0x46/0x2e0 [ 2682.220132][T23290] ? xas_create+0x96b/0xb30 [ 2682.224617][T23290] xas_create+0x96b/0xb30 [ 2682.229004][T23290] xas_store+0x70/0xca0 [ 2682.233150][T23290] ? io_wq_create+0x217/0x6f0 [ 2682.237829][T23290] ? io_wq_create+0x4fc/0x6f0 [ 2682.242591][T23290] __xa_store+0xcb/0x320 [ 2682.246870][T23290] xa_store+0x30/0x70 [ 2682.250894][T23290] io_uring_add_tctx_node+0x111/0x200 [ 2682.256309][T23290] io_uring_create+0x17e0/0x1980 [ 2682.261339][T23290] __x64_sys_io_uring_setup+0xe1/0x120 [ 2682.266888][T23290] do_syscall_64+0x3d/0x90 [ 2682.271384][T23290] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2682.277363][T23290] RIP: 0033:0x4665f9 [ 2682.281235][T23290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2682.300997][T23290] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2682.309408][T23290] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2682.317445][T23290] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2682.325431][T23290] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2682.333420][T23290] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2682.341528][T23290] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:16 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x13, 0x1, @thr={&(0x7f00000001c0)="0e26276bf5e8e5fc31b67e38e029fc71157f61eb91d7c21cb2ccfb765ed6e07d9a0ee11d75712830059d21669daa88521571bdea687c9096436c7c4c97e553c26f9174d5ebdcb5a6d48aaacf11e335cd07ba7ed5c45a73b3deee5cdb09b7d47a26a87eb783cb0b3cbb18d7a97af72eec5cdc50a6e4c75060a2ef31a5b6f6d1734cdc23069c0ae7d5", &(0x7f0000000280)="3f6913f420b27b8f905ab024a0016b18cd6a96dfa7ddb5184a2a53aee0f967620e27b9a8e43feca7d26f30513130e1c30988782c972968d4a7cfeafd54bc2b0a7cba73b789ee77a1456227134ff294e8a43627cba6af05218911d8459651d6189cf413b93bbaf2c148b4c536bd7a07e13dc8681c30fe1bb0124a63395da7d63a0afd18c3c403057acb8048b9db3d1595944bc847c9341c03d1942a436502ee5faa1c4ddf2c1459c42af77d"}}, &(0x7f0000000140)) clock_gettime(0x3, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:16 executing program 4 (fault-call:3 fault-nth:36): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual', 0x2, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f00000000c0)) 02:07:16 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xa, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x2000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2684.204392][T23307] FAULT_INJECTION: forcing a failure. [ 2684.204392][T23307] name failslab, interval 1, probability 0, space 0, times 0 [ 2684.217162][T23307] CPU: 1 PID: 23307 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2684.227920][T23307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2684.237989][T23307] Call Trace: [ 2684.241459][T23307] dump_stack_lvl+0xb7/0x103 [ 2684.246107][T23307] dump_stack+0x11/0x1a [ 2684.250434][T23307] should_fail+0x23c/0x250 [ 2684.254852][T23307] ? xas_create+0x96b/0xb30 [ 2684.259355][T23307] __should_failslab+0x81/0x90 [ 2684.264118][T23307] should_failslab+0x5/0x20 [ 2684.268609][T23307] kmem_cache_alloc+0x46/0x2e0 [ 2684.273449][T23307] ? xas_create+0x96b/0xb30 [ 2684.278064][T23307] xas_create+0x96b/0xb30 [ 2684.282402][T23307] xas_store+0x70/0xca0 [ 2684.286557][T23307] ? io_wq_create+0x217/0x6f0 [ 2684.291222][T23307] ? io_wq_create+0x4fc/0x6f0 [ 2684.295889][T23307] __xa_store+0xcb/0x320 [ 2684.300176][T23307] xa_store+0x30/0x70 [ 2684.304228][T23307] io_uring_add_tctx_node+0x111/0x200 [ 2684.309734][T23307] io_uring_create+0x17e0/0x1980 [ 2684.314695][T23307] __x64_sys_io_uring_setup+0xe1/0x120 [ 2684.320231][T23307] do_syscall_64+0x3d/0x90 [ 2684.324639][T23307] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2684.330564][T23307] RIP: 0033:0x4665f9 [ 2684.334443][T23307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:07:16 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xb, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2684.354035][T23307] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2684.362451][T23307] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2684.370417][T23307] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2684.378447][T23307] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2684.386423][T23307] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2684.394386][T23307] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x5, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={&(0x7f0000000080)="eb34aa8c4f38020f3b85e9f522f66c2ea99733", &(0x7f00000001c0)="e58ba4b71a41d7ffde5aeaabad28595759249032e311b1e7a8385763f0b7dbfc090022cfcef8c716099ccffb2f734382d2b8d44bf2e5c97be2cc960abb4dd93e8f75e37799fcac52a7bf70dfd9085c4c61c6e7d01a836549889934bd5e78c680e2ad6a1ba86474a2f42242230c05896bcbce135c99c7a9c83d39"}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() ptrace$cont(0x18, r1, 0x40, 0x2) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:16 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xe, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:16 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:16 executing program 4 (fault-call:3 fault-nth:37): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:16 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000300)=""/65, 0x41}], 0x2, 0x8000, 0x1c) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x401ffc000) r4 = dup2(0xffffffffffffffff, r0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x80010, r4, 0x4210a000) [ 2684.853701][T23336] FAULT_INJECTION: forcing a failure. [ 2684.853701][T23336] name failslab, interval 1, probability 0, space 0, times 0 [ 2684.866446][T23336] CPU: 0 PID: 23336 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2684.883275][T23336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2684.893330][T23336] Call Trace: [ 2684.896782][T23336] dump_stack_lvl+0xb7/0x103 [ 2684.901415][T23336] dump_stack+0x11/0x1a [ 2684.905579][T23336] should_fail+0x23c/0x250 [ 2684.909985][T23336] ? xas_create+0x96b/0xb30 [ 2684.914749][T23336] __should_failslab+0x81/0x90 [ 2684.919514][T23336] should_failslab+0x5/0x20 [ 2684.924103][T23336] kmem_cache_alloc+0x46/0x2e0 [ 2684.928863][T23336] ? xas_create+0x96b/0xb30 [ 2684.933846][T23336] xas_create+0x96b/0xb30 [ 2684.938213][T23336] xas_store+0x70/0xca0 [ 2684.942420][T23336] ? io_wq_create+0x217/0x6f0 [ 2684.947265][T23336] ? io_wq_create+0x4fc/0x6f0 [ 2684.952029][T23336] __xa_store+0xcb/0x320 [ 2684.956275][T23336] xa_store+0x30/0x70 [ 2684.960259][T23336] io_uring_add_tctx_node+0x111/0x200 [ 2684.965758][T23336] io_uring_create+0x17e0/0x1980 [ 2684.970877][T23336] __x64_sys_io_uring_setup+0xe1/0x120 [ 2684.976481][T23336] do_syscall_64+0x3d/0x90 [ 2684.980891][T23336] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2684.986794][T23336] RIP: 0033:0x4665f9 [ 2684.990676][T23336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2685.010429][T23336] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2685.018855][T23336] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2685.026816][T23336] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2685.034776][T23336] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2685.042740][T23336] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 02:07:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x200000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:17 executing program 4 (fault-call:3 fault-nth:38): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2685.050704][T23336] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2685.112728][T23361] FAULT_INJECTION: forcing a failure. [ 2685.112728][T23361] name failslab, interval 1, probability 0, space 0, times 0 [ 2685.125545][T23361] CPU: 1 PID: 23361 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2685.135408][T23361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2685.145462][T23361] Call Trace: [ 2685.148737][T23361] dump_stack_lvl+0xb7/0x103 [ 2685.153320][T23361] dump_stack+0x11/0x1a [ 2685.157513][T23361] should_fail+0x23c/0x250 02:07:17 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f00000001c0)={{r4, r5+10000000}, {0x77359400}}, &(0x7f0000000200)) syz_io_uring_setup(0xeb7, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) [ 2685.161954][T23361] ? xas_create+0x96b/0xb30 [ 2685.166585][T23361] __should_failslab+0x81/0x90 [ 2685.171370][T23361] should_failslab+0x5/0x20 [ 2685.175872][T23361] kmem_cache_alloc+0x46/0x2e0 [ 2685.180693][T23361] ? xas_create+0x96b/0xb30 [ 2685.185196][T23361] xas_create+0x96b/0xb30 [ 2685.189606][T23361] xas_store+0x70/0xca0 [ 2685.193757][T23361] ? io_wq_create+0x217/0x6f0 [ 2685.198513][T23361] ? io_wq_create+0x4fc/0x6f0 [ 2685.203182][T23361] __xa_store+0xcb/0x320 [ 2685.207430][T23361] xa_store+0x30/0x70 02:07:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'dummy0\x00', &(0x7f0000000040)=@ethtool_cmd={0x3, 0xfff, 0x4, 0x4, 0x5, 0x9, 0x8e, 0x5, 0x9, 0x6, 0x6, 0x6, 0x7, 0x0, 0x9, 0x20, [0x5, 0x9]}}) sendfile(r1, r2, 0x0, 0x401ffc000) [ 2685.211405][T23361] io_uring_add_tctx_node+0x111/0x200 [ 2685.216865][T23361] io_uring_create+0x17e0/0x1980 [ 2685.221799][T23361] __x64_sys_io_uring_setup+0xe1/0x120 [ 2685.227281][T23361] do_syscall_64+0x3d/0x90 [ 2685.231694][T23361] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2685.237649][T23361] RIP: 0033:0x4665f9 [ 2685.241615][T23361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:07:17 executing program 4 (fault-call:3 fault-nth:39): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2685.261261][T23361] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2685.269768][T23361] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2685.277779][T23361] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2685.285730][T23361] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2685.293681][T23361] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2685.301634][T23361] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2685.342377][T23372] FAULT_INJECTION: forcing a failure. [ 2685.342377][T23372] name failslab, interval 1, probability 0, space 0, times 0 [ 2685.355092][T23372] CPU: 1 PID: 23372 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2685.364888][T23372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2685.375028][T23372] Call Trace: [ 2685.378299][T23372] dump_stack_lvl+0xb7/0x103 [ 2685.382890][T23372] dump_stack+0x11/0x1a [ 2685.387038][T23372] should_fail+0x23c/0x250 [ 2685.391445][T23372] ? xas_create+0x96b/0xb30 [ 2685.395972][T23372] __should_failslab+0x81/0x90 [ 2685.400746][T23372] should_failslab+0x5/0x20 [ 2685.405525][T23372] kmem_cache_alloc+0x46/0x2e0 [ 2685.410286][T23372] ? xas_create+0x96b/0xb30 [ 2685.414794][T23372] xas_create+0x96b/0xb30 [ 2685.419280][T23372] xas_store+0x70/0xca0 [ 2685.423433][T23372] ? io_wq_create+0x217/0x6f0 [ 2685.428100][T23372] ? io_wq_create+0x4fc/0x6f0 [ 2685.432768][T23372] __xa_store+0xcb/0x320 [ 2685.437005][T23372] xa_store+0x30/0x70 [ 2685.440981][T23372] io_uring_add_tctx_node+0x111/0x200 [ 2685.446358][T23372] io_uring_create+0x17e0/0x1980 [ 2685.451368][T23372] __x64_sys_io_uring_setup+0xe1/0x120 [ 2685.457001][T23372] do_syscall_64+0x3d/0x90 [ 2685.461431][T23372] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2685.467420][T23372] RIP: 0033:0x4665f9 [ 2685.471342][T23372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:07:17 executing program 4 (fault-call:3 fault-nth:40): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2685.490955][T23372] RSP: 002b:00007f2e88d67108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2685.499462][T23372] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2685.507432][T23372] RDX: 00000000204e7000 RSI: 00000000200003c0 RDI: 0000000000000eb3 [ 2685.515469][T23372] RBP: 00000000200003c0 R08: 0000000020000480 R09: 0000000020000480 [ 2685.523423][T23372] R10: 0000000020000440 R11: 0000000000000202 R12: 0000000020000480 [ 2685.531378][T23372] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2685.568878][T23379] FAULT_INJECTION: forcing a failure. [ 2685.568878][T23379] name failslab, interval 1, probability 0, space 0, times 0 [ 2685.581802][T23379] CPU: 1 PID: 23379 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2685.591604][T23379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2685.601721][T23379] Call Trace: [ 2685.604985][T23379] dump_stack_lvl+0xb7/0x103 [ 2685.609643][T23379] dump_stack+0x11/0x1a [ 2685.613785][T23379] should_fail+0x23c/0x250 [ 2685.618477][T23379] ? anon_vma_clone+0x8d/0x380 [ 2685.623395][T23379] __should_failslab+0x81/0x90 [ 2685.628181][T23379] should_failslab+0x5/0x20 [ 2685.632664][T23379] kmem_cache_alloc+0x46/0x2e0 [ 2685.637462][T23379] anon_vma_clone+0x8d/0x380 [ 2685.642043][T23379] __split_vma+0x134/0x320 [ 2685.646447][T23379] __do_munmap+0x27c/0x1330 [ 2685.651067][T23379] ? __xas_nomem+0xfc/0x270 [ 2685.655571][T23379] mmap_region+0x5ab/0x1210 [ 2685.660066][T23379] ? security_mmap_addr+0x78/0x90 [ 2685.665083][T23379] do_mmap+0x781/0xc20 [ 2685.669139][T23379] vm_mmap_pgoff+0xf9/0x1d0 [ 2685.673622][T23379] ksys_mmap_pgoff+0x284/0x350 [ 2685.678453][T23379] ? exit_to_user_mode_prepare+0x65/0x190 [ 2685.684152][T23379] do_syscall_64+0x3d/0x90 [ 2685.688554][T23379] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2685.694450][T23379] RIP: 0033:0x466642 [ 2685.698356][T23379] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 02:07:17 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xa00, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2685.718022][T23379] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2685.726529][T23379] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2685.734717][T23379] RDX: 0000000000000003 RSI: 0000000000024140 RDI: 0000000020ffd000 [ 2685.742680][T23379] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 2685.750909][T23379] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2685.759172][T23379] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x4, &(0x7f0000000080)={0x0, 0x2b, 0x1, @thr={&(0x7f00000001c0)="5cb6a3a638b5116ce8e2cf9ffbff34a552e70b194bcad0d1111c8393b78f931567e59b8a86ad0443d8c1e9854fe54cb114dd8c1d40a6624892e941eaa33552bc039a3b29a8feef0a3bf594e9a7a5b0e2baf981b02f7bb4bd96f58e12a3dd4f16a1c1b97d5e2ed6f428b611409403a8a44ce2cb9011222432ec6cbadaaaf9671f7010d0f7fba7204252f49d15ff303e632bfddb5d9d544063bf746547491f1664fdc71468744b85250219acffdb611cde7b1898548b873270c0b69834873ba25fe7abc390e3deb0c00e3fee7c95ba8a47cf3656cf3bd9f5163dacf9eee4910f", &(0x7f00000002c0)="49d90a312b34542c598173c857784ca65b237eaa4be6e06f3a4656cddfc4496442de75c86656d378c7a1c52a24b76e95974e91d25df2dbc0dd84bb337231a41cc5b6e1c6e1d1e677e36bf38689"}}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000380)={{r2, r3+60000000}, {0x77359400}}, &(0x7f00000003c0)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:19 executing program 4 (fault-call:3 fault-nth:41): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 02:07:19 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_create(0x6, &(0x7f0000000300)={0x0, 0x18, 0x0, @thr={&(0x7f00000002c0)="810615e3526483", &(0x7f00000004c0)="d5d48ce5a2fd15c09ddc74ea8c09f95c77515595d5ef8256276e100cc7cad7ac8d842286242c28146807f97ceb42461de2d605cbdbb2c558ddf9c5cc5dce781e793730b1b7d0e3f0d3d63e230c93d4c4b490bef7046f8d4453d743b1ecb2f37555912335cacf4f898f01a652816f74215f88b3f60a822880ce56c9179087a15ee8cb2b64da139c3e6125660028195b2789daab5d742c25028e093aa60ab3ba9cf9c22e"}}, &(0x7f0000000380)=0x0) timer_settime(r2, 0x1, &(0x7f0000000580)={{}, {0x77359400}}, &(0x7f00000005c0)) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r6, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, r3, 0x0, r6}, 0x3ff) timer_settime(0x0, 0x1, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x8d84, 0x0, &(0x7f00000001c0)="cc27f756c42b6ce51f35da4b31111f91c0fe9cb86dc9ea0276f869b19912b87c6ab3b5b92e9f61bf949f5b802fe3e890cf840e5f70a181af85624d48034b72a2c88c86f451f8d16e0c3b26d9f286cc0ea03c45528e8df1c03e915503b3842a9cb6f550c7b0eb91eb6b43c229570634fbc5f0490625af67dd89fb240d976933be34f3f47f296647c2729c5e6b0e5e0ca6170750e38f81c523116103e8ccc20ac7098efe4149fd0ae6008743e3042f8754a8b5517a4236be3ec662117db9335b4484f15526ee4b029aad73d9ec588dd3", 0x80, 0x0, 0x1, {0x2}}, 0x6) 02:07:19 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x5099bc, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:19 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xb00, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2687.908824][T23407] FAULT_INJECTION: forcing a failure. [ 2687.908824][T23407] name failslab, interval 1, probability 0, space 0, times 0 [ 2687.921457][T23407] CPU: 0 PID: 23407 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2687.931342][T23407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2687.941393][T23407] Call Trace: [ 2687.944668][T23407] dump_stack_lvl+0xb7/0x103 [ 2687.949428][T23407] dump_stack+0x11/0x1a [ 2687.953808][T23407] should_fail+0x23c/0x250 [ 2687.958230][T23407] ? vm_area_alloc+0x28/0xa0 [ 2687.962847][T23407] __should_failslab+0x81/0x90 [ 2687.967610][T23407] should_failslab+0x5/0x20 [ 2687.972131][T23407] kmem_cache_alloc+0x46/0x2e0 [ 2687.976890][T23407] vm_area_alloc+0x28/0xa0 [ 2687.981299][T23407] mmap_region+0x750/0x1210 [ 2687.985825][T23407] ? security_mmap_addr+0x78/0x90 [ 2687.990885][T23407] do_mmap+0x781/0xc20 [ 2687.995123][T23407] vm_mmap_pgoff+0xf9/0x1d0 [ 2687.999626][T23407] ksys_mmap_pgoff+0x284/0x350 [ 2688.004384][T23407] ? exit_to_user_mode_prepare+0x65/0x190 [ 2688.010124][T23407] do_syscall_64+0x3d/0x90 [ 2688.014530][T23407] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2688.020502][T23407] RIP: 0033:0x466642 [ 2688.024430][T23407] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2688.044113][T23407] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 02:07:19 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xe00, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:20 executing program 4 (fault-call:3 fault-nth:42): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2688.052756][T23407] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2688.060764][T23407] RDX: 0000000000000003 RSI: 0000000000024140 RDI: 0000000020ffd000 [ 2688.068788][T23407] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 2688.076831][T23407] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2688.084862][T23407] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2688.117048][T23424] FAULT_INJECTION: forcing a failure. [ 2688.117048][T23424] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2688.130317][T23424] CPU: 0 PID: 23424 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2688.140159][T23424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2688.150321][T23424] Call Trace: [ 2688.153629][T23424] dump_stack_lvl+0xb7/0x103 [ 2688.158203][T23424] dump_stack+0x11/0x1a [ 2688.162399][T23424] should_fail+0x23c/0x250 [ 2688.166804][T23424] __alloc_pages+0x102/0x320 [ 2688.171569][T23424] alloc_pages+0x382/0x3d0 [ 2688.175984][T23424] pte_alloc_one+0x29/0xb0 [ 2688.180379][T23424] __pte_alloc+0x2f/0x210 [ 2688.184694][T23424] remap_pfn_range_notrack+0x5b7/0x770 [ 2688.190213][T23424] remap_pfn_range+0x87/0xe0 [ 2688.194782][T23424] io_uring_mmap+0x232/0x260 [ 2688.199472][T23424] mmap_region+0xae2/0x1210 [ 2688.203969][T23424] do_mmap+0x781/0xc20 [ 2688.208026][T23424] vm_mmap_pgoff+0xf9/0x1d0 [ 2688.212520][T23424] ksys_mmap_pgoff+0x284/0x350 [ 2688.217316][T23424] ? exit_to_user_mode_prepare+0x65/0x190 [ 2688.223132][T23424] do_syscall_64+0x3d/0x90 [ 2688.227525][T23424] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2688.233466][T23424] RIP: 0033:0x466642 [ 2688.237431][T23424] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2688.257025][T23424] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 02:07:20 executing program 4 (fault-call:3 fault-nth:43): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2688.265453][T23424] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2688.273419][T23424] RDX: 0000000000000003 RSI: 0000000000024140 RDI: 0000000020ffd000 [ 2688.281599][T23424] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 2688.289721][T23424] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2688.297729][T23424] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2688.336122][T23427] FAULT_INJECTION: forcing a failure. [ 2688.336122][T23427] name failslab, interval 1, probability 0, space 0, times 0 [ 2688.348962][T23427] CPU: 1 PID: 23427 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2688.358852][T23427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2688.369293][T23427] Call Trace: [ 2688.372562][T23427] dump_stack_lvl+0xb7/0x103 [ 2688.377293][T23427] dump_stack+0x11/0x1a [ 2688.381445][T23427] should_fail+0x23c/0x250 [ 2688.385873][T23427] ? vm_area_dup+0x44/0x120 [ 2688.390377][T23427] __should_failslab+0x81/0x90 [ 2688.395193][T23427] should_failslab+0x5/0x20 [ 2688.399789][T23427] kmem_cache_alloc+0x46/0x2e0 [ 2688.404554][T23427] vm_area_dup+0x44/0x120 [ 2688.408876][T23427] ? kmem_cache_alloc+0x1fb/0x2e0 [ 2688.413904][T23427] ? xas_create+0x96b/0xb30 [ 2688.418398][T23427] ? xas_create+0xae3/0xb30 [ 2688.422990][T23427] __split_vma+0x82/0x320 [ 2688.427386][T23427] ? vmacache_find+0x2d2/0x320 [ 2688.432139][T23427] __do_munmap+0x27c/0x1330 [ 2688.436795][T23427] ? __xas_nomem+0xfc/0x270 [ 2688.441518][T23427] mmap_region+0x5ab/0x1210 [ 2688.446045][T23427] ? security_mmap_addr+0x78/0x90 [ 2688.451068][T23427] do_mmap+0x781/0xc20 [ 2688.455123][T23427] vm_mmap_pgoff+0xf9/0x1d0 [ 2688.460239][T23427] ksys_mmap_pgoff+0x284/0x350 [ 2688.465085][T23427] ? exit_to_user_mode_prepare+0x65/0x190 [ 2688.470835][T23427] do_syscall_64+0x3d/0x90 [ 2688.475421][T23427] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2688.481300][T23427] RIP: 0033:0x466642 [ 2688.485184][T23427] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2688.504898][T23427] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2688.513325][T23427] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2688.527748][T23427] RDX: 0000000000000003 RSI: 0000000000024140 RDI: 0000000020ffd000 02:07:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:syslog_conf_t:s0\x00', 0x23, 0x7) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) [ 2688.535795][T23427] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 2688.543818][T23427] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2688.551773][T23427] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:20 executing program 4 (fault-call:3 fault-nth:44): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2688.610094][T23434] FAULT_INJECTION: forcing a failure. [ 2688.610094][T23434] name failslab, interval 1, probability 0, space 0, times 0 [ 2688.622778][T23434] CPU: 0 PID: 23434 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2688.632581][T23434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2688.642633][T23434] Call Trace: [ 2688.645900][T23434] dump_stack_lvl+0xb7/0x103 [ 2688.650485][T23434] dump_stack+0x11/0x1a [ 2688.654746][T23434] should_fail+0x23c/0x250 [ 2688.659258][T23434] ? anon_vma_clone+0x8d/0x380 [ 2688.664034][T23434] __should_failslab+0x81/0x90 [ 2688.669209][T23434] should_failslab+0x5/0x20 [ 2688.673737][T23434] kmem_cache_alloc+0x46/0x2e0 [ 2688.678506][T23434] anon_vma_clone+0x8d/0x380 [ 2688.683094][T23434] __split_vma+0x134/0x320 [ 2688.687543][T23434] ? vmacache_find+0x2d2/0x320 [ 2688.692424][T23434] __do_munmap+0x27c/0x1330 [ 2688.696930][T23434] ? __xas_nomem+0xfc/0x270 [ 2688.701518][T23434] mmap_region+0x5ab/0x1210 [ 2688.706062][T23434] ? security_mmap_addr+0x78/0x90 [ 2688.711088][T23434] do_mmap+0x781/0xc20 [ 2688.715213][T23434] vm_mmap_pgoff+0xf9/0x1d0 [ 2688.719767][T23434] ksys_mmap_pgoff+0x284/0x350 [ 2688.724552][T23434] ? exit_to_user_mode_prepare+0x65/0x190 [ 2688.730336][T23434] do_syscall_64+0x3d/0x90 [ 2688.734744][T23434] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2688.740634][T23434] RIP: 0033:0x466642 02:07:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x50d13f, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2688.744521][T23434] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2688.764233][T23434] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2688.772727][T23434] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2688.780792][T23434] RDX: 0000000000000003 RSI: 0000000000024140 RDI: 0000000020ffd000 [ 2688.788873][T23434] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 2688.796843][T23434] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2688.804826][T23434] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_delete(r0) 02:07:22 executing program 4 (fault-call:3 fault-nth:45): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66615369cea373ee1a1c008080f800", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES32=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes128, 0x10, '\x00', @a}) sendfile(r2, r3, 0x0, 0x401ffc000) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x101, 0x1, &(0x7f0000000180)=[{&(0x7f0000000300)="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", 0xfc, 0x8}], 0x8000, &(0x7f0000000400)={[{@dax}, {@commit={'commit', 0x3d, 0x1ff}}, {@acl}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nombcache}], [{@audit}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@uid_gt={'uid>', 0xee00}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x34, 0x38, 0x35, 0x61, 0x66, 0x0, 0x32], 0x2d, [0x33, 0x30, 0x32, 0x1], 0x2d, [0x19, 0x32, 0x62, 0x35], 0x2d, [0x38, 0x35, 0x30, 0x37], 0x2d, [0x66, 0x30, 0x0, 0x34, 0x65, 0x62, 0x38, 0x63]}}}, {@subj_role={'subj_role', 0x3d, '+(\xf9$'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_measure}]}) 02:07:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x2000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:22 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x51d6bf, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2690.971547][T23468] FAULT_INJECTION: forcing a failure. [ 2690.971547][T23468] name failslab, interval 1, probability 0, space 0, times 0 [ 2690.984188][T23468] CPU: 0 PID: 23468 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2690.994074][T23468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2691.004146][T23468] Call Trace: [ 2691.007506][T23468] dump_stack_lvl+0xb7/0x103 [ 2691.012100][T23468] dump_stack+0x11/0x1a [ 2691.016276][T23468] should_fail+0x23c/0x250 [ 2691.020692][T23468] ? anon_vma_clone+0x8d/0x380 [ 2691.025573][T23468] __should_failslab+0x81/0x90 [ 2691.030429][T23468] should_failslab+0x5/0x20 [ 2691.034936][T23468] kmem_cache_alloc+0x46/0x2e0 [ 2691.039757][T23468] anon_vma_clone+0x8d/0x380 [ 2691.044346][T23468] __split_vma+0x134/0x320 [ 2691.048767][T23468] ? vmacache_find+0x2d2/0x320 [ 2691.053716][T23468] __do_munmap+0x27c/0x1330 [ 2691.058512][T23468] ? __xas_nomem+0xfc/0x270 [ 2691.063027][T23468] mmap_region+0x5ab/0x1210 02:07:22 executing program 5: timer_create(0x6, &(0x7f0000000100)={0x0, 0x2c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r0+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb4, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x2, 0xfffffffd}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r3 = gettid() timer_settime(r1, 0x1, &(0x7f0000000200)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000280)) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r3, 0x0, 0x3) ptrace$cont(0x1f, r3, 0x0, 0x7) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x41, 0x4, @tid=r3}, &(0x7f0000000140)) [ 2691.067528][T23468] ? security_mmap_addr+0x78/0x90 [ 2691.072640][T23468] do_mmap+0x781/0xc20 [ 2691.076779][T23468] vm_mmap_pgoff+0xf9/0x1d0 [ 2691.081333][T23468] ksys_mmap_pgoff+0x284/0x350 [ 2691.086097][T23468] ? exit_to_user_mode_prepare+0x65/0x190 [ 2691.092001][T23468] do_syscall_64+0x3d/0x90 [ 2691.096423][T23468] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2691.102311][T23468] RIP: 0033:0x466642 [ 2691.106203][T23468] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2691.126066][T23468] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2691.134473][T23468] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2691.142483][T23468] RDX: 0000000000000003 RSI: 0000000000024140 RDI: 0000000020ffd000 [ 2691.150450][T23468] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 2691.158444][T23468] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2691.166433][T23468] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:23 executing program 2: setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=0x65c5, 0x8, 0x7) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:23 executing program 4 (fault-call:3 fault-nth:46): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2691.488425][T23484] FAULT_INJECTION: forcing a failure. [ 2691.488425][T23484] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2691.501922][T23484] CPU: 1 PID: 23484 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2691.511726][T23484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2691.521784][T23484] Call Trace: [ 2691.525142][T23484] dump_stack_lvl+0xb7/0x103 [ 2691.529776][T23484] dump_stack+0x11/0x1a [ 2691.533930][T23484] should_fail+0x23c/0x250 [ 2691.538339][T23484] __alloc_pages+0x102/0x320 [ 2691.542935][T23484] alloc_pages+0x382/0x3d0 [ 2691.547388][T23484] pte_alloc_one+0x29/0xb0 [ 2691.551876][T23484] __pte_alloc+0x2f/0x210 [ 2691.556201][T23484] remap_pfn_range_notrack+0x5b7/0x770 [ 2691.561656][T23484] remap_pfn_range+0x87/0xe0 [ 2691.566269][T23484] io_uring_mmap+0x232/0x260 [ 2691.570875][T23484] mmap_region+0xae2/0x1210 [ 2691.575446][T23484] do_mmap+0x781/0xc20 [ 2691.579609][T23484] vm_mmap_pgoff+0xf9/0x1d0 [ 2691.584113][T23484] ksys_mmap_pgoff+0x284/0x350 [ 2691.588875][T23484] ? exit_to_user_mode_prepare+0x65/0x190 [ 2691.594591][T23484] do_syscall_64+0x3d/0x90 [ 2691.599019][T23484] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2691.604918][T23484] RIP: 0033:0x466642 [ 2691.608805][T23484] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2691.628849][T23484] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 02:07:23 executing program 4 (fault-call:3 fault-nth:47): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2691.637256][T23484] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2691.645219][T23484] RDX: 0000000000000003 RSI: 0000000000024140 RDI: 0000000020ffd000 [ 2691.653279][T23484] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 2691.661240][T23484] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2691.669377][T23484] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2691.711756][T23488] FAULT_INJECTION: forcing a failure. [ 2691.711756][T23488] name failslab, interval 1, probability 0, space 0, times 0 [ 2691.724388][T23488] CPU: 0 PID: 23488 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2691.734216][T23488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2691.744353][T23488] Call Trace: [ 2691.748084][T23488] dump_stack_lvl+0xb7/0x103 [ 2691.753052][T23488] dump_stack+0x11/0x1a [ 2691.757206][T23488] should_fail+0x23c/0x250 [ 2691.761715][T23488] ? anon_vma_clone+0x8d/0x380 [ 2691.766474][T23488] __should_failslab+0x81/0x90 [ 2691.771432][T23488] should_failslab+0x5/0x20 [ 2691.775993][T23488] kmem_cache_alloc+0x46/0x2e0 [ 2691.780802][T23488] anon_vma_clone+0x8d/0x380 [ 2691.785384][T23488] __split_vma+0x134/0x320 [ 2691.790069][T23488] ? vmacache_find+0x2df/0x320 [ 2691.795040][T23488] __do_munmap+0x2ee/0x1330 [ 2691.799547][T23488] ? up_write+0x25/0xc0 [ 2691.803707][T23488] ? vma_link+0x137/0x150 02:07:23 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x6}], 0x3014014, &(0x7f0000000640)=ANY=[]) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [{0x20, ',}$.,^(&(]!-\xc0)--*^{&-'}], 0xa, "a733a17ef3da7738a8abcc8809195ec41225e88af08c4a762364b83ddb6c6f1856d103081b79b1dfbde5b72fcb43dc6fc3bc86711d8c8a1631630e821249ed7475f54c9a59c355f630564799abd19d28ffd379de3d350eedbee88626e3402a6c6b45e30a7cb3877c700367ac18392bda2a682c629849039229945ecf42d514c0a49d7c84681f6fd4620677dfe3ff2a199aa85e8c547ef2543c51cacb4de3ad46f8fb41bad7a96778dafef217ea7931cf5c56847f6815c65d8e77a78a465e21f02caf9d6cd06e32dd076f59eddcaf120d68fcc6e1b571"}, 0xf7) chdir(&(0x7f0000000740)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) getpeername(r1, &(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000140)=0x80) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x600000a, 0x11, r2, 0x3d0ad000) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1, 0x3, &(0x7f0000000a40)=[{&(0x7f0000000840)="ffac8391f4e4f7a442858229c129dd284b924596af060fa576e2c69a22797de5036b7d8088487728f51d62fe4b65c471ae5d1fe821a3abf262671a468ecc6319013b07f98f95b7bf63fb72484395c8cdb15a5f42c9aaf4b58d7c7ef61b71094e8a4c4fc9a24e", 0x66, 0x67}, {&(0x7f00000008c0)="dd27f6e226bd5523f755284cb57c5fd55598e331542a5a4a730b7b71d8ca66371c65b994ab22102c9350547b2d6e97af857cd95bd5a8802bf3f78e655783825f70278c850c892454e9484ee1fb41e91af606885ef158741d9054acdc0068845bfe11ec9b7aa77d3ecb40", 0x6a, 0x1}, {&(0x7f0000000940)="48fd64c98a6c4f6a64b3e47794c4e2d16ee4462ad22c7a4cbb98eb284aad71f790d56b89cc362bbabf2321aa5a340e324e0184ce5b304dee510b33da88a13b707bd0873b5186c8da9a03768fe9953cd56f859c01f957e5dad491c98e4134346ae39005ad2dc124c5759d58d8bad88ef787a25352eaadf0ba430cf41533f0cc85d43e80ffb9e1737603a4d95c9c76bad030594556d6eb329e3daf49f5e34507902345bf0759b521e9871bf8527496fa3560b5bd49ca1fd611f350bcca9050b60d172000a00381cfa11e467b5245f57d781b15ad51e8a4cdf6817d41fcb42fcc7e1105749f", 0xe4, 0x8}], 0x1, &(0x7f0000000ac0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x6d, 0x39, 0x35, 0x6d, 0x35, 0x31, 0x67]}}, {@huge_never}], [{@appraise}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xc0'}}]}) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="7349caa07851b3c8aaf90e4e23e207f73f2fd14baa181e308b8b22697057312d9bc7be3d37369fce92bb787d442e5623a5b2fbc33529d01c7fb1f804f6e0d473e34877153dd15f24c28b39047c9d974a03870438926019f0543108d138fdb045a78f6220896906e742304c3819a3c9ef4e864d5ee43ff083b00068ddb3ae52f4e557d00983e4708a5ac67205dcc9102ed64706931004ff3f31ae268a7fc492805b5c2dd975798db0be2d55b160a5", 0xae}], 0x1, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x60}}, {{&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)="c92e9c44f4abb5f2a7a9328679484c04607dd058ca71e6170a0eeaf293f6887c6aab90dc7e9e17fbd18ff3a91ff465f3ff0c9c6d055766e002dcd4f871f4e5be2611ae5383a5b2dd1a52d80ad8742ee1df0fbd8324ee01d2040111b956a84e76dbcdd6028d4edc671db15adea91b9a0569", 0x71}, {&(0x7f0000000540)="32ec38afafa3523ed34b1c11370d9ba8499de1ec8f51d37a8f3156ad6a46c23527d17068f508b19b5399a4d9ff113ba43efb746da1f1fae4b8ac378382f47ff44012a95ed5f0b130fd2043ed7a625c12104ea0f4261042cbb6e5ce8741c59a6b1e9f379a2842a450a6bc6bdd0657cd61939618325e2833c8a08064f627", 0x7d}], 0x2, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x4466}}], 0x18}}], 0x2, 0x4000091) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x40, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000800)={0x2, 'macvtap0\x00'}, 0x18) sendfile(r3, r4, 0x0, 0x401ffc000) [ 2691.808159][T23488] mmap_region+0x5ab/0x1210 [ 2691.812775][T23488] ? security_mmap_addr+0x78/0x90 [ 2691.817847][T23488] do_mmap+0x781/0xc20 [ 2691.821996][T23488] vm_mmap_pgoff+0xf9/0x1d0 [ 2691.826583][T23488] ksys_mmap_pgoff+0x284/0x350 [ 2691.831352][T23488] ? exit_to_user_mode_prepare+0x65/0x190 [ 2691.837080][T23488] do_syscall_64+0x3d/0x90 [ 2691.841497][T23488] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2691.847480][T23488] RIP: 0033:0x466642 [ 2691.851359][T23488] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2691.871137][T23488] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2691.879575][T23488] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2691.887632][T23488] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 00000000204e7000 [ 2691.895688][T23488] RBP: 00000000204e7000 R08: 0000000000000005 R09: 0000000010000000 [ 2691.903897][T23488] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 02:07:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x541596, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:23 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x200000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:23 executing program 4 (fault-call:3 fault-nth:48): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2691.911878][T23488] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2691.972004][T23513] FAULT_INJECTION: forcing a failure. [ 2691.972004][T23513] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2691.985489][T23513] CPU: 1 PID: 23513 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2691.995288][T23513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2692.005427][T23513] Call Trace: [ 2692.008751][T23513] dump_stack_lvl+0xb7/0x103 [ 2692.013342][T23513] dump_stack+0x11/0x1a [ 2692.017529][T23513] should_fail+0x23c/0x250 [ 2692.022029][T23513] __alloc_pages+0x102/0x320 [ 2692.026627][T23513] alloc_pages+0x382/0x3d0 [ 2692.031049][T23513] pte_alloc_one+0x29/0xb0 [ 2692.035466][T23513] __pte_alloc+0x2f/0x210 [ 2692.039879][T23513] remap_pfn_range_notrack+0x5b7/0x770 [ 2692.045342][T23513] remap_pfn_range+0x87/0xe0 [ 2692.049934][T23513] io_uring_mmap+0x232/0x260 [ 2692.054716][T23513] mmap_region+0xae2/0x1210 [ 2692.059305][T23513] do_mmap+0x781/0xc20 [ 2692.063434][T23513] vm_mmap_pgoff+0xf9/0x1d0 [ 2692.067942][T23513] ksys_mmap_pgoff+0x284/0x350 [ 2692.072705][T23513] ? exit_to_user_mode_prepare+0x65/0x190 [ 2692.078506][T23513] do_syscall_64+0x3d/0x90 [ 2692.082918][T23513] ? irqentry_exit+0xe/0x30 [ 2692.087442][T23513] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2692.093334][T23513] RIP: 0033:0x466642 [ 2692.097304][T23513] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 02:07:24 executing program 4 (fault-call:3 fault-nth:49): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2692.116945][T23513] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2692.125440][T23513] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2692.133414][T23513] RDX: 0000000000000003 RSI: 0000000000024140 RDI: 0000000020ffd000 [ 2692.141383][T23513] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000000000000 [ 2692.149524][T23513] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2692.157665][T23513] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2692.213864][T23520] FAULT_INJECTION: forcing a failure. [ 2692.213864][T23520] name failslab, interval 1, probability 0, space 0, times 0 [ 2692.226554][T23520] CPU: 0 PID: 23520 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2692.236450][T23520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2692.246594][T23520] Call Trace: [ 2692.249871][T23520] dump_stack_lvl+0xb7/0x103 [ 2692.254463][T23520] dump_stack+0x11/0x1a [ 2692.258617][T23520] should_fail+0x23c/0x250 [ 2692.263103][T23520] ? anon_vma_clone+0x8d/0x380 [ 2692.267880][T23520] __should_failslab+0x81/0x90 [ 2692.272779][T23520] should_failslab+0x5/0x20 [ 2692.277269][T23520] kmem_cache_alloc+0x46/0x2e0 [ 2692.282030][T23520] anon_vma_clone+0x8d/0x380 [ 2692.286618][T23520] __split_vma+0x134/0x320 [ 2692.291095][T23520] ? vmacache_find+0x2df/0x320 [ 2692.295913][T23520] __do_munmap+0x27c/0x1330 [ 2692.300421][T23520] ? up_write+0x25/0xc0 [ 2692.304591][T23520] ? vma_link+0x137/0x150 [ 2692.308919][T23520] mmap_region+0x5ab/0x1210 [ 2692.313429][T23520] ? security_mmap_addr+0x78/0x90 [ 2692.318519][T23520] do_mmap+0x781/0xc20 [ 2692.322684][T23520] vm_mmap_pgoff+0xf9/0x1d0 [ 2692.327191][T23520] ksys_mmap_pgoff+0x284/0x350 [ 2692.331956][T23520] ? exit_to_user_mode_prepare+0x65/0x190 [ 2692.337775][T23520] do_syscall_64+0x3d/0x90 [ 2692.342280][T23520] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2692.348280][T23520] RIP: 0033:0x466642 02:07:24 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x1000000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2692.352254][T23520] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2692.372083][T23520] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2692.380523][T23520] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2692.388523][T23520] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 00000000204e7000 [ 2692.396497][T23520] RBP: 00000000204e7000 R08: 0000000000000005 R09: 0000000010000000 [ 2692.404468][T23520] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 02:07:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000300)={0x6f7, 0x60, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:24 executing program 4 (fault-call:3 fault-nth:50): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2692.412441][T23520] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2692.461961][T23530] FAULT_INJECTION: forcing a failure. [ 2692.461961][T23530] name failslab, interval 1, probability 0, space 0, times 0 [ 2692.474618][T23530] CPU: 1 PID: 23530 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2692.484520][T23530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2692.494943][T23530] Call Trace: [ 2692.498222][T23530] dump_stack_lvl+0xb7/0x103 [ 2692.502823][T23530] dump_stack+0x11/0x1a [ 2692.507004][T23530] should_fail+0x23c/0x250 [ 2692.511491][T23530] ? vm_area_dup+0x44/0x120 [ 2692.515993][T23530] __should_failslab+0x81/0x90 [ 2692.520758][T23530] should_failslab+0x5/0x20 [ 2692.525352][T23530] kmem_cache_alloc+0x46/0x2e0 [ 2692.530118][T23530] ? __vma_adjust+0x182b/0x1a60 [ 2692.534973][T23530] vm_area_dup+0x44/0x120 [ 2692.539366][T23530] __split_vma+0x82/0x320 [ 2692.543695][T23530] ? vmacache_find+0x2df/0x320 [ 2692.548470][T23530] __do_munmap+0x2ee/0x1330 [ 2692.553019][T23530] ? up_write+0x25/0xc0 [ 2692.557239][T23530] ? vma_link+0x137/0x150 [ 2692.561567][T23530] mmap_region+0x5ab/0x1210 [ 2692.566189][T23530] ? security_mmap_addr+0x78/0x90 [ 2692.571532][T23530] do_mmap+0x781/0xc20 [ 2692.575645][T23530] vm_mmap_pgoff+0xf9/0x1d0 [ 2692.580289][T23530] ksys_mmap_pgoff+0x284/0x350 [ 2692.585055][T23530] ? exit_to_user_mode_prepare+0x65/0x190 [ 2692.590874][T23530] do_syscall_64+0x3d/0x90 [ 2692.595285][T23530] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2692.601171][T23530] RIP: 0033:0x466642 [ 2692.605058][T23530] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2692.624831][T23530] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2692.633244][T23530] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2692.641212][T23530] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 00000000204e7000 [ 2692.649187][T23530] RBP: 00000000204e7000 R08: 0000000000000005 R09: 0000000010000000 [ 2692.657252][T23530] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2692.665287][T23530] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:26 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000001c0)={0x0, 0xbb43, 0x20, 0x2, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000488000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:26 executing program 4 (fault-call:3 fault-nth:51): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x5502b9, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) sendto$inet(r1, &(0x7f0000000180)="aca01788ad578eed157ccce870c3b2d87d80fe4b3cfe8587615c9d8cb3d7e7346579674948923408ae30502457ed504cfeb55e07", 0x34, 0x4004800, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x4a0000) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000200)=""/102400, &(0x7f0000000040)=0x19000) close(r0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x8800000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x401ffc000) 02:07:26 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000005e680)={0x0, 0x0, "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", "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"}) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa64f, 0x0, @perf_bp, 0x0, 0x200, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000018c0)={0x3, 0x80, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x1}, 0x10, 0x9, 0xb4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdbe, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000400)={{}, r6, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r8]}, @devid}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRES64=r7], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005f680)={{0x0, 0x10000, 0x101, 0x4, 0x8, 0x100, 0xed0e, 0x8, 0x3ff, 0x7fff, 0x1fb7171c, 0xffff, 0x80, 0xfffffffffffffffc, 0x8001}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000060680)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {0x0, r5}, {r10}], 0x2, "2b423a60994437"}) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xa000000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2694.133926][T23546] FAULT_INJECTION: forcing a failure. [ 2694.133926][T23546] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.146564][T23546] CPU: 0 PID: 23546 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2694.156593][T23546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2694.166908][T23546] Call Trace: [ 2694.170366][T23546] dump_stack_lvl+0xb7/0x103 [ 2694.175088][T23546] dump_stack+0x11/0x1a [ 2694.179245][T23546] should_fail+0x23c/0x250 [ 2694.183653][T23546] ? vm_area_dup+0x44/0x120 [ 2694.188191][T23546] __should_failslab+0x81/0x90 [ 2694.193123][T23546] should_failslab+0x5/0x20 [ 2694.197621][T23546] kmem_cache_alloc+0x46/0x2e0 [ 2694.202389][T23546] ? __vma_adjust+0x182b/0x1a60 [ 2694.207274][T23546] vm_area_dup+0x44/0x120 [ 2694.211695][T23546] __split_vma+0x82/0x320 [ 2694.216031][T23546] ? vmacache_find+0x2df/0x320 [ 2694.220820][T23546] __do_munmap+0x2ee/0x1330 [ 2694.225742][T23546] ? up_write+0x25/0xc0 [ 2694.229891][T23546] ? vma_link+0x137/0x150 [ 2694.234213][T23546] mmap_region+0x5ab/0x1210 [ 2694.238728][T23546] ? security_mmap_addr+0x78/0x90 [ 2694.243863][T23546] do_mmap+0x781/0xc20 [ 2694.248120][T23546] vm_mmap_pgoff+0xf9/0x1d0 [ 2694.252712][T23546] ksys_mmap_pgoff+0x284/0x350 [ 2694.257476][T23546] ? exit_to_user_mode_prepare+0x65/0x190 [ 2694.263297][T23546] do_syscall_64+0x3d/0x90 [ 2694.267722][T23546] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2694.273666][T23546] RIP: 0033:0x466642 02:07:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xb000000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2694.277810][T23546] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2694.297677][T23546] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2694.306232][T23546] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2694.314200][T23546] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 00000000204e7000 [ 2694.322178][T23546] RBP: 00000000204e7000 R08: 0000000000000005 R09: 0000000010000000 02:07:26 executing program 4 (fault-call:3 fault-nth:52): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2694.330141][T23546] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2694.338107][T23546] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2694.381536][T23570] FAULT_INJECTION: forcing a failure. [ 2694.381536][T23570] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.394292][T23570] CPU: 1 PID: 23570 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2694.404195][T23570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2694.414326][T23570] Call Trace: [ 2694.417599][T23570] dump_stack_lvl+0xb7/0x103 [ 2694.422186][T23570] dump_stack+0x11/0x1a [ 2694.426332][T23570] should_fail+0x23c/0x250 [ 2694.430747][T23570] ? vm_area_alloc+0x28/0xa0 [ 2694.436126][T23570] __should_failslab+0x81/0x90 [ 2694.440882][T23570] should_failslab+0x5/0x20 [ 2694.445383][T23570] kmem_cache_alloc+0x46/0x2e0 [ 2694.450148][T23570] vm_area_alloc+0x28/0xa0 [ 2694.454566][T23570] mmap_region+0x750/0x1210 [ 2694.459124][T23570] ? security_mmap_addr+0x78/0x90 [ 2694.464143][T23570] do_mmap+0x781/0xc20 [ 2694.468210][T23570] vm_mmap_pgoff+0xf9/0x1d0 [ 2694.472893][T23570] ksys_mmap_pgoff+0x284/0x350 02:07:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x6e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) [ 2694.477650][T23570] ? exit_to_user_mode_prepare+0x65/0x190 [ 2694.483395][T23570] do_syscall_64+0x3d/0x90 [ 2694.487799][T23570] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2694.493691][T23570] RIP: 0033:0x466642 [ 2694.497583][T23570] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2694.517191][T23570] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 02:07:26 executing program 4 (fault-call:3 fault-nth:53): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2694.525878][T23570] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2694.533888][T23570] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 00000000204e7000 [ 2694.541878][T23570] RBP: 00000000204e7000 R08: 0000000000000005 R09: 0000000010000000 [ 2694.549846][T23570] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2694.557888][T23570] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 [ 2694.588977][T23579] FAULT_INJECTION: forcing a failure. [ 2694.588977][T23579] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2694.602258][T23579] CPU: 1 PID: 23579 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2694.612271][T23579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2694.622412][T23579] Call Trace: [ 2694.625682][T23579] dump_stack_lvl+0xb7/0x103 [ 2694.630268][T23579] dump_stack+0x11/0x1a [ 2694.634438][T23579] should_fail+0x23c/0x250 [ 2694.638860][T23579] __alloc_pages+0x102/0x320 [ 2694.643469][T23579] alloc_pages+0x382/0x3d0 [ 2694.647890][T23579] pte_alloc_one+0x29/0xb0 [ 2694.652350][T23579] __pte_alloc+0x2f/0x210 [ 2694.656766][T23579] remap_pfn_range_notrack+0x5b7/0x770 [ 2694.662304][T23579] remap_pfn_range+0x87/0xe0 [ 2694.666890][T23579] io_uring_mmap+0x232/0x260 [ 2694.671570][T23579] mmap_region+0xae2/0x1210 [ 2694.676267][T23579] do_mmap+0x781/0xc20 [ 2694.680368][T23579] vm_mmap_pgoff+0xf9/0x1d0 02:07:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xe000000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2694.685026][T23579] ksys_mmap_pgoff+0x284/0x350 [ 2694.689836][T23579] ? exit_to_user_mode_prepare+0x65/0x190 [ 2694.695679][T23579] do_syscall_64+0x3d/0x90 [ 2694.700107][T23579] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2694.705995][T23579] RIP: 0033:0x466642 [ 2694.709878][T23579] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2694.729480][T23579] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 02:07:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x68}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) [ 2694.737911][T23579] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2694.745879][T23579] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 00000000204e7000 [ 2694.753840][T23579] RBP: 00000000204e7000 R08: 0000000000000005 R09: 0000000010000000 [ 2694.761810][T23579] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2694.769766][T23579] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:29 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x840, 0x81, 0x0, 0x50000000, 0x8000, 0x2a63, 0x730, 0x1ff}, &(0x7f0000000140)={0x80, 0x282, 0x80000000, 0x2, 0x1, 0x3, 0xffffffffffff54dd, 0x1f}, &(0x7f00000001c0)={0x5, 0x3, 0x9, 0x8d, 0x7, 0x100000001, 0x1, 0x4}, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1]}, 0x8}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(0xffffffffffffffff, r2) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:29 executing program 4 (fault-call:3 fault-nth:54): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:29 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x5637fb, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:29 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xfeffffff, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2697.177760][T23612] FAULT_INJECTION: forcing a failure. [ 2697.177760][T23612] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2697.191198][T23612] CPU: 0 PID: 23612 Comm: syz-executor.4 Tainted: G W 5.14.0-syzkaller #0 [ 2697.201009][T23612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2697.211071][T23612] Call Trace: [ 2697.214343][T23612] dump_stack_lvl+0xb7/0x103 [ 2697.218939][T23612] dump_stack+0x11/0x1a [ 2697.223112][T23612] should_fail+0x23c/0x250 [ 2697.227576][T23612] __alloc_pages+0x102/0x320 [ 2697.232220][T23612] alloc_pages+0x382/0x3d0 [ 2697.236661][T23612] pte_alloc_one+0x29/0xb0 [ 2697.241174][T23612] __pte_alloc+0x2f/0x210 [ 2697.245500][T23612] remap_pfn_range_notrack+0x5b7/0x770 [ 2697.250956][T23612] remap_pfn_range+0x87/0xe0 [ 2697.255542][T23612] io_uring_mmap+0x232/0x260 [ 2697.260160][T23612] mmap_region+0xae2/0x1210 [ 2697.264661][T23612] do_mmap+0x781/0xc20 [ 2697.268899][T23612] vm_mmap_pgoff+0xf9/0x1d0 [ 2697.273404][T23612] ksys_mmap_pgoff+0x284/0x350 [ 2697.278231][T23612] ? exit_to_user_mode_prepare+0x65/0x190 [ 2697.284041][T23612] do_syscall_64+0x3d/0x90 [ 2697.288462][T23612] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2697.294384][T23612] RIP: 0033:0x466642 [ 2697.298310][T23612] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2697.317908][T23612] RSP: 002b:00007f2e88d670f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 02:07:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$cont(0x1f, 0x0, 0x0, 0x7) process_vm_writev(0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/215, 0xd7}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000440)=""/141, 0x8d}], 0x3, &(0x7f0000000880)=[{&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/45, 0x2d}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/98, 0x62}, {&(0x7f00000007c0)=""/155, 0x9b}], 0x6, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x7) timer_create(0x5, &(0x7f0000000240)={0x0, 0xf, 0x0, @tid=r0}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000640)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000080)="b91f1a857c9f5e862c4179704eb6", &(0x7f0000000140)="42c68d57be22ab6c9d228e222534b37e4444a4fcf21e732f80dbabe39ea5d73e4d4e429462c9"}}, &(0x7f0000000200)) 02:07:29 executing program 1: r0 = gettid() r1 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000002a00)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000002a40)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = gettid() clone3(&(0x7f0000002cc0)={0x250310000, &(0x7f0000002b00), &(0x7f0000002b40), &(0x7f0000002b80)=0x0, {0x2a}, &(0x7f0000002e00)=""/64, 0x3b, &(0x7f0000002c00)=""/76, &(0x7f0000002c80)=[0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) perf_event_open(&(0x7f0000002a80)={0x0, 0x80, 0x10, 0x2, 0xff, 0x6, 0x0, 0x3ff, 0x8, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xf7, 0x1, @perf_config_ext={0x0, 0x8}, 0x808, 0x2, 0x4, 0x6, 0xffffffffffff8001, 0x6, 0x100, 0x0, 0x8ecd, 0x0, 0x4}, r6, 0xffffffffffffffff, r1, 0x9) timer_settime(r2, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) perf_event_open(&(0x7f0000002d80)={0x2, 0x80, 0x6, 0xff, 0x20, 0xe5, 0x0, 0x2, 0x9001, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000002d40), 0xe}, 0x4020, 0x6000000, 0x8, 0x3, 0x200, 0x7, 0x77, 0x0, 0x7fff, 0x0, 0x80}, 0x0, 0x10, r1, 0x9) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) vmsplice(r1, &(0x7f00000026c0)=[{&(0x7f0000000240)="e9472f909688361a4a01ea85bbe3f12a12e1a6f703c3d8297153c3a4bdb723ed7e91a6c7e4ea3061b92da4ef20a5ba01c95c826a8be66e5e59b726c408faeca0c7d2e3", 0x43}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="cdc9b9354ef6e485c8f551a518be3b9aa94a322115bb6db694d54a30a0f7e7e185416dd3df0806dbbe91c069baaa8f8fa578e42a35119a80ce554898091c838c3306485c04b40bd44a97908534401bfd71a134f6450d2a7a78e5ae1634ca8f8a77b1c110db6a7fed0c6c80041c8ef95a3c0b07141e2f2650e50a3dd152c14ad0df24d3a2fc8c", 0x86}, {&(0x7f0000001380)="6d0cf0cd03f7880cb36f9a29e6a7af31d1d96c5c5f5d", 0x16}, {&(0x7f00000013c0)="dd344a53048a08ed31aa477c39e86e5fbed7a48c1efb666e7e0da4839e7b9241e625c065e9c871df419da06ef26c95ed0c425f8aa759f5b7c2818f1553b662b7d75dc1bd005dac1c6f72172f42e345d23ab6", 0x52}, {&(0x7f0000001440)="57cfaf8618dc1efd48f7083f03c8d2d31126dd327b2721e1da173a7ade355037f0ed9d2ad9ae2728cca933b31dbe055329911929aea04a8bab4400a438f5a741dfcea84b7089b2d5e5e0666121809fd1e72e11913276ad3e2f6405e0bea3bae4fab39c71f3af9f4d9d49f13866729df6fd8f849a6cbbc9f47a9d95c89c45ea8eb38172eb42e6a0b4be3cc1dd0c83e5", 0x8f}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="966906817c09239be5cda101a0b18a685c86bea1af56a5279a9cbb7daad648a3e05391709be17fb26aff16c845b5262d583343b9e534281c52edbd19030b06c719a9e9a041b6c34982ba86e8b201f6074ec9eee82f91cf4db302b7dcaca3f83c3075c4d455ca81f1da434ae1b3b2b6e2d48209f59c7f7042d15ab1f339f92d76a4cfc798ec01959da4e91b94273195e524bc1ce1e462884b78a6e5aa37b14efc057ecd97484d4f74712fec3799e78c9fc311552c6540110a905b10babdc1c2878a1b1390e0610d68de4b12e3f101ec403dd691454714baec362143df146efd664427c83a037981173d6f010586f31de2c76c6a9cd8a5fa", 0xf7}, {&(0x7f0000002600)="24193ce414c2c5bdaf7462ec13573ebab6685d3a2316d095295c78f9e01037f33bfbd0471c34de11113009dcdc53e777b558503a9046a86945093817ae77d4a9b7af6e6cab", 0x45}, {&(0x7f0000002680)="f5657045b4f8036950cbcb732d89e06f2eea6a110c8f8780603ab544b01b826217e71fe7e831156d12a3a53f", 0x2c}], 0xa, 0x11) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) 02:07:29 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xffffff7f, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:29 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x573f30, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2697.326318][T23612] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 2697.334286][T23612] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 00000000204e7000 [ 2697.342251][T23612] RBP: 00000000204e7000 R08: 0000000000000005 R09: 0000000010000000 [ 2697.350324][T23612] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2697.358293][T23612] R13: 00000000204e7000 R14: 0000000020000440 R15: 0000000020ffd000 02:07:29 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xfffffffe, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:29 executing program 4 (fault-call:3 fault-nth:55): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001380)={0x0, 0xfffffffffffffffd, 0x1000, 0x4, @buffer={0x0, 0x41, &(0x7f0000000300)=""/65}, &(0x7f0000000380)="7143887f0ac6d412c383c284ddd1663a251baba142c46be0513e0983e3e01f070320be9045d722ba2a495da60864ea76200eee6a2923a6a2ac3ebab45fe53fdacd4154938ba065b4cacdae8c09f897422dfbd795bc4a53b4ecdead9984a2031422994f747732535d4c61e18c04cbd3ed313f0ca2c279b663ecd734f9e22c6ea129a51a0d75418dbcb20971863051b45d460cd0b7f401c379b6c4a34ee067962a673a6be9ed553a35dc02e992a94180a9567ce61db58f3c6e2ccdfae8375f4a47477cdb8b61ed12f8fba2d71263aecbe97d8df7d0435ae0e553d06b6c37d901c94b98ed114f28ebe4d9d433086c63970de7dcde5db0ff9cace00a156f9009373bdbd6c2edfe3af2bcb537e02ab6223d77284658ce46fe82b162af592bab5760135d3f8ec5413e3f7e5c95f9386362e9dc9254a3e5f9b1b32f730912e82d914dffc996071fe468925e4d1cffbd911d29f64be5e4862d1a2769956acb4001b8b0ab2791670c425d61dc62446c9baf016fec84e54b28f1f8319f994ae668ed606960a1082640073ce000ab7e0c3da7127c92f816f6670c2b9f95b1a326befb6d6e34444a7d5504e781d2a0ba453a95b0712dab660b0e5b99042b1387a2c090cb766205018d9b423ddb72b28e6244fca196e1514553ef4b5b7bbf3d20a33f08fffcb8a13272423b86ea3aecaa530a3a34b91fe02f1594060d34cb6fd8fad45848ff6db9405092f51a89eef06e13b809466720b9a4bba6d323add1388413f8f7701ef14a7fe3085354fc4eede9811ce0b62aef339a4a3f6e5d625b4b43f561eecb9f11207b42732bc72a7351fcb5f8084038f5c82fb2b05839356796c680412758ad9b3ad365ef4d022debec58eea91268f2d6c6d333aad0ae3eb31b6bc8507bce08730d437691ff14b25ce8f7f1efcdd8d78a6e8f735064aede8c3e66326b23e7ed49d44daa820871df6a6260302fb793af9b301cdf3a9f589b6eb04d53cadd99c493c6fbdb8340aef7518df414a68c63b9a7a112a34f14f9a0c749e78744716a42bf876c52c930d8182dc9aea6d490bc5c43c471e96744ffffa1ff90f93371d15f205a4b1902ea414210ce586aa416d8f256eaa05e05223289b6bceb564b18548dae9d952f1d93e61ca9730f9777a6c3599c7f425026623339501e5855b9f5e280758820ac996759423c2f7e4c61c586d987eefed9f273c8740b7d676c4502407b14cb8a1db0eb4af5ea9f77f1366364cfd5e192a1abeed0b48f9a46849a01737c4f15549974e8102c9b4815a42bb264ab9bc7b0296f43b3442666fae01e801ad8a02076ae58b9f60d2ca93e23c3884cdd392fb9d4d89c2fdb75d52ea131e7683fd72d982822970135feb21de802cb4c8649791224cd7b714d909c745d0207f6c45ab0c852ab8cf5f94c4656252f57edfd3bd67dd35ef4d06dcad1ef6da242fef1a18d41c7ee4ec6d19f5b44ca8fe3e2fe0b866559749cee6d56987119fb6f8c3bf757773ba042fda43b441e3053ecae36dff3f1847b780ea559c9174ea076a37bfbcef2858bad4d6e26fa716290eeae0260a59db4b3a79b25b1142a53a4aac5f493c83e91cf0dfcb66479911f768b696135b98731f1d4991b2d6eb26fe9a782561a55c49af500eb1ea1781c6364512b62afea609307d24a6c77de3d7692f75276cb17092354366d2796231bf3e95fb90fa0cfd2270691ee5da4f329804a1c36e7180d94a921daca1bc8cdc4d8b49ada3f05aa6042f9d0d6b5506a7a6d64d1d3bf938defa324e12ece35888d642adade8033ea2418b65a6b8238b278c148164537d18880ffdbd0d33ad02a011e2536f19921bd6d7c6747ea3482edaf0ea829a876c40661e99a239340fa4aac18a55f2934dd09fbc75099e3c5ee23cc63a1be2f6ebd4b45bab453913c6e0870ecdf5dd3e63f6cb859c98bacef6db6f4a5d4614ecf5cacbea09ef4eaacf40a7fce697d9c1bde332643b30196b27250d0dc37ca1917fecae8a4c4d7f1438f3d062916ac011fd55da5ebfd29393b3cf9ced65847d1a0eacf96fafb6115869cf62a9f3c19d0d965caf0fc971caa78a4fd8f61f529dacedb2bed83135187d8fc1be460e4afec0cc8aaae3f97f18f59b50e515ed927162a555a43d52b09fc71fd650ea61fc97d6e8744b65fe6d82654343068ace545b37fa1a9997cd1ad68972b77d63c4a95f47e668a5c589c0bab490ffecb32068e76c8c7b9e68f14687de8e79fd6b2d9f5aff1efd72b2f640c7024dc6fa8af1f9b2384e5a55ca7534593300b4449fbbb8fbb6a443b1fa4af84c05b0d5e76132ede4e74748134a7a78f5c4c4ab2818389b65f5955c205333c8d61404465237b3ef5b89473566fc686b1a5d2f6918023c9e600f80bf04e641dd37d4a0da68ca79fb927fcedc7e231984b986036ad5c5fc407493245888449a19687c79bc649ce49010d63a2a35bbf0993d20ff2351d05ed5e8b0f87625cde57ad6cb547af8bcd07660506618d45a440820f30d2d272b6b00489c514b5ee4ba87675744f3bdca19d7140498691680a9554ffbd774f24510b9e54544f73d19f0ec00a0c8a54f72058807c0c8bfb337e3366267316d3d67fcde1cd7c7327fcdf60ea1dcd52620c3a83adb5437edf7b4f1193daa6ad69d3d38afe1c566e09be1302bfc7cce38406911200c78df3c53bfa7583bf91850e7d9c4a20777032e1fe9bef91c4de39f9c02aad312c2460b7aba056d0cd5c8af17dc9da672a959e6e1dc0606a7694f5c3f522e1f954be4451aa03b7ae0fec537e936b04739f6669a621abbc453a05172a5230c012d6a6de0428233e8b437bd11b94b24ce61cec97c8e70fc09f454560c21255d0067689da700721b649f0fcf24dd8a1790985db64077943ce7abd4c2aa1a8cbfe81a47495abafe9adbdfc116a7adb18ba6e4ba513768dff2740cda3ba07b1197be56d307f3cf7e5f0959807286eb5dbcf458c45b73a3bcb6fc2c0dc826832b0a6e30b23d6b7fc27e95c5b1b3361082b04011c3c87353e622737e70ed71515b9183d7dbd0007868fc06a56f243b9c05026067f2e18501dd70520ccce905141842ac1e93f29187112046c79ac7e10ac9a1f5c231cfc8be610acc6f5aacb33a19d65fdec0f3bfa167105f49b82d83fbeb1b19c6498fa63f55a8778091d4ac992c24953e714e89d4ec83b199185b899aedce7206c2c69e33765b19fcc88e1f596d2a8047a8f42068f6ec066723bd7e0e5dc3bd0ff817a28d424f43394fea27ff5785aa10573a34639118e66daf3f986006dd248b3eafc1af45180348498d7b349241ac8d2ed496f359792fa50bfd9d70c9e7806f5f492dc1b4f925d4bdfb7b33cbd42d54beed3fcdf7b4d7ff393aef41fe2b430a820d9c502a49d5fd0ab571002a69c444aa2cdef40d4b726f45f5efb6720586d91cc31d2a79450cb77e1473bd919d0a3130b294cce513e2b94e3a266d10f65f83d5c6626f8d1fd213acc0e8a4b2f48d49fa1fc77daf7a3866ca2139f062b9b82545a18f90e1930cdc07e06dfd0d1b2782a575e355e6bdd46098f2cc766dce2c1c319f6e6383e5a00f8cb7f79c35b0d1344cce415848d357ffb56795fbf703ad29a18fe60c7f0d936fb67ffcd02c6d68f8f44d2252b8bd2041fe77c36ebf9ebfa086e1ac4f2f657c96cf21e4cb7c180a9ee92ef253d32dcc3b056b46c65950a36b469b5317ef637d73fb081ec2ddda5ef90d0659afdd19883593e2d9054b6c6c8b0b0f64c40adf50bcb1d3557bf1e6459a53ecb88afb0629a703a253228bc15e8e95e185bef671584caaf670f15e206c59d100928b7982ae8d29f50fd16a95e5de9cb4564173e13fe08174cd41777f2711b1414634de12e583d6e2e17b54f31651126d73bda012f8b9544b829591e68193f54629f89ce8487c00437c62ff7d831a742a87b0d638ca91599e06e4b909dcb00ed3267f83cabd4ac76db2b13e2b830304057ca2530532b29c78a1bfc246e27e1d51314d1cde574b9d3a7bd7eb4633a288aa8c87fb304db216ab10ef8354cd30ef00c698d2e0fe84f248bcc289ee1ecd55776268aefd2a84c924b4a3f0e9a85c6f770459f3f5da913179166c968ada5700af939bef2052c81fcbd2208af57cc3b53f62f5ecf14d0fec4a436c492661843a258c0da2fe4e63348ed6e574285e8d533cd4ef281616544a48774ae8de9fcba30ed247849f675c889538cba597eaa4cbcc824df64bd0692b60b6cb7cba89b91f4d91608eb40fe03957e30be52937b07df16170f912824ebf33f1f4ab18cf9e571270933d999fb68083f11df009beb3cd08e76cc4c8f208cb800b17db189db2867132a39f55ee5a1bb00275b5cb757d22db832c2c9b7c0cd3d67904698a6c281face222e029aa5f3bfb3778f302d8d9286c006335cfa0e6b4e3117ebdbf710ed04d645a7e72e07b4ce9d4e2836b226b8b96cfab3c06ecdffc5f10abb7ae0349ec45837357976581112e4942d9ff83dea432f24c590f62514fd33a81cf4a95f3b5617e925b59980c21d115bf7453b55aa33c796f3b6f3953ce7b55303627939518b644c452a59a116c690b451537d79cd1fcaebf511cd4fb3f51aa74280212f5a420808d2d56f8824c70ecb8a1b244dd95d7d88c66a86b13929c7a7edd43a7dd9203a057e2516f2d3520354025176290aef9adea25ec16c9bb80556bb3e5d84b78235a5b4e04a9737d88c17296f22a5ef3cca610c674e9c53cfd2b6768cc1c87ea9689234f2544c058666c0afaeb1e617e49a58f0b2895ba92b85e26f6762d4cf3a02ce6abf060fa74bbc7da888a7f8fd1f6ccf8152bbdb7e90fab131e066e3661084922a07eb97958ae0ee2f29a1c20ab2d929051aee2f2cb8d0624990d920c8920cafd8ca6c188fc60c2bdd69c8b84f47bfa417359ee8a54dea3afad93111ad20595285c55f3f288831f4619de73f31c2d0048ba3d36db8a82d591cfff9ed84c65989ddfa3d4e4c71182357994c5d82517266d7e6a56e4dc9fdd35ef13468f0311d57b8ab50b9f927971fea72bc10b0a76f2d87df8a5a965bc6b1e2eb4e315af813122898d389f6ee44bfaf3ae8a9407fa7140a72e7dd4e434444e3d20ab49ac953d24c4c665231d1ff91090a08c9a794c178235c163f4044a5b0713ba897573eeecd318aadf163e93c65e20b539fa55db1cf1afae092c7a8fd392e3163cf5f114aa6c5e0385c967eb7550de83839101e42475be2c8b9d4fd1a2786d6ec23bdd9d4072c9fc0e1eedf305f93761d6ba788993f0bd2d8d766c1ddf706d579b5bd268c678c463d52b6429c1270acffeaca1a1b0d12f3935f051993ed6f42d2860389fa067d01fbe47f9c3d5af9143ce331b3eb1f19d41f524c7f19351701f988b39a3a971b7167688b5f24f5189946de9bb8c7100eac418da0af7a9b8163ac0e9b15f3b557e080a120270f17055f641b5125e30923f5e8877f10968740d06943ec49877aea7afa0ba45d0fcf600720e41117521a3cd2fd9f7bf978ed654487e1e9e29a3f9d3a4fea924399a701e865b386f11d902bf2f749a9693ff8a43f8f0a22da0366af6591186b54c027a951d6530c2a72560e147d8b2b69352ee1cfb1b6e379b17739b02fcd3f3bbdcad537bd03075731c5b9b5fa6a0c74c1a0c7f54beda6a95603ff11e28023223f8680adcd77d52af60eb94722bbe3b1f4cdf3d68f65fa4eac4614fe8b29e9e607c2161005dc38ddb3ff216c30289d50fe86ead23504763d63c3e986ecaf1858abf79ee0b948cf733e52cdba590cb675991ece49aaf4fff50a4cd66eec6915d2a3dc3969a3ded06c19", &(0x7f0000000040)=""/42, 0x5f, 0x2d, 0x0, &(0x7f00000000c0)}) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x57e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffbfff) 02:07:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:31 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x225c17d03, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:31 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_create(0x5, &(0x7f0000000380)={0x0, 0x20, 0x1, @thr={&(0x7f00000002c0)="62d2a69765b780ed50d857ae0ca3b8670bb34a4540fda8000aadc6a2b5c99ed242be2845c50cf406405d034a2b472ec6e3d0ae395194accffdf4e8055383589802500f8c0205c6f1b32a4c54dc247ae211ead01b244bd7d4ee8c7810cb40304f8a115477a957c9", &(0x7f00000004c0)="31f7f052a0b2e7152a27d161d6223e2ef5606611600af128eeedc66de3243e91bef4563009ee3a7a48ed335c93d2355fe606829665339be938dd4442759b33c0c0247229d30b3c3f6871580b2a307faf505a4c9c4cf413080b1e5c80d3bbde7cf8dc39490a7d30c8933a33244796cb00ec2255995b2e31"}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x1, &(0x7f0000000580)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r3+10000000}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/173, 0xad}], 0x1, 0xefe, 0x80000000) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) fadvise64(r4, 0x7ff, 0x3f, 0x2) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x0, 0x989680}}, &(0x7f0000000280)) 02:07:31 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x583567, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:31 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x26c7de2d324, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:32 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x1) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x2, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:32 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x18, 0x1, @thr={&(0x7f00000001c0)="a6e2799215864abd948eb009d1ef5a1a75f2a6a3f4a0785b389c5c0f2e4bbca5640b245aab06d59b746bc0df0d1e99812780f16cc5b8f3cadf282f72175e2def02a5bea98bf76e141b92882628736a5625889503ac9c9c43a03166cfd751cfbfd6e5ff46fcc75070654d6a35009b1ec96758a35c74e0d03a3690142868c54b7da59a3b3b06180ee5fcc88d3554f3b71f520e17f22ac2514938d6e67060968e3ab75cacf2fda76cf9ffebe2f1dd2a27fb2114d1ae9ac8328182df32b54811b344dc6ec48c446c0355b8952132bc", &(0x7f00000002c0)="a2d19038ad91f1387cf9ad7aa6f10950d9c1754e2cacac4330821778e3a3d6948ee58a599818d08fd179368a11ace01e812f4a1d7af0eebf0ed605e82eef52aff5e3455ffdec5f108f4414b3"}}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00000004c0)={{0x77359400}, {r4, r5+60000000}}, &(0x7f0000000500)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x103000, &(0x7f00000003c0)={[{@huge_always}, {@gid={'gid', 0x3d, r1}}, {@huge_advise}], [{@pcr={'pcr', 0x3d, 0x27}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_type={'obj_type', 0x3d, '##{\xe5'}}, {@dont_hash}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, '&'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x8800000) mount$9p_unix(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x1281000, &(0x7f0000000300)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x8}}, {@version_9p2000}, {@access_client}, {@aname={'aname', 0x3d, '\'!\'.*^'}}, {@loose}, {@access_client}, {@mmap}, {@nodevmap}, {@access_any}, {@noextend}]}}) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540), 0xc3000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@fscache}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@audit}]}}) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x401ffc000) 02:07:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x3, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x4, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x6, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x59e2db, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x7, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x8, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x10, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x26c86d3a4a4, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:33 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x5, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) timer_create(0x7, &(0x7f0000066000)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, &(0x7f0000000140)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x6, &(0x7f0000000280)={0x0, 0x38, 0x2}, &(0x7f00000002c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000000300)={{0x77359400}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="4239f2c2ba38fafdbc0456e9f4c9ab02d937af137244baeb617dc0516fed8b6b7a403aceabce7cc46a45eec823d61b8b68323250b502", 0x36) 02:07:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x42, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:33 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x15, 0x1}, &(0x7f0000000140)=0x0) timer_settime(r3, 0x1, &(0x7f00000001c0), &(0x7f0000000200)) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x8010, r1, 0x25620000) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x60, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xaf, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x26c8cb302e6, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x5b4652, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x193, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x198, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x19e, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x1c6, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x25, 0x2}, &(0x7f0000000280)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x37, 0x0, @thr={&(0x7f0000000080)="422b55bcc2ba643e9c9db046ee72e34dc3d358d8ef54cd7d1baac4a229a35cdb03ff2b9c14f793bc0029343235", &(0x7f0000000140)="1d5b7b925e0643cd533a373ba1455601a6bbc7df5164a96749e57bd6349e0b6a327009068985d5e65c3d4e7993d9d1029ab9"}}, &(0x7f0000000200)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x204, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x4e141, 0x12a) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000008680)='./file0\x00') r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000008440)=[{{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000380)="58009bb8f76cd62b718e1985d70b1ead4c1fa6211ab1d3fcf6cdc47523504da0eae0a0fa0789c8c6da24399764449ccaffa4828e451997f95e3dae8aac25ffc2b196c0b66580a798a20785b64c0267ba4ee7cc8aad2f9ae431eae3264ff08f55533539f9de98e5e4f847fc4a269dc443d7bce245123aaaef1f1a678356416bbc6aaa9549fa9c1d908a12b546ec9a06a42093b76e54e2542cd6e9368ac779106f839272e986b069f8fd160932b0dc7d1dd6d3b7a7e7f3b1b306456f6ae23eb48efc9a9b58dd93d6761d58b75c7f6a8953bab55b6b098e3f5104e6c9cf0dbf10c4aabd669cea83114e2ee941dd", 0xec}], 0x1, &(0x7f0000000480)=[{0xd0, 0x114, 0x0, "7d52e19b1d86a8952f02613bec4aba7043e816fc22d5deb8a53e261e520454b5b90e3724303a4f482bc3b0f80e360edac0e28ac6a6ab4d8bc762f1204cb9abb1e5af3015e42d3b4cd64257a25b0c6303145ec416afeea4e327be74e3d34c62187aba075f5de923ba350fe26117ee6f7f14e80a80aa1cb11e3588b3001dcf104fbf72d386253f7b3019082130e59fbc89a7efbc3814dd84fd954b5d319b234d7505ee0e9dec724f1daff98c019723e9a3062f778db9100609cad5de3d77d7"}, {0x1010, 0x108, 0x3, "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"}], 0x10e0}}, {{&(0x7f0000001580)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001600)="e6040b2d250e9fc1326df0171bf7d8e2d54a8f0a04f52b943476d5a47137f6e153270746179bfbcb1559b6eaa2b22350cda70721947d1d3d115f2f91991a449f0aaf790e02eff150f12205c93c87cc75c2c691e3ef786d48db02", 0x5a}, {&(0x7f0000001680)="c139e1f5ec3a3d5178025960321c73d3e63ef5f0195369a9a97b7a2220b526ce812e7fbc4de3f3c0ef3db73c0a0b5b269eeea717c5aa38b62307bf627c673cc02e039609ff0ca435be6740ac820aecdb6ec2733f3be2bece06bc1de37be3074b1936f731ac0c2831e58c27ca6b7cdf5444848c71a9d319a57d4905a4f14581bd37aaac3082404f8212989514a2162b94a448eaad2fc697bbb40d4cf7252e4574ac320c24dd9958a1e3b0aeffd2f6d689c5a26f71137c1794ee9cb8dbc09fc1cfd1be6635fd46cf358c6c3ebfc65f8e9802b0790f4cc970eca927221bbf7cb752311744935c7209a808111239a6d5dda1e1eee331fd111ddd", 0xf8}], 0x2, &(0x7f0000001780)=[{0x50, 0x116, 0x5, "db9bc6bd1ea5804e817f070c44d82b1c1e0c408fb73365744606ed269bbdcff52f1a197694cec345e1b74d83d188d145f880ea81b0959d3662c50ffa21de4c"}, {0xa0, 0x0, 0x7f, "0fece0f7fa19ffb59275a635027e04de6e5f35dd6e644f1b8d79909a2c76bf59bb421184eef849e12886b938dce1fc1c9ec98cbb209cc748173d25f512aa2e69b2028bc34a67c930114b24d33c37dfee99b53c8483fdb0f4041effe3c29723913e913a7a9f0d30bb1d67f5771da1c3cdacf62ab5de7f3072484f1e466edc1b1779e2099cef2bb71a51"}, {0x30, 0x108, 0x8000, "4e8186d6effc24eab2b03cd5e83d2b362b7c39846bb9176de9a61ce2"}, {0x20, 0x113, 0x0, "feabd8c0c2170ff4c9"}, {0xe0, 0x108, 0x7fff, "d4b34cfac0993b4a52eee7c4fe8f8aa5f7d615cbd1e5206b0b98999700cdae2c0f49636cc0be65c9c583d86795f89ba604e75c1c9d7f664acc46ddd7ad0167f27a28404aa1a3947ad8b22bcc0383ac849abc42299e5ea207589784ebc1ca65677080ed4a3a12ff0844a4eef6f80be493259ed531f0de0308f59a4812d1816da2a9eee449915124e6138d2f2c1f566dd71f45c265b56989d7be6f9ade37071bb002e765541f1c5635600fad7735544b6ffd2f377938f018c586eb6549db122405c4a8a9a158a33903127697a89ea2ec07"}, {0xe8, 0x10b, 0x81, "aeb0541fade96554bf24c83515450b7ae73fa70d52df922ebcc72fafb3ba109797ad8839d263d865b5c901f9829c938ce25418e963302655a3c9ab4e84f9c4c466e07d6dd7f5e832a849371f340aeb8b653bdab0fb8c7f31b2207ea0fc1fbd793176bb839387f09bf73946236971c72c582c09743752545c69ade423320c17a0120a70d31f588b3858b977189c265bcacd7818e838f9523242bafc81b9d9422458bd1adfb404eadc95e24a18ca5874633bcd0a7c8e89e5df629106b65cb9c231ab2434dc36542331ca058417514f09c655f760"}, {0xd0, 0x105, 0x4, "194789583171ea398aea5715ff392f03ace078f40a7bd707506cf40821d34a4e364ad4e07d9085bdcaf832ee9bf4034e868ca76ad24192b1e8630462f0e0e59d0bbc291caa0c54047c9470adec3a77fed2017f74b2c4021cdb00c8906ce45362e6c68846debdaffefc7b42a4244f823d801dae76161c535614201e5e2582bc8bed2158750c57bcfb5913baf323157351051d6851f138d39387501176cea1233a3e01ea2dfdfcde27834d14f5a5f8371219d1162f9daf68aa34235c"}, {0x28, 0x13d, 0x2, "f0a883c1059241d71cf3641fc61120875cfc"}], 0x400}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000180)="65a3bf85a5ced48682f70cdf698786c6b458a8cf98787dc18f6c0cdcafd63bca91", 0x21}, {&(0x7f0000001b80)="57e05ea6664c714323aa1040953cc496880fbbdb3619082eca4bbeb1f962ac25c5ec99fd452d08e7d77d63692a4d55afcb7f2fae9c7873b373e864c4ae8682447a163d8321b92540f54a82f17e681a0a833bf5cc61c6b1c163641cdd9298b889abc57d586cc96ff7c9fa8e642b33e64a23aded6642a355d62b2254cc5fca36c93cbb69e043265b9801966809981d19a99b8e87cf8123d3c92e619db416da2b0a376cec06db78c823bfcdcbe43f45e7600f4ed9f0dea1f37c30d6de37f6ad0b865d9267cca55498588d9bc22397722ba1", 0xd0}, {&(0x7f0000001c80)="18336f4880e0c30b724ed877f7a6b7ad18c1a320968825d3894e6f17f7d8f92a3d34671b3eeb802799d0252bc82724b0d67b0784a9030ba10843a9a397caa912a16062cd2b1c66ce68fdaf1b799b72ec51bd8131d2873eaff97f04de3aaeaacbfc8f4ce464a19aae0e8e5f2a8b04eeb0f9b32190c4027dafbabb0e5c7558e66b89ec2038e15a3dd4da23ef5254956e930bcc9af5b46d43dc10e70e70c0d917b9867a4013be2e13ce6ee2bcb9a3151be0dc0237a7a35cb7cabe9ea05de7b2a0c0cbd0230cf8a3bebf84b3a5711d", 0xcd}, {&(0x7f0000001d80)="35bbbb9ad29b2fe11166dadc47e637347c73c0cb2a0a865612c3fdf4e55c8a917d142e2431fc4e85544e1200619b7eb0c5f228102346aff4372fee2e27fac76cc13c49e29a86fe2b5c6487ab0a7ef7c923e762c65bd58a1001874a4d3f7a250e20e22c9e2e58bc965736808dd6fd4b80ce4f9f8a34dfc0673984e9d1d53330bc0349e424d3bd5d3deb5c62cee28abbfa494eea988f7ab760159c3e89830983314ef49b2b4dec27616366362ec30481b04065bffd409a3e48407519dfb455b78cd1d65e635c8b6a7d6917e886da635149ca24d5c9c0002bf5d672933335ac7315feb38227eb3b917df9bc376c842244c97c5576ea1b8cc17c794420e5d8fe", 0xfe}, {&(0x7f0000001e80)="85f663014325b03eecceb0f5591bfd5ffb6d7cfe36b70c73aa1f64870d6390a045e3b7952498ea8245aa47189349f1d32169044f54501ae41f84dc3c1c045ff4ec4dc012baaeb88c544998cab58196eee40f1210fc23b242369092e2766bfea59caf868628a16f4f466eaa5c8d5315ecc2d6a8ce0436f48d044107eb6864182623e7f818d0a1e3ffabb08a85880048f07292640496c8d08cc3d359759a38d3bcec6e8120b54e40ae85b435627c33c165b610da17ce14c0318892ff56e7b5572b47ea69014c3c468ce918b0a95d6858ed34a38980c25ad27b183362214d50a3074b", 0xe1}], 0x5, &(0x7f0000002000)=[{0x88, 0x115, 0x9, "70a44b98e6c886ea9f0b58e6c37073d33e7d9de53aed993b7c3787a1963dbe6a790f02bdd7bd3e17ffd32d3f224664ed26c9faf122ea4113c8f4811adf3e9ec7ea0ae059a1e6a9f307cc3eff4d5d337325f30bc80d61071e0fb8857d6c8edddcd02f17f84664d079336c32c666befab4b752aa7fe1ae40dd"}, {0x1010, 0x3a, 0x20, "da900c7fb3334c3b5406e61ed02a1ae607a41d898b429f04a2a269192a0a4f330a3ec8c5d913eed9d8854cf4c28539552cea02c22534136fded86d645cba1eb3c957abc54fc7f8d2f3b0878a54a491543e32d3656bf6b21568fca16783a7cbd21f48c2b375cb75baeee4da1a6ca1d1587646dd00452edde716eddc4899f1f1e3e521075ec6c1b365d5d86511c7653f76e6d3efe74d064287a9c7f12313a43d9b26d52be17bf1516755ebf44a3b4f6d661a6328bc8017bcb31a8697adb74b9fc3b1231537e93b88b44f8cb2b4c69d8c0845dd7726ecc304aa8370a1fdef7a69f6e49922849754d96a556b7e00be55257bfa898981b7203ae2bbc0d9f714b2c0267d17664c50df38819be5dcaa4c2d551dfdfe29f701f9dd9453e750d7f2f2941e365bf5376daac77c41bfa6c80d17580f46c5ed81522d5c86a38d07e3e3a6944c65280eb5045cc5a55254436c09f869a539f2f81b159636a32e80039d77167a39234268c8f26f38b901d060ba8ea68ec3eaefeaa5b3207b004076e5230bdf34365c0c0fae8c0902365db025b004866073049b6f480d4b75e9c7520c27767d76198db5e7b019d69841dd917c494e5a8ea69c7211726d64090211b3534c3870f3f7e6dcbdfa37994a1ed467d63bb403a14613b0d43aabc58c569630052358113673d0cbc8173244aac71af644e07b8d60a4e47dd49ebb1ff56fa713d6f710c012fd3939a18954e5605d281fae00c10ea4e211bf2b2f40d2fa17bf39acc7b42c87f604a6f230c33ff82bf1875a76cbfebaa27f3e7a05f0f327340a1e9b76f8250f9f74173e21ed84f4c3449e42be368d2675faa60644ce21709d1e6c002bde6f6044364672ab4e62d18aaa159fd4c891fd82de40ccf40b9274db5c6aea8bc4ddda9901b3b5c4b9a1f953858d6ba7a8443460215fce35e39f78e00fcb15816b23392acab061bf10061e69994fdd60cb08d2b44c611a52a6cbec003e7ff800f0192daeef5e26863ee31ff7e6ebcec0ee09c86a3ec4dc03291481600cb1af702da6e687681b0f9afc5e2a622ffc41cd8898871c46c0b2151d75cc548e0c1a5784b828877a0f5f50900c864a5b9c5e11467e262d6061f522a011997ae3c0cd664c60d2550626f6156ac8864aa472ed72644135ccd47bcddef4c8ea7c9c93854af135f49f3ba2c21159c95d7ca0881f59cb1ea00a29fd98f6422866b0841e955671f6b4a38d61f2562407a20b83fb164c59338c5e425f3d73a52bf62571fbec92c65db033ddd4773a9ed30eb59a0233f7a21ded215eef3407f215279de18c704e4d3c909a892f14d391a845cb3552381e7ad5c8731dc2cb765546a94ce99dec54774541f5f7b52a0dc1df85edd19e3986a77fdd189ed904d9a7b9e45f6ecb0ed99f223f25764d72690c2b4bdf113162b4f68d19eb23d8641ce67248f1b43b23b84afeb215d22d70cbecb5b7a9e50b5568b2135ec5f98c82ccb5990e98feaee996813a750c091e5b2cbcea306ee1bafb8269eea7e605da61a2daf71f1d7aa99546849bb406979c9300239f8f0472e07300d752d9d81c10417e314e39059076802f1ade1cd944cb87eddca2868fd0321f576515d9c563b89033281e1e62442fc2cb79e02a9005349001b39d57e8accc71b89081ff2f7257d9682dc50819d435792c1db2bd61389d10228be6d96c3b234ba6db74b28b408f74e3f401456337357e168dda19ffba8f6e19d826d154628972b5e574c72035c4a935a035bae158bb2afe648218decb539dbe7aa00d69ecd972b61dd383608445835608850b5aaa26b3cdd730b8e39b8497752204dbe140919beec01db3fe77ec801797d8b5f528de0c4682dfc14d242013c0b0d491f583cc6fd89f4aa4b3d1e62284403e4a3c1f912a282850760f0214755e0004594e19bb761dde0bb8fbc64ab2b075eff31e118c37f8b800d954e87b60d18ab89994a1ee88c7ad410b7d3b39ed27fe751c694f9d986bb7386ae0ec59cdfafcaf68c3d432a2270caeacfe0cd31385ca9e1af37c311762ed84213bd2346932318a42a8a2f38f454abdbde65ed094524bf2965d8bd17abc9d8f183fec33e698ea970cc95e4e81d7491a395b5ef8031345cf4b424f4e1b391295a7a5f4adfe4708aeeb54e48cb3cc1b51a377ceff5a90d3a23eeff65d27c0f3ae6d0c90991914fe4d5040ade3442da29fa3d5a666fbecbbcb51c57f2de512340112abb4a1fa41f71cc687946265b3c55ff75f2728f9ba7a9434ffc091a50efadf6f1b01434f2eaf8b1d5b6e824520b6423b99e766305bd148f50d8a3d73c11c91218a2937169e662c99d92967f5ea0c17c6d3e06a48156b995097438b850a01234e159b9666aa122fe3fe234b1f015a5e1e70ba4dfca8f21bcce26c6a7926c2c1b4449a9fd3372459a38cd3f031eeb4c75d3d4b13b29a806b8fd31f2223aa24679701b1e6bd70f4d182668faa28e0d177547bf87c660fb609f951f8211afab874ab3f90eff9b7b19cb8f80fc006abba12c519fdcd152b0d10c8bf8a5db8d07ed9b2db15de21e676ad0e7a1341040234a539ae9c047d0d1644b188752bf9d208bb9e5e641580d3138c1fb34ef1e2ca87fc22476f5dd79a77b1fe1e42be60c936de3ec3b2c5e7745b88fe21d93248c3e17e40f460849958b4bbe6c882214f1d506e26d61e7edb5260ac2a369e262b34ded0909977a94fad771b22c2b736ad78cacd65eaf3f32bf9eafc8ed363b2632554a5d71ffbbd1ba7e85c6b03904d744851d06e208530acfcac4b6ae69ee38758327abd7b8e4d5049261777b4190be9eaef8d1b45b9ace43d5319ff31c1a7e9d1eb30e4d33b9f0dbce6113bd1042816df183c5740d5c67763be1eccce849b4826a96572b712a474c355cb9034292623f430db4d974e66ff47b550b96ab31aa3038e3bbf11aca9316dd90c0a994b8dfea2924ce526e1829c67a4230d10d7f70243ec4117fd566728c5a35ecf6f026a2af5602ea116f56ea5df496306e2abf68a7c1ad9550dc30d55ba169977f47e00f33b714f8bd08e799998a505fb93abc64ef2bdf443cc3c196b971eb272a96384386035f17c443a71eb46ca3da3b6241de973d8c22c8c13edada58e1ffc4f6509c05e04c4c0d8634aeccb3305b8d985d66e2a8a8d6a5687b68b7d45a159f52311a4a4e95404e6b3a5ebb676c0f0a11c0ff6f501b560fcb002c24fd7a3b142bc47b2ebf43945806aa1491febc90f5e1d242a703e36ad118ed16e697f8b013938fdc20ae85ea90d57e5db991df85864245b15d7bb8d1999aa000180b24523d88dd6c4c86a263d71f7691a263e5b739a44736ed019e6c8dda3489252719e750631f1f1bab79880a8ed501fda625b56df2f0915e50825489ee30a99b3f01123914063c60955cdb56bebe5f4cc6825138a36830328e0abfd27d40b87b0dc578d70bea49956ad5c52a8e1bced7e243e66c19b464ebf5c5738eca2110c63f8c85ce57484e61f521785df52fa61092e8c40d582aecca1dc44b8215dfca2a18619ce3afad5f3be98b16388d46309ec2a70d7f81b4f46837579ed7c90025263d29882a8d8ca87c0c2669f54f0dbfbac4c657714f4206c0790cb59413e8549317c56cc9fac916c7c41ad5732413ace1ab5e9729f1cc056f585a6da385aa72f02b095ad726f0d460465d7d2d3468f3e5499b176e58076a7b0f84ff9781004250037792d77c25a53860c70279da41aab50713d6df9a279189b1f2a50934d621474a6f28f800552fd46c156bc9604e3524f03a97cd6abe367544515de61141d52cdd872bf5f1834259575c6d2dfaa71722cd4ea676467c1e88698c559a80f0a8290dcf4ad682bc63caeeefd6e2e5a47f156c6feaa07dcff0101f9a82448eda7b578a2a581bfd675e93ef16715469bf79548a682ac790149c7b0b3dc7ea0a140fb279f9c1a3b7c54af7b74f1be28ee7b491da0754ea6c5c23d6082eff3b2419e8189cb49b4dd1eb47e71cb50a4bc8c2b517c37353052751bbbf709ab03dfe9cdb814bc0fdf95b1c1653f498a8d8ddd465ea5c2a137c981660248bac6d382d508df15f84af4332c32619cea3ecf63195a2411ca46d84a9bedcb92bdba82b66f12842adc7377a6f7648400f9c937a77928fb316dff56b4dc1b2ab9d3dbf0679706630494278209ac70abd27b8287d5ca2f4390294c0d04d286043e7b3da375283cc4e3ca49f19856597c9f1e196e47f92ee5e4eb33d4dd7141ac44d4379c5139f4fbe167e990eb6ba20856ceae13102de1731d9eb630b742d99dcae9ef8fe95122a7729f34f36b1e9a9f750c05845f5d8ebe2066055eb681cb140cd3adde603afade42e5fd5bc32bace1907708cf45ada3a7af160c1e368bea565ab6837202b82fccd896056f2b2768da54a86c33d843f2bae3849407fae5f744dab936061d9030a9303d444a0f930826c5af5a1ac35ed1b52b7b6f5fe853993af26743800ee9628ca06797e685dc08690c3f14edc4f13d2d39144e1293664d590aa7d302924fa82bacc71a71c6c222209090a6ae36f7d65afdb60b0d027f5420a42174fa98daf0307b0956c3d05e250d11afa3da488fd48d3521374393116ef59cc96eacbba90da38bd77bb4da306f876d9a91cea1358b43ff8be3bf3bced2f74e6cac0f282d7faf4c905e1549ec686e1290bbce395bc44e7b5c07995b2c0620373a66ae946adf1f9b15146d897cbe7a020942db39a82b50a541900437c22caddb389b50bced621c4a5597cbf5ac742847c2cbca0df94e78725a427f7174ee198d30260dd5183f19597f9ed0844e9573b9cc775ff499da4d4aa58ceb10d1d169a9b4a20d5c61e05a8074304c7d9dd10a05430cff0c393bdfc3d598e95ba0980073b843f4d692a951ea49f3e4c455cc8da3943461e0d8ad4dee4efee4f22cc56ada566429843ed6eb5348aa3e3935e1f00ae3f1d814f2ff01fac2e2a15fbd2ab8cacc31594a5a13ff6aa998de3bf7966eef65011625e4a43f108b2d3090f55b285b498af966a79890d7260dec6cab7aa472d0f382da577110d8989d62e8d0f0a7ea4f3431f7761fa819c54d9fefb4a8a63f50a9ada7c24fc40bcee9f1dfcb28024e3aa694142da30db88ed17b6fdacb837c894bab7e9d617fbb00864f0ece4a3f123651b51b30a1c017a64eae9d0c14642592b4866a64d65f805ede55524f62a14766abd799ef771c3347014f16bcb361e0b184e8baff0990718d9367d868f32cc188b50eb83c051375c945c311c47aeca8dfeb1c38c84c8cd67f50eecabb9aa747da9b51f11082de8a32980e78fb528a1a3471278755f30266c2a79391d36fd4584d63ffc1777e9f6992a8677e672737f8dfb9f54a87884d14b8bb2c448951a016c2689365cd0f50062bfcf3f2b315ebb801f7c1f03c029546e233106cc1cc1fc6e7cb8b5dca87ec1a2f5c6ec10edd02568e2a7cc0cb0355ca5108e1b15daa4470adfd6457b466db9b8683c3214e53969ddf0847c9a070a2989c4e0c4a42d119ef299973d9fe4dae0f1916cf3b773d5ccfce058a10df7f1d1c1f40a9daa42d4c9f8b4148f14983717494cc67d110c965ab8942e480c4401d5dc44c3812426a8e997c0140d61c1c53e5085988134c903aee8c52c30706b4786eb848b738ffdd071dcfecc03477e2a60c754fd43c5f2e5373be3990eacb5ecd83171da9e04964fb3fbc41cd8968b07477960f253062dd7517644d7038fc564275017b040716679aef3bd38f87f3d87296089d7f821116f4354a23486c131bfd9e0510ef20b81ef0421c2a7bffc72755ddf1206d464eb2d702b8bfdf7d"}], 0x1098}}, {{&(0x7f00000030c0)=@x25, 0x80, &(0x7f0000003780)=[{&(0x7f0000003140)="a7ce87e774d7d4ca6efe622f43d847cc99aa71c32248fbf37766c8b714b87d76aedf28d96eee613048c9a689bbb8c5e744eae2ab73ca4a0e2547ad7bfe9f2c1e28ac04fffc00308898e26abe2f5e834b6c9d4839e80b410d8e405d85ab33fa13179f511d571123d1f9ac2e40bc12dec5e718e52880de389cd7546b5868575d8ca3713f416ef3a9c6cb1fbc66e6c34d64039ad15657250bd76205eacaa1249e0176ba1f96d28062e892158567336693ab45acc4a5fbcd93f821010bfde88d248e9efecc7305ac", 0xc6}, {&(0x7f0000003240)="0bbbc58cc98203107ada580b58d480aff2e7f6673b1cb85dced19c1558eff1a630371488ea72433824b344b2d0f3c98e188585b240b6220a2566b88156fcfc351457634f225322be87887d31fc5f22de26ba8f74cc2ae8e25c120529f0584cfaa363bcaac7ce682fafd7e9c9abf0f7772afcb7f67d85e5ad2cb56e093d52372854a31b3d0c7d2f74b6d780c0c7048552eaeb4b6f8c08c8bb1a9aac909d721da915c321a7fa8691b0f7a798e7f782c56a96fb3b8bfee4f8b410b159017e2be6acf06a3b94df95ba5b7176ca52", 0xcc}, {&(0x7f0000003340)="e3eb5f66418bf199038fdb1a48a0a87d4bf6d1529cb2ed04adfffd031697c07f455762bd7976d02245c1ae047b18e9e6de2a5a9411351e5f7d2b50907b0c60b67e845372fe8ca78920e0679b8c833a7a8d2442bc32c76a702c1c076186e1b7bc75bd4ee0f4d24f6e83f56681ce1a8167402528abb6151e2b3a6f72d6f17dad3e7137905b6b658aed11fa5a180525d5d2b9e6c4391185e31e1d2c7f5a713d0b55eb00b352dd62e6beaa4cda52e990d246d5694b6afd452f5ce766eb95ec6509d4e525255f4728", 0xc6}, {&(0x7f0000003440)="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", 0xfe}, {&(0x7f0000003540)="1e6dece8613fe93c8875829a4b92ac867acf48b6b771993d448dfb4e9f3bfd853207ae4dd88b8ce72e769fa78da1e448c39ac178409ff58bc81634793693559805c5627683b6a5d175a97658ef72", 0x4e}, {&(0x7f00000035c0)="313acf0729f59499191bcc8e9278d1f8596198a6574c81cb24770c2876fd4a98054c97ffd35027b0221cb551f0c8ed84eaae0f9961b0a58516a280291d334786bf0df5ebb61734a12dc528e5f43aff0d7f5e6916a69451ca8a96ced577e0294fca71a2690ea134b89ef817abc355ca4c157a3848f1cdc4e03345583a21e87a975e84e2e60cff9d9ffbaacc77897ace88dfeaab5433a8065d0ff3df9f695df45050766b1da46fd404080e8cbe281449e060a7a4449b868605a513c9e0a2a9f3240fea9927d3767998f4db0c885c8d079e7ff51e8970585e775613de6dbd687de0", 0xe0}, {&(0x7f00000036c0)="a3c48c403a0cd9856638edbe9bac2b94be160841f5c55c63d61ef9412df12b6c4b69dbcb30bcd14a7eee6f118b37c6cd428bde0ec2bed1746e01bf568fede5f3822ac91959a449e940994fce611f4e74618de470dda47402de34888412a8373b60c7bb1d0f60d79f3e907da4b95142e4009404c0c366f39b861c3f03c333080da0d45011cf50215bd37876fe7e6404da5c9583385289f734cfe6ee3ff92fc92ff9833a4f86cca2061a0bdd553a1a82570ebb48ead7d6469b77", 0xb9}, {&(0x7f0000000200)}], 0x8, &(0x7f0000003800)=[{0xd0, 0x112, 0x5, "cab511ce31393fb5ef9f94564a908b21d970aeab30c2ba47aee7a9963f80b7860aa98c6ca63e781471007296bde144a6ef49e06d0f599ba24e11358aed8551205aac31139404746b29e7a07c775b7fa449977f4bbe8985f51c70f63fa07ac49e576c17ae19da8dab34a66440b2571ddc2a74e9e0d4ee7d3fdcc9239cbe0d71af6c87f25e3d3bbe7e0f12f88ff84cd78a25e1136822978e135719ac87121eaa9534cc8e4a751ebaf1059930c685b9c712b1cf5dd5f4214a0df6289edadf3381"}, {0x30, 0x10d, 0xb3, "35475c49d1d0c30e03cafc03adacbc335b6f3e482598d37229a73e"}, {0x38, 0xff, 0x2, "4d52641548106d0d26f0ea189cfe2c8fb19a8831ecb18eebdd267521810cb734a0f304"}, {0x50, 0x110, 0x8000, "4e76a4bcc426690bab1472c7dddc97bad96e8441eaf0892485130fa06e418a58cd21bed1bf57baaece4b556e457dcc24bb7e4ffc8189ff2219dbfd"}, {0x78, 0x114, 0xff, "ce207ca3769c52695a66474b902699b3016121ae3f581bbfdf7969311268d5f278ee973a417ab09d7a2e17ea6796a4f6de830b4f4c04697eb30f78e37dc094b656a41b980e72e375f4c88e75fa8076e26924cdd1caed98cf37b581c25a959cc264d6eb"}], 0x200}}, {{&(0x7f0000003a00)=@ipx={0x4, 0x2d5, 0xb9fb, "9de2219f242e", 0x1f}, 0x80, &(0x7f0000006d80)=[{&(0x7f0000003a80)="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", 0x1000}, {&(0x7f0000004a80)="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", 0x1000}, {&(0x7f0000005a80)="5351ef4f31b7ce0d7fac15e08f62d291c420e43366c1d4ae07a37f0cb745246576f7e579289b92c87f81c780bd0bee51a56d8cdbf38004104e1a8eed37252e5e8ed25d05", 0x44}, {&(0x7f0000005b00)="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", 0x1000}, {&(0x7f0000006b00)="45b3878cbda23ad03360b01bf2ead93a9613f199705d3dc439499a2c371b4b5c26eb75cc92b57f88e105a2ae02b2253fa4b572745513d1bbe4e513b02841f90a9f9917d568db56ded141ed5f7d21df67512716a2ae83779e9030ff551906e71bb3cdb24729c2163a1f96a311e96b4bca0c4ee899c7a72c", 0x77}, {&(0x7f0000006b80)="e64622f9b0e53271a6f687234a9e35c24577df5839fe2c6fa8e96fb0437f0bb04b74381f7032911cf85d166299ae5334d9459a16251f2993ff868f15f58b5b713180822f83d6cca4af76cf5442729dceee026aec296a5c3d826d82675a79596904589bb2966513aed759da7ae07a7e27529e7d7486e0abccea7c822fe69fb927d7ad5dcaecc411e1d22e22b334d985a3bf1ff1bc11807308296c25e1b675", 0x9e}, {&(0x7f0000006c40)="6ebd5aa26a837bab54a384a846c07f5492a58b2d1d680c21e0f7a33453ff6ad9d9c52143e865115434d23afffc47987a1deb8aa19e28f023cfae1b3aefe5070875e3563c675c913221da89ae907adcbe8e6ce250ece87e7d34a6cb3006c9e608e9ea81", 0x63}, {&(0x7f0000006cc0)="1539bd320c0fd0bacd36f7557343a8ee45c1b8d2752cda0d0abe1455a04fca19cea81a9e98c380c688d7606ca12d5c029bad9df0580c8edf49c73f2dce36a6a98d77a68a8966d8015f84a7c5d974ff82d9e05cc305635041a4db9144ba03da5cefcb408eb1749c53b4916d8323334ebba4a54f303bbed2370c7e5fdae395733c7e472b0a96bfe31a8b9c1510212e8b5a66fa2afab58789c3c7d5c3470e40cf1be75f11059a046631c7fb80ca83db2d26f35ae9", 0xb3}], 0x8, &(0x7f0000006e00)=[{0x58, 0x0, 0xff, "1a7a1c26078b17a6221b4cbf0a6f4e24f513f2b0c48cf93a5d942502e652b07ce171e8eb6e509523fa60bd91d27a4e2ba27f184de8da1509f5a9b83e77d85e4a0fe92653120b6b"}, {0xa0, 0x1, 0x0, "d003c8f4b6ce7e5e394f7de241061b29932954fd1bfb6a3b353507a1f23071579d153654b1c5def06753bde129b5e3d75f07932c24825ab1ab799843f491273e4eb7085d77e7a5a6a176bea77029cf68800da39812871bbaea7eb92f4905d93af0d1317f4c9e28ca8df455c46bb402bcb1cae91206105218750003be063b05d640ff221a554b0c1e4494f7fa2f0a"}, {0x88, 0x102, 0x80000001, "799c0c9d55e2785f145dcf351f973260e8eedcfd4c3464eb79d7edb3a8c1f935fa62e1e02aca4a61bce02e63c403ed0710d0ec427c47a948cb36684b192b19a6a676ee7b1ca2c2285eb078b303e1550228144e26a3cf27285e0e682ea7ae81d7d5a783fa3e41b31d7a537ce544592bdef8"}, {0xa0, 0x10f, 0x2, "31eb6ae9daeea6d365d6ca45cd183a0523714d92719c643224524be04ba6b1306f534ad2b840a65fa7e98aa2900d5c122c6c453255464b582d4e5a4b5d87c32baddffb1ae51eacec32e1a2deade7b0a3d09b715a3949d3fef11f78d3b352f70824ff946bba5058601851f214be59c95bce507fe7aca6ac4c7ee29060a6d8237ad9f3d1f8b8947ad31066a0ce"}, {0xa0, 0x10c, 0x10000, "d8dde394edfc671161a3a3ba65afa493814c7d7023bdb0e36b1282a58fa836e1280b34610a44d76ccb78d5251b926a36e66d77fd30d18efd3d0e61395a75c15d4e8c213cc78e8f777333ce6431304e08a810aece7feebe18acb455c839ebcb54cb14b85dda24056a22085fa5ebe9687384cc6c4f79948c09c68e7f8febc04056504747b2313c69cf281ed10b"}, {0x50, 0x113, 0xffff7fff, "64fd02112f1804a9b7d2b0f5a319c7a6370755f3a4c970e3bb1f5d14523d92a90c184a98c760b2085c74cb32ab03ac0d0cd1a662da3b036f48"}, {0x28, 0x0, 0x5, "66e8289b7a0d43efb1f9a7ea7d4bb67ffbf87fef"}], 0x338}}, {{&(0x7f0000007140)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000007280)=[{&(0x7f00000071c0)="a378e7ad727a9ff1e5ed2d8cb4e295db6613ceb5c56d49053a2b30970f2a1a58953efe485936c4c136848783a84eaf71e7ff4b348324992278eabc691d16c27413b0ebb425562840c67dbed3b2f6825eb330058150245ec5970b652f4c200c4c55dd749a4757db71c06eae8bc29bccab7e955f191aba53682e26f567b6bbd5aaf0cb76b41baffdd723f2a8263661afbc72f30a7011e1b41cd30a74d43337923c562ded", 0xa3}, {&(0x7f0000000280)="9caf6ee8e6d4d8b8b21243ea6af02b481ffe0c0062e64d1904a0c93f84ee5d24de6e7d13f6f3393e9bc589d2a142e46cb0271e5b9f4242c70d6055ba", 0x3c}], 0x2, &(0x7f00000072c0)=[{0x108, 0x119, 0x7fff, "cd91420704fcaab8fcb2513fcb48c98ccf098ece2d2ffeea1b9b7966634c388446569495231e708d564867d587e087fadee68207bd766d05ce96eae7678b32a98852bca122919212b56b342a559a2d53775ff20da79f73164ae275fe97ead2dbb37fce418f205b83d478711f88835a3c97c4f37db736bf683ac5cbdef0b38e98d24d9858f83a478443133d34f97df5b6b2f6695ef1261ee1034c11f920f2bc1868c8a686aaad3be5852c029cf7bffe489430d1fea159284fa26ea605823f3a4c04fb6de881544964c4b01fc0a30c7d27fc48441430b242066ca64dd0b58c886d368ffe83ea2ea5fdfda3e1b37995eb0dd085d37e4d3c"}, {0x30, 0x108, 0x800, "573cb48272d70f34f94e41d3a4d8c97e87e520cba3e1c051a5f6093b2b84"}], 0x138}}, {{&(0x7f0000007400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000007680)=[{&(0x7f0000007480)="f911893f98cf2b7c5efcab41118a50d0b76cf18a0a7b5d826cb6bf866174cf225b81faa61f6e48110eaeeb23c5930feb83bec8f65db2bef3aa9199d5033b8d4bc361f149e0810548b1612c54b564e96e0a4c8a60c6bd70ea98d1d4f6f94948cc971ba6ce1cba70cb0cc6bc8be36a64f502e77a8ef8149f099d6d6927bb95066d031ceefdaeeb74b8a358dff91e55722f4e1580f6", 0x94}, {&(0x7f0000007540)="33b5d1bbc611ce9518c19f43c4c4f315b8124f73bb8d4f8b13871662ff6899e169fbd35c09a6607d54e3ebabad80c15298a523d942633508df174196b4336a10e3bbc49afa1996d0991521e194d964f15abee30db10054168f43b9a9cf041ed8a344a69fbefaa9056b099a8a42bf793ceb01f69f72dd8c9f27363cf6f5f0bfed871ca03f724f71e00bf9bfa1adc27d8c8f6a8bde8e81836b9db39d89fea3ca2644c45fedb66b8e20def4118cf5255b9dda8f24f7fc223bc0d4a257f61467500e5b911836b3353c5ec8548c5348d734c33f8183b93c822cf2d01e53bcc960afcc263640f0112611bedc54f5f4212e6b2a", 0xf0}, {&(0x7f0000007640)="6b00118e71b9ecd25d7e1d0a6e48301577677c", 0x13}], 0x3, &(0x7f00000076c0)=[{0x98, 0x102, 0x3, "afac799f6768655af73bff0b7758cc50836d3983053e0af1745425877ae4b50ccd7dfc6378e51d8a71555bbba7d7c4a8bfd001627e9d0fe93f370d5bbab25261c91c3a54e3d594830a62e923c8b50bdda4b0be7e7c12d887ceda824724444a9277554b83163cfb071d74706477398ee2aa1808c89970ac09bb4432c905ddeede28"}, {0x40, 0x102, 0x6, "35549bc463d92061265c341b3a83a9ca46ace7966955f7f29713cc0b11f298b5fe66a040c266be1277d0b9e52b978e"}, {0x98, 0x102, 0x6, "0d153546165ec334b72ff541091bb1514e4e5219fadc38a9c1dad52163b6a436fc429a1deb51d4ed5fd57a84e96f3b9fd9341add1b3eff235320aa5c692dcb66e79c567fa25af69e0767fbcd78a9f5c16bfe830c2813f670d7831f88dc67d89e78082584806c68c49018511e34891302d07c020c872040cf744b2fa3a2de267491cdb290df"}, {0x100, 0x0, 0x4, "cf6ca574d748cf56fedcda057f9932ff499103283b87367363b02018a69c1eb6c9d7f927a6b59e36c2fc1c5d67250d4e10a8b1b142beefae42adc1a288d8422fbd54ae290ae5d6b9218f127fd115d97478b59fedc50a88c7a2eaf08e362850a0f8021c679654b112f1e96796df35434ab19e07f6dc21874ed11ae90d98aea9b91e9007d5d6f3d9db50c321bad4cf8b9e1cee01ecdb179da65fed853ac3d8cf45c515f153271311ac71c7eef972810babfb737b8c10f2838f0d7fe438e0109e6a2a2e3c28a9c7798fbadd89ebb509fad5e8928a5240d588c3c3970ec30f9a0379967acdfd19a6aed792ae7c"}, {0x70, 0x102, 0x4, "8aa52aaf18a560a70b1e57b87e860e46c80cba6d2887f133baa17a5237d1ff6c1347dbcd56a82b88ecd2b505889bf49d8facbdee48652de52498812faef58499fb105add99c1c51d382770cdadb79af17acb4a69f4ff226ca512961392e831"}, {0x68, 0x10d, 0xde, "f08a8d27bb9f8ccfece73483058b73d3b734fd24840bc416892b784a40f83d0ce4214b10b220535154af09c835319b655227ba58d12b230e2feb878494f531b2fb510a3c6f84e2e4524684ee90baca675891200345bfc80f"}, {0x38, 0x114, 0x7d4, "9fd6165c79d82093284e23774063823e078bad46e9d3caf5d0ba4b2337e5a34c1c0d31"}, {0x80, 0x113, 0x5740, "7a9b37682801142d5ae4f1b9d69a6a9e89c87ecfc202c9d4d7853f54d405b1a1bfaac2d523556adcb063e650badd277f09b7b251753107f0c4702d0ead207509f7714e069a83616e379b51acb0010bb93cdfce29c96467fb5e9b029a6047798e19c9dad9780d4a4790e103"}, {0xa0, 0x103, 0x1000, "56821de9f4b3c8aef213f07f0cffdb1f23413cabb15ca3da23418713a688e06f4e474eb495d38ecfa1cf95fe155191a0776158b90150c53da7e5449d426b59996d69a9679b3ecf47f74c85ce43d4ba16e05ac26975f8b757f7d2baf97ba8e6e6a37a452283ac35c8abeea831468770cf3ce26db47e16397518e3db7167a4a79a806fd73a2523c0bbea"}, {0x50, 0x103, 0x3234b26f, "fefb18eb6225619b8220d856586c45e78ded2d96476208a312683e01b37c7c7ecd2a3079884bc1d95f64b198f570a3fab3b043cd4ec01585cb0b695a"}], 0x4f0}}, {{&(0x7f0000007bc0)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000007dc0)=[{&(0x7f0000007c40)="b1e4ecf77389706f8653161988a9a710864887f162cbabc8ebc2e219d5b773d3c1de91237e8764065c0b88a585e950575bb00138e539e5ffb8a571eba035f69fea7d1f21d46ba51896bf14fb6b30c4089aec388afd37be37b30e74eba23385330ba1671a38338fdb6dc65a33f5c2fa6fd3c7386c03c6d9468ab412f7679a7dc21c0d5be671c5e8de23af5e", 0x8b}, {&(0x7f0000007d00)="5f561bfc42573a0ebca26aa235946fd6e765982613c7f9ec389dcb326a28446192459dce14b2a4f869e9d25e6496706a72fbc70a2bfd69d6c2cc16a4540cb11468876304891020839bcb618cb64217ffbb8658d876635b16b6a91ab0d4cfda14ef16c1e2c76bbbf03d4c0b45df33ffe6f53240be18f148cc4684fd8b77742ea965af147a62bcba765345460b936bee8e5a48d031", 0x94}], 0x2, &(0x7f0000007e00)=[{0xf0, 0x110, 0x1000, "7991e399af8f54cacd399653a55e5a4fcdfe07d2699a543654f71d9ca241afdcca4c48ea38d3a17631c1af5cb2aa522264c711020b8106c895112cf262ad89f7d877c3f653bde55e8baf4fe7be71ec83c446446cdfe6fd88c75fc3540b74a004a320016f513437257163f43afc630026b1fa58a9ccaf3403c35c36e534138f4addc455325386a607749a056713a88a91229d57875f0f4a4495c8d98e27c169ce8204a6a550bc65465bc6d7b9e7dc13750b36d0989053d8adcf4034585074d369334ade0803b13718f1eafaf39bcfd9d92d01d143eaf834570f9446603c"}, {0x10, 0x107, 0x9}, {0xd8, 0x10f, 0x1000, "c45d89bc8348bf0fe86c5b847849b9561eee169a39104319d6ce668f36aac851f81f7b9abd25b834a21a6b813cd9edca392a0c41daf2ab0618ad2df294c8c2c0d25ba759f48d4b4a5903c3309aa95629dcaed36dc8aaaee6e366366e6889fcf54a5b5919f0e63034383816cd9d84fc2c7e52de9ea3f9b200f94aab5f1e23c4f46d156acbf63a6dcf24fe04feed5e3cf88f6804634278aefe696b671f31b1f8fd89c12ff36c61a890c861837c51ca8fa11e61a59afe568d30740ceade772968766c8e2ee015"}, {0xf0, 0x10d, 0x1ff, "5532be7ae264af0b40b60dfa7cfb43ca41a07c6983192e5b85e06da8eee0a6caadd4cb93bba504b1d338adfc76288a1416b0650bb16195f8229d9a5866bce2496028ea48398ad60ea3f2b35defad146cd498304a0ee01e2dc6e52771fe168342366b86df9c59b71a984cab4055cb369780af0acd5167d9b07e5c426df6857c3626a0ed6487f83ad8b34b9362a4066be012364bbb71de829ac35914e7f96c95a5d9af24e62a7d84d99792659a9b8ccf9518a615f39b164fa23afa872a6a6caf2c40b6e0fcb7eac982ce502762b4703f03116eccf854a4a16116f45ff8a875"}, {0x60, 0x1, 0x3, "3a4e0640980efc80045f2e615e1ae13be8acee81972bd7c8a0c55452789afc30cf1963aa0a100d3d8e893681d6194ae41fcf01eabed22e9751e7a7f0048981420410729045466705daf718615c95"}], 0x328}}, {{0x0, 0x0, &(0x7f0000008180)=[{&(0x7f0000008140)="001dcddad17bf7c1d2891a7cd43612a68e3655729c38d6ba896ee22783775be7a7cdb5181d0bb1223408d3b9fda0be", 0x2f}], 0x1, &(0x7f00000081c0)=[{0xa0, 0x10f, 0x800, "96d760931f1ae6e70c5fb03621efe7d139ee2fbc49d9bfe224352497e0a63338c4dd1bfa255af7ac705cff8bb550015290bfaf4b65b420736d499e5e209e4519cf3f8766c5f9a25a80089ea12ffcd02d8e50ec2a3e0bd499ab6e480143cd45ffead0b8dd4deed77e3676a73b880798855ce8f49ebf49a95f9774b050eac86507eb8a3dc48d4e5fa30227"}, {0x100, 0x1, 0x7ff, "326bbc8fbf48bffa35cd06c2e602a07541f1ccae2fd582b54c3e00b2e2bb5befc6455409999451e2c581613c1fe664c8ab74f56fee8c0a401651b42f9876895c09b2909d8406f532bacd46cb0aff15aaa55ab3b91e397923dd9072d8e2eb98f6b89a75343c6364599a6a48ad361a9b074207ff7e3c78948d2cac860d00eba835cb4cf2bec0462e448d812a9fab1105a902aa2a5ec0faa58499e695b48a3067f9f328f77e3d1db87b3528c48fd5338d9b1fa7530aa35679b9eaf159240abefd45a9ac27d26f7851ad59139a85d5696064acc2fe326682d9f619d8618fd724be5f24223aa85529d54b61ac6c55"}, {0x48, 0x11, 0x1, "2a815bcba287170c5aa6f475969d3e63024e276e72357df6b9d8a31368737989ca8d4b5c30bb322606b1e30eea2153d13699aaab"}, {0x80, 0x103, 0x8, "ba29e38c31ccc2fa4b1c676927d9d65489d0c8f3ed04d24c5a6f3e2a215d0409378037c44c1e7751db173da434dcdb8ad2691d98f2de7b30aa1082e9de608b79bdbda5696a0cfa8df49d1f75fe5b685b1471a507ca32dc862acec579b0c20ec447dbc2037a9f28b8d60084a1e2d864b3"}], 0x268}}], 0x9, 0x4c00) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:33 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2, 0xff, 0x0, 0x10000, 0xe5af, 0x100000001, 0x3, 0x10000}, &(0x7f0000000140)={0x7c00000, 0x100000001, 0x80000000, 0x0, 0x55b, 0x2, 0x7, 0xffffffff}, &(0x7f00000001c0)={0x100000001, 0xb0, 0x30, 0x2e93, 0x8, 0xab, 0x7c00000000000000, 0x4}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100000]}, 0x8}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x200000000000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x239, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:34 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x260, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:34 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x5d2bf6, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x266, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x26c, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x300, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={&(0x7f00000001c0)="b98ee43159ee32e82d24b5079aa70254b0ce6715e2c48981f0873f51261b2f29661a487dd5fae00a5c01e2f316846b1774c2ff0438138128e1915132801cabe254fad20a9f22e7d091da23901b7068941d3d14cc2ea74a1b07860925b6912c125a35adfc751ac1fef6d516f503a5b403025ed4c61c7f96a8e4aaf9a17113732f51e03968d5d5c2b8d30eb557a14914f9854d875e0e6eff860d2947ed30ca1e966b10d2bd97411422c16bc9960ac403173c38af44b9a949b24b16c03f433fa1fbbc0678ee5dcec5c005272033d02644b275205c", &(0x7f00000002c0)="58ac815dfb18f2db0637044c63d3b08de947c54442014853fab696c426b0df924ab20855e4779053a09be17eae886d6db91d427e710f20c56e51215c425bd4c45beef15c189f828b01f7b9e47ea7687c3b97e128de0d848bfcf6c97d3c8acb56f4cb6e4c3d34205f97311c38344d3babf9a572904b5069c3559ea40f33cc075b263db986a3ce93f4a818a89082ceb790250a6d76749490"}}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x402, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x401ffc000) 02:07:35 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x100000000000000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:35 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x5dfd1b, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x406, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:35 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) preadv(r3, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x1, 0x4) 02:07:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x4e7, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:35 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x37dc12502000000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x600, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:35 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x10540a4, &(0x7f0000003780)=ANY=[@ANYBLOB='nolazytime']) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = accept4$unix(r0, &(0x7f0000001340)=@abs, &(0x7f0000000040)=0x6e, 0x80800) sendmsg$sock(r3, &(0x7f0000000200)={&(0x7f00000013c0)=@isdn={0x22, 0x21, 0x2, 0x1, 0x81}, 0x80, &(0x7f0000002600)=[{&(0x7f00000000c0)="ce2692e0d4dad141311951ca466db1c9c9a585335bfa7f3638b093df10fd6e88d046d86ef7d6577d5166", 0x2a}, {&(0x7f0000001440)="a2b0e4833a0ea047fa62a0c824030d6e9e73f58e60c9644413be16545592ce3479da787ab5856e2d1a68954ca5a2f2883f19e9032d998f78eb5aa0a67072da41dca93470fdea52808259ae0dd8b2849af9318a7931a4b6472a2fb7b0303f1d51ae4b2f809b1877e4620196e24181e654b0365411814241bada4263a6f9e84e5c93", 0x81}, {&(0x7f0000002700)="76f250aaeacf4dee15c825f7c91ff0ff29336674ddc462042637d461e76b08817291638a8a4aec7ae62c2ace1ef7e00ef040664d666f94bfc3a8aa6c3c85ab37a79b52f8815706d9a2b7eec8fe18b4b9334c749c46df915e9788188bf891c11fa1d67a07877522f3d90dd4cf14bf16882420911ad2e9e663ac0b95af54ad31a5802ac110a1ba0b1d8ee58f06ba224406c9abf3128f72ab948e53c61d2fcf16ce445316978661", 0xa6}, {&(0x7f0000000180)="4de2c1b79814d36a1ac11c76441f32cb5f3b0452e1b9f457850e573f383b74154418f9f0da9fe3669ee9a7fa350e30", 0x2f}, {&(0x7f0000001580)="6e9a40463cf2f101f99da94dd5c392b80cfa2e823a8598feed9f8f6f415f5130c41fa420ecd1bab5accbb2cc407a476bd21aa062371e2f9308c2bee1971c5b3c8460c6", 0x43}, {&(0x7f0000001600)="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", 0x1000}], 0x6, &(0x7f0000002680)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x591}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x78}, 0x4) sendfile(r1, r2, 0x0, 0x401ffc000) write$binfmt_misc(r1, &(0x7f0000000300)={'syz0', "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"}, 0x1004) 02:07:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x604, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2703.433271][T23933] tmpfs: Unknown parameter 'errors' 02:07:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0xd, 0x4}, &(0x7f0000000140)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x700, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6000008, 0x110, r0, 0x26773000) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x8800000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x401, 0x80) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000180)) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x401ffc000) 02:07:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x3902, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x5f3a53, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x4000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x4200, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:38 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xa00000000000000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x32e7826, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0xd9f, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000000300)=""/129, 0x81}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/171, 0xab}, {&(0x7f0000000540)=""/4086, 0xff6}, {&(0x7f0000001540)=""/215, 0xd7}, {&(0x7f00000017c0)=""/87, 0x57}, {&(0x7f0000001640)=""/236, 0xec}], 0x7, 0xd9f, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x8800000) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) sendfile(r4, r5, 0x0, 0x80) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000001840)={'filter\x00', 0x0, 0x4, 0x16, [0x1c7a00000000, 0x6, 0x2, 0x9, 0x40], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=""/52}, &(0x7f0000000180)=0x78) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280)=ANY=[@ANYBLOB="041a784254ac06"], 0x7, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x401ffc000) 02:07:38 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x605db2, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:38 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000140)={{r4, r5+10000000}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x6000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x6002, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x6602, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000000ffc}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x6c02, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x8fff, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x9301, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x9801, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:38 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xb00000000000000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f00)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0xd}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4010) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x6123dd, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:40 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_create(0x2, &(0x7f0000000280)={0x0, 0x4, 0x2, @thr={&(0x7f00000001c0)="b8bba0b622dd255b216553898473b301bd1dd5e0a27570b745af2b593f2c69201a6e46b935845d6d66dfaa94c0a664d774f482f5e31c72795cc69f5e844d6f6fa87a9ca775cdf0f4d12aac9370cd511608f23abe0bcd7c1a7a6b6bd0531d4884a6be4696f1f122a3eadb4d7490aaf078", &(0x7f0000000240)}}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x9e01, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:40 executing program 1: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000008000)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x0, {0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="95970f2c89408cbb3a4454626f8d3e76954958e70fa565", 0x17}, {&(0x7f0000000280)="1692adc79ab0c05938802883d824a1eabc", 0x11}, {&(0x7f00000002c0)="c2b6ec834da853bc998efd3822af", 0xe}], 0x3, &(0x7f0000000340)=[{0x98, 0x105, 0xff, "b1569de10a4caada98a89fd4aec20f37348c572515d51a9efb6eb21c42e1443fd0243988a1d4ad8ae19e0814543e7025a2b7dc2b176f6592ac1e2062b9c02cb912b86994634a16355ff89d7c8f4f7e458f83f8a092ad8ee16ddcd63d5f309bab823b696f8db662dbaf2de2f796bcc6ba4c83365f3e6dfeb7be9b5f8968a2f63883e2cc77bc"}], 0x98}}, {{&(0x7f0000000400)=@isdn={0x22, 0x20, 0x7, 0x2, 0x81}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000480)="e40b831314c8310e38e946c00ddefe45953e85e6b86b6fe41550162835b17a0f0fca788c023c65b60de2ced8f33e70ba4b26acb723b6bdb34f2f196d", 0x3c}, {&(0x7f00000004c0)="dd2e214d1ea085dca0f74488a3aab2fa92ef2f5b96798d55b60956414ccc191fc5fa8444ffa74693b5b3b3d48914d7c91a41866f48eb52ad045a88ff8375ddbb69b5f82f0b688d7c19777ef33a32342e281c1763b0b9cb088209e10bb62715e551202174fee99f599ae1a97a30364ccdc4c7b05b0990e649bb72a769b6af8e06f70095cb5c5be1e014f375d3d6a5604ed198acec3cde2f2b0e02c94e590607dc4d63a120774abb0e6821ce128cd9c67ed7f8afac7c1fcc692db217d10efb11a22cf4878aa2b73983cbb79390357fa010b00a7606df76d59944400ea1e45a26920f6121366341e0513715d070af65a0", 0xef}, {&(0x7f00000005c0)="93f033f979361bc94635b28e4b02360c1aa0482f35bcd51a3084dc0e1d5ca7c1a65498a02650582d9a10e830e02773a985c66ac202cde172439a96ae3ca65e3c8fcd9ce6b6ecf848f4c4ea1cc19f64ca02e0a8c814d68628fb73bb351feb7d1fa17c7cb4bc4915a875b615ea73b99a2e14ece1d2a3cd029d18f49e321e7d75ed", 0x80}, {&(0x7f0000000640)="0fcf9c7c496050db84bcfd2362a9bba8b36b7ff15b46562cc6e7c2924f26aaa077f9dc4fc710b8b41be531", 0x2b}, {&(0x7f0000000680)="4dc0e96810c917161d8cca2caa932a8fb88fdcdc682c888388d2b992d937408d", 0x20}, {&(0x7f00000006c0)="552c61ca2ea6208d40a126249419373099a65fa2f4f3c1d12a234c1a7903bc415285c62737a45dab14721645c05fa362f99fec969e3812a69e238539f7501b3bcbc4e05ec5c54edb86a40f4f589fb2a9cdf8a280cac4e1f5945a40b344ba6961d1348942745b1dc72f25bdb22e6c7fd632e6e231886cd048294bb528b41ccfd94b6cf9da16ccb8288c7ceb8a77b9045f85c725b54169ccc424fd1a9e6dc01c02915d415a301861c8e406a9c989ab656e275ad658df64c0b852e477f93106c771a2844f2f1de964b24ed63faad2f1a6fa606fd97a5acacc098150778b7f31132df31353cdbb4beae84a0d4d8a6ed0068cf1eb19aa22cd45a2b07dcbb49f8ea12e35764ad502b3be1e8657a1e89c96a4dddc109e0934e556af9438a1bceff1751811ae9ad575cb98211ffcbbf806b5e1eb6c61878f7591ab658762d6b76538a95f7061c0baa82b12d925751c34e57370e8a4f877f730d4c15f7eb39896d9fb57ec2c98af3611004382064565b6b924313efa167497e359b544593e86dee892ad602769fbb3a238d270ea95cb4919e816490f66363f0fc85a032bc388052bc0e83a1c5be1553a1d77e920ccbec1f305614352ea8bdc6a194941ef57af2e90f36d683c08cc19f37513fd5eb02007c7ceec7e5d9acd44f408052552b2a1418b7bb9bad1e797d5ee1600ecf5ff6f1907fce6d07709bcc883d0355ea2e43c62764fa2aa59f388329ec1ff641f266bd2d5ca9d71cbb1c0aa25de387a1caab94aa3444a0f5cce6be55f60ab3d712787c76690696ff46076aa8d2ae67d529306db46c79f49fb36799eac015cd7101a8c6670f51586c89cea43427be5a4b35cb6a948db06c51406c2a59d51610101a4d72db0112bf0938c3ba429d2d26ea5525fdeba766584c4c03dac3c4104c9b66f84473e8cf4a6ff13009aebb5df70936fcec39a3424e10df0c5fb055ea4e1a73b12e0a5dd69b632bedcac1a1c120c446180037b5c663278dc2cff3788e07867ac0ade9a10c9a04f1f3a5586c3bd3c4914d9d52396a838ea5775e310ac3192a13d3c19fb8fda3f82f69cd83ebadb24e90f9eddd924fe772db863ece1e59819644caec50edcbec9042f4c67975f79524897209cd99d3b3ff61ae1dd94899186505b548b3c4a3faa7e3548c6b02c6a2d8de9b206f97abe5d83482d31f57813308ba01d75ac4d53903515e19c6bf2a30c55dccf2bf412244afd1272edf700996cfc5444523fecb9e2d6b30ff68bf300f639a261c71f26293c9e2d62b06fc2f4f26a614b66949b61d2e54b50b23de7a78b2c8d27ea80e8ec6508c0cea9c6fd8f04e5afa4b3370a1cc9d984e7f5d0c6bd229540d1ecdcfcc9964fe1f5edad5e9e1852a9183a27ad9b6049ed730f58eccc39b7ee8bf3714871f10a4bd2dd8d5833a8d1155ef2bd3ae0b89f219785ac6bb05d552a4267d9e4caf69b644cd7f6b6a3fcf1a8d091e23b675161b895ce052a268871147a3fb97c44fbd2d1493fddaa5dd802699ee76bc51b99dac35ed5e699afe338f29de006f6051092160a36ddb018602cfd02b902e04a35663f11b1012ad6b515c80394c54ff7ac84bd48805d6b56c332c0afa5f59183effcbdbc97cb307bb616b59fe89689fc15b042986f573631721dc16ac75788951e9d15d7efda56404785713d912d34e55d085feafdb499bfb8a6b8f397df956fb401f3041124aba242609b59ec8f3ecf31cf9c2a844632c8bec76c6e82fd07ec5c238a861fc07fcc446bb188d3b08d315f218799af515cb683a93c36c97f66ef70050ae5be926cc8c717a0d8f826e11beda8641d9ce3504d5898680be745439afcb5771166f409c3e85d71ab4ced496edf2d8eb8cc56e6a38e357bf31550831c931a0c26cf039be7a6eddb3ec27e14fe06f050a76f81172c5120750b9870e13588072eef49f0b8d50170cadbdcdd015877eec92cf2969a433b01c48d11708318fcdcd125dfe0d6bd9e5a535d884231d17a0add9b50215cb6cb116b41db32d6347b4bf908499bc264be5bcfc7644216e51867ca46cd68ed87cce7a2e6e9df80c41a73eafb56ef58a6149576e4e8aa04e06cc773e0fb12be179e96a4ed99d94820a6e4de93b5784728026128338da827448b8a853af6e1b47136a5b6171d6e115f17ab7139d697f8e8e310d027b6b26ccbf831d3b4abbc2171ae77bc53100243aaf5728f5aed63a172e2996a54e7e40fd9e9deab65bec49222159176abd3f989aab7cca19d10b922205a7cc06e655ec17426deede9b4273743b9bb4bcdfbfd5ecc9d2787d553db3274827b62dce47d3ad8d0ec5306e6ff94b4c6aa405cbd184452b9308398321cbd23b5507c03468db57eeacd2610028a3daec007f93ac94e5dcaac3d69b281ead13fefbeaf4b48d137e6c6915630e6f9b32290bc5e89ca458c4b4c58787c48f73fa39d94eb36ab38d62d48d8bb6a58c2451bd9d5441cda7a2df3dc2a840bab2b8d742e54358c8422d55ed1e87d4eeaeca9b945c3ccf08b163e45e1a06274154d22fbf6a7e2484451536f6876966eee7056b18f9b0468074b2121cdeb35e5d9575e63d149d0a9e24ed2747a919d14a0202b603a4f07ec52efd06cfd7365ca253e91d78dc61a495b612ae9cc3e6550ef6d70a6c997b38aeecb4e327931c4ab7b21f0ff5b599444f4dd184c75014424b9a4298a0ceb864a222817378d48fdbafaefc27d1237568d490786248047e950ee18bf4b5830449253c9aa4999f7f3f6149e72e49b9b46bcb8dd4d63bafce4d8349917226064c948bb2906bfedf5819f219ecfb5925b973b66cb9d043a15846b13e33b7aa56122fda72f51d20a19fd9b4a2f80e4762c32cd5e0b4ba8fdbac6d52d08e25986999510bf5a5751a9cbf1c6e9ac516815158a3132a1fc57adace62fdd03d4efe3998ecc28c5156de25271ec5d46166b460680ed120b2b8ee841cb30f7976efdfa753769822b6f78595824528ce8482ec26283959579335cf682ae5bacdaafc77c44de37b86dc142943d783ce8e85653b69abe693c5b9746634de570689d929e7617ada44738870ebe045b32875b170c23763f6d2e3102001638aebc7f8d11d70e89e32986d3b13df021e5f90911381ac8199faaf1153ed02886e0a81e4be12ba0e76941b917aaea8b42d238b4660d9a9ec341aec5f601d7ac41fc679eb653955fd3b75553ab1d5634beadb688d006f1cb2265698b5cad3ca0302a002688de40ec6f66fc1cbcd6f8e5666d48c0fe48d21735e5dde2f7411ee3fffcd7c09dcee125739e5476beed48af26292f271ca67283cfd03a05fef25e459ebccaaea362ef408a225a6740ff08b86d4c775c840c9d512f02bc8c58894061d6a60f3f36a28ef18f520eacd3bf15fc58f7c3a8ced6a66f5f8d22890cdc29b82bac66ac3e99e6efbb02c6b55e7c64329832bfc7c70163e847c18ff21aad01a05c19fc52b3bb515b2b63925cff9dff747b03d4fa10649f9e29d33e8bb1bc7d7c5672d56779b702b27ba38e754047b702ed325cc90e4a3d84342c5e1fd1631fecd0668bdcdef11a85250e63d6dc2d8f20a9fcf756613365cdb560015dd9d09e9e1d0e9ccf471c5e2110b5b93335a6473394273f9e986d7adc322b1fd9691f91f4ca3fa1e1d821a937e17da106e9b62f14649e1d768f52613dbdaf052013c2285e34913c1263974cd4a6cc776957d1fd78433907f92e87d81c73588066b3e8fcc27f4279803fdd9237e640c117e4a9330c539d90bb909eb7a37cc084b0a82b6cc2e387d4c77dbdb93ffe2cb5e89e79bf7c2a170aadc2a9dfec6fa815d1e0ec65a5fec9295636c4fbd91fb143bb6193065ac5aea6e59be27db3dec1f80b905b938122d6afaea9d8e1e37c608bac4cf451bbf4925abdbecd6e9d71e5e0e90d87ab04e85d9afa5cadc15532d97496a7e022244802eee6f3ea1591c5933c95d8dd44c8ce657b84683842eeb0dfe7d40f17c0bf841718ad0862e577c1baa6ce7106cecd143c468a80c30d624574e5378354abd3c602f408ef72bf6c7890429808c0637111cc3dd4c924b134f41202b13e6af7e60cea190c1854626e390f58d41793712ea3445f90d86f7348826f743c3cabce6330c70378c911f5c81cc322b858038d32082a5d2d8a72c42b42d137439ef0da93eb13aff06eef41890f3832b4dbfdbf5d39f5c6ad0fb2ea6a0fca0f55d0e9a5d2f27626ae63d3152bdbdc3e9c44a2f4dd01d4eedc8729d30d05ed6dcccaa658ec78e67f7e84504841709fe9978976ac7c685b3e9857a4bc29a0379a3f6571b94337a72561fbc0950916c2cc8e43a9807e3d4554a2a2444540f457f03c32d751bfcba25f8ce907d76bc2ef6a99918d9317315a7f92640a14611b4f30e6162908bb00710655d5bd48428ea493b79aa2407b3a52dfd2f909f7e57adc671fc598e10d6d08229e072ff16695f670dc81dc0915f5a8b9612977757223f3428e7a5ec70555e2e2f7fd524ba574a248de5ccd9f98a3d1a9db997248d745beca0b6f8817f1d126a1ec7fecaf81da47f14a06c64f0e2427251287bac4e75687a18985d876039640eff534e8ce5dc39030c33ecdac24156bf6658bf60afb6c9df3234677af477a92907f7b3ecd50cd8a9e16f737683c744cadfc3c3e8f466d2688881148f2d7937208014237912bd2b5097b2bcb17b70d60fe5c26f799b5bb5a7d2e214a03452de32af08420f72402ed628098c65973967b510965cbea54cc4d9bb78de24888a98b173d5fd2a78646fb383d6dc22ef0199b6b620297137a1c023a3a97bdc7897d2939d3bc0e9bbc78b77140fc0960b073e98d8bd74a1ea2467ccb7ff3429b8e2d0e55c1c40eee372dcac2b494482cdc429b6d63bb0bb4911a59d9cc3208a1669b97d9984d59dec1678856d3ccd2f928bd0ffa6b113120a494ddf82fb5fdad5bf93e343e66ea29fef7ae5bb81cf7061947f6d1c764a83151cc38cd6c6e0c31dcec18e4c07781be27bf8f554c26d3aab872d7bf1bf13f6a0f2104ce3c07d2ca5450233d1bec7ec89f7ea0da6386d1a52bcc5a1f18b42ca1a0f5e20ada64d19d092e330e612f3b237591f9f6c2d11627051a1cc0b119582dfd1270b92d27f1b2d15a15f9d659ad0c5bf3b6e5242d3a5eb0e3e8246ee21cfc47bde03a9dae270565983efd672297a0293ce8907ee3173c04ced2ccdc17024f8f1368f3a4184ec92b53d3757692aeb6e091b0165c0c8759cde8aca0baccd86f09865db1d8dd9d032c4d48f04221044d4235ad10746f7383dbb97a69d3a2453e599ecea71c6baedf6631e0ad029b0398b59b04ba7a0bbe13a203b3a05db5dc5d4df1393cd516e4fd5bfc2aeece19af4ea5f41516293a0da4d4ae95f37e32bf5804e58a9bc4d43ec57cde14c33f07a1c04557124fd40256e0ef7b7535c4d6b0651e262029603bfdd53c6bbb4f5400838a653026a549a810f5b37525989a573a378f12841c3d3a805ea197aa9b3bf0e6a8fb88b086b165902e271e07123614e9f37a817b3ff66c1f12f223ecea66a57347cefdc75c6668c6df13c6969a235ebc4c5b83ba17b2c8e75d69e8f9c250fc0f26517d76e98c6b71c15fa7a4dcda417d02832e2d67a33f550f025800ea008c745fb505be9a1e9a0b8e1cc7b9abf3da347f69456fe7a83236fd0005f34e26e13d01b710100ea426cb5e5350be6c844cb9a5de326683adbca74d40b15975646ba3138a17b3eed11d42c040f7698ea9d9cd4068ffcde24931db74406b872e41d71181c08c3c5e6897cd66828bd980d570274654224f4204d1b0b1da2eb0b49bae00af5dcd81d8465741171c", 0x1000}, {&(0x7f00000016c0)="b4fd32d5579dfd931355d9ede2cc59e50f1c1662f71e67d04311e439d17857c58d7a5af6c9ff56ec8e8330e47e4a5b23feb4dd88721a5bdec5c8124ade4d42049f9347143db108a1c03706cf0d46d5f7ca5e8232dd557a7ce8c9efed7786a8aadca92a0d38c236a4107d1e421c75a07a36884ed9f639135294de9e05f3eb7d6fcd1c89", 0x83}], 0x7, &(0x7f0000001800)}}, {{&(0x7f0000001840)=@rc={0x1f, @none, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000018c0)=[{0x1010, 0x0, 0x7, "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"}, {0xd8, 0x112, 0x2, "6fb8cc530f0ec69441f9d55e1ffc89b5b8fdeb68599ef8b424f3c8c60055b5a696bb64740e329105649b778c5004953c2120201a192619b71a732b19a039f653af854f899795c303cd016eb61e349cc7e5a9ae6750631db80bc1d894bdcf16f699ec855e50bc6399ab08288141740725374b95a937bd1243063ada06b2a7568dafe75e438fe7d2b6b52764ce2f851b710f05d71362599a44a13e2591bf44569b7a67dfb14e15182f550421ece71e87cf98061e8841b71e20ef4cd6c1e5fe4d160e1106"}, {0x60, 0x1, 0x9, "97f478641cdc11a634e1361bd38d77afe84e53a754fb7ccee369755fbd3f6ae588d042ac8424e1453d0e249241628462d1db11d03cb80354e7aa1cd3a7418aa58937f47024df3104dd01352847b970"}, {0x58, 0x88, 0x8, "446835055529e2333a412f959b88a77fd52f46a286cc326582f99370822e0aee9f335c7cf84d753a9032c77d87afd2cd9dc662ef99571997ea2afc133f48b42e23"}, {0xa8, 0x104, 0xc4a, "cd0cc27fa0da906dd2b6991ccd08a5726d831627d356c5f95a73abdd5441c9f8284e6a065485c80e4787cc50d03bdd4661fbde3600661f8f40fd58424a0929bff7d751b2cc99f9d4c157403d94576624e7fae96c01a6e73903b644f9417b142153a3af0c354e39b77f97be63850cb045aa94948950785ef3c0566bf9f1558315456fd0989e1ba5c57a0e3774f486b1565e"}, {0x48, 0x108, 0xfffff000, "ad494721c4fff71057ffd31f703d6e91fabc63d87ca58ea5e6e9e5d59d71e5979a1d1605c1c20fe187a6f87dc5beea0bb17fba69"}, {0xe8, 0x107, 0x6d0e8150, "22f0c8c88dd99c174985fdffeb94d197bd9962dec0374db854a34ca327e77c99e6ade34850bdaafa58b446641bd68107c45f11271b1767e17267f2ba3cee23bf98873b319aff70663351c75b63a4cb618eeb523808c23ce642e44eb2f97ea32daa7fb3eaf8d9fadd5e56f4f12fcf687a7b5a71fcbbf41a3a48c87c77892a019de1fa3ef0a6dcac9ae15a44f3e1a0bea308255a6534991c683c9a09ce685c20129f44d935c875091d3717f2e661d107d12b5e9e259cbf088ce301ded07b120ef30e7ce28d77b8188c048d3c3b57a47afd883305a6fd1c19"}, {0x108, 0x29, 0x2, "450f98791b1c95d1342944c6e1146801807a21804e4c6d2fc8c072420fecf6bcc88e3ee85f3c799ab3cd66a7232cf5bfcc0d9c70ce6342a081796e23cac5d575bfcf8b2679a8f6524d5af108fc8109db2b15184ea5e68c2e93f576fab65f2887998e58caa1e49947f460852bbf1c2eae38ba97ad934ce6a0c3838fd9ea549e2f2cb2b427a11a567d2d0e4ac639c7575ccddba8cdf2dcf97d2db566fe286136863eda11d74b62ecf0e1e549802e9c6e21f82112476cd6070e8c379934aa98e7f2732cafebfca863ef08ead90a46a3820d7d7bd99ce8054a1a90593cf08a91fea97c116abe9593c9e3233f7328e136f6eef7"}], 0x1480}}, {{&(0x7f0000002d40)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002dc0)="2c1de10a904e3685ce5f11d70edcec3d2e1a9a49f65ad7d118193c2514c67b673db4f8f4654bb85af470958f657c9fc7f96c9a546d741683cc04adc7cd376211bfe8001e8729aef1655d300c628eccefbf3f89a21a", 0x55}, {&(0x7f0000002e40)="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", 0x1000}], 0x2}}, {{&(0x7f0000003e80)=@ll={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000003f00)="735415e98f44a3086c6762cd6eab7f5b0347132b59c86f", 0x17}, {&(0x7f0000003f40)="da1b9d8b711e11a006b9e8f5544c57890f4281be6e829f8e75bc618ec292da15e05c6415c57d699ac8ae8fb10e2bc779c4efb31e6708f738dee1d01a86812bc7a0e6e7a856fd9c5febd748e70bcd05e55e9615", 0x53}, {&(0x7f0000003fc0)="384ccdcaef7145bb10c08df259c3440764aa5cdbfbee48f96e4b1dda6720829289d86e52737150dca2b8eaced5f3dffe7f683ae2cbd1e4004cc5ce84b21e777b793a6ac681cbfed82ba23a8f1fe378d5c67e816b32b555c38f22e1fd92946097e3179a8a317c6c3d07a709cedd31303614f978d0fca8f65fb875cb7c69bdae4457cead8e4ccf4559ed14a18c9f4f14b42acd63376dfa60b5b26bd27006d21bd623483dc4a805caa82c89cca7e8af2abcf3fde7", 0xb3}, {&(0x7f0000004080)="fc2a2e230c1a2bf12e7b44d6182508bbef0a858ff98a62e9124a47d49016618195211fb9d02132a057ef88fce62cb8cd9c87a7d8d3e2c4523e7ad3386931cf10dffae7dd8b7987106652b2efa26dbe26b9f2057f0462fbdd23654c27f76fc02c18300383d5304510e3a2808d2fc3d3e87210a7c7ac81e7e13caf8c15afcd9586befe7340766f94fe61", 0x89}, {&(0x7f0000004140)="2127d72aa4502e7869b946f56966862ba53de8db3cd57edc6254420b426a4a90d3b5fa069fe020cc7d7274dd06d0d0e5183ec002cd96d59411c1c04404044369068268406b0be61893498de128f55c187cd67b5a94e79a868a8784564efd99249425cf5453f6e2651c2d382c036ef8a6cf95e6fd7ef17f2704c9fc9dc9274a717378a8e5bd162ba837137e418fc19e30fe0afefeb906c898b7f8042b64734b3067ecf51d4fe2fda35cac1a35b8ca439ee676715bd509ee0aa5418d43ae42c1e663c3fa3f3c6b4dc2f82805f92e78f2b9a88a631372107c14c18621695fc3f3c1e358fe82bef245e4df3a460a8e4d3c493cbe75e114398a6bb7", 0xf9}, {&(0x7f0000004240)="e933e76bf67fe71c07e9c614265d17ebfbfea458d06a0fe3f8aa358d0f7e17dfa9a1b254f594ae2e974c950ccebc188613a615a76ccfa343000d2c3ea7e592f66f8fa93e378baf11df6f4fbf62e7b4", 0x4f}, {&(0x7f00000042c0)="6c7e4cd1534d40b7d0b59c4567045da130c7dffea27932c089d515aa6afd2b157c1b8fc6db2517e218c463aec198c4e68693310112533a859888f6e2fa2dd3de20c2416f209e44768bf625a1d02d85e78f4cbe4bda4458a71a6a24564819e08f41af68d5e655d3024dd014627e360cdc1281628e7b3b030292bab18ef0b7ffa13fa9efb24cf6696b8f59dc24193375734e0bdfb146531df8a0759e246f33b4a79884d844da93a4deac160512db9dfa164a2376f48c1168bb115d4d7bb2dec9bc6c519cc690c716eec7518eae6e7e3daeed47c68f90c8d5fd293aef0a5c3b45f6c9aac3b5c0c65e9bd06b3c14cdfb289434446a3fb71653a7d5d8c08fc6cfa5fca4580bcd116e1053afc52ff7e516e4b07c8da524fcf89e6f303a6ee33bd16be3ccd504c7d9de4fb19cec2957b5ad6876a550d089cd7b0638af9537d78bc76994cc9ed1f103dfea0f1aaa49b627fe3117482645aaaf8caa2a8e1e40b283f923e2000c223aa56f2bf32ea4f1a9ac971779b3d5d4372a3a4bb66869fd4c8e81a50483e216498bfa2d832a9783ad2bbade4a13b2219897090c9414c76d5b65a9f514a34d15deb00059e690576ea34fd4a600d70070cd622a75a28108c2204894673db53099e74f621a57c5b79fdabf60218ba3d0149605cc3263b1c07993a79df72f6795d129a203d95112ebc01074bcff39b7ac03c1387fb9a37fafa6831f5b4965dd7003df20cc4fdd128c3860deaf028c689bd8f3e91957d668d62347e3e11489094df7b507f4a2d3fc3fb985c3e4731d37c26ab3f6712ae4be6ba842dec9547e1d111f74cccd883277577ac9cefb5712d304298103e34e39cf7d91fe566a829e9595f899f8f0447adf2a63a7b7e09a53aadf0ac5b3d82fb4c8434f5ca6d7ad9495429bb05d421d647acb18bfe553682b98b4e3289dc680c60b20797ddbff99ff0c55214236db80988a39683e88eb9084606299f02208a77350b4adb7bd2f63e7af40d55723352cc373966a405654707abe18bf14235364ad1177469091bf0260359382618d6e38c2bd8de492c71d10453a4747187cc0fc79c7b1103044296397be8ff1dd55dc5d65b984c2812019729388546590f18988613b6008eb3fa86c6fde056168baff081f27f68491c5208f02d0d0dc887edcf2cc0eeb4915c108da3cc8fb772b7a540cfb50fb7f753e075d88c28850d78a20745d0a37e6409973f7fc6bded13bef1337fefffe7577153b1bff2c3bb9f492965f74b54e0d9f7922c46729afa7e4a3028acba1f19b05090e4e52e465cc682b637accf9b1a3a4874fe835c96aa6e70887d69a7055d7a07c0d16e12552ffd1cfe0060eb6caecec37abce9191839c3e5f4dfbd518415e594fd5a916bd8477ff926feb942c71e2f9c2fb59f35cd5624b0e50d78f449424714b70091512562b1a6a99034d892ae94a3cbc31b4935025f718d6a68cd036555f04eb293b972e5d5407cb7fdf6d7ca40a16875627c4223bb5f20ce14d19da3bc74c6034103ff29c6635ed63b9dfa08a2c2ebc50f798a2fa7f8c572e05b8cefcbed1c04292e8cbbdb0aa33f88baaf77e9ed1876c3bf9c66871a3dafe87ea4398c5f09b005f9743d2bb5447e99fd52245585829c4244c24f1c0e9346a5bb46ed4d083ec40fc2a94629d56cee7483649347ace5d8c6c6403d99836b495f123747b719fde61bb39f3eba9cb57c0a51702542e0bfeabac761eecf8c2135be6381a72a3ccd2ff78719c4850178e02c419679d0431fc693e595835d441afd366604530c84c2b26f1a840feff128e16e2afbe120071e46f166a349962f6ea328d87f2687135cd4191172c414800c04af6417eed128f67d3d97b6c86808a348ff275d8bcfa5e8702154083375f0957b9f2c45f6bcd864fc169a3c15329d56eaf2147c33352493f028b3fdfba763f88d1f5b6c8fe41e734580022daa9128d0899b20f6d799eb7431af5905e5659fb2b3c39e8f22fd76d5d0bde64f9ac8cba5c66109659b40b78e82c94f429ac6f9ddc017847fe8495d95e2808f7a1bfddf263c93843b6bf72812ce54ff5b5db64b9aa12a02909b414e596dbcc9a0a2edbbc0255c0a48d7a696926fdd8e730127e8e2188113446b9ebc5913929281881ec53a15aa3b6b56da613804f4da425c16138bc7bcc1703e9b8173560ef5c4e270686e8298738875e8e0e88c695686a066843fcf9e95873dea01d045ed315b36ba195fc9662389fd73de7397e905ef26c18ef76c8bc6358d17ff6b87b5eeba2cf45afe0e6fe87e9d1b63d8f64d3c0cfdcbec3d8bb394b300d6f0f7af496dc64d7d34de614a22c0b27032c116fef2f7f2eb1de0ce8062eb4778f260e6ade18cb134965dd79551423b97b38a26d4ad10060e17a1e1545b12086e3c8c9e0c437eea839c7cce1b94744bc55561bf111d4b4526a10eaee742fc15490f9ee68de165d277e3eb732fce3c1cfa5b0e5f672106cc68322a6a12ae2eae5d3932d4a49fcd8f0fcb3f87d3d7f09173dd7058d63bd8bb6d7ba3be990edea303b03a0ecb3507ebef716cdae9f419375889679f09ae347f8f25d478e418a8cb5698cb9343cb35462c87c9fe33103ca16ab721d7dcf6f5e04823098c0b0cad5a409395177d7e993c7aec7c2dc290194211eab1caa239fe9a1e1d4c6c296bd99ea429aaca5cf085a32d2a9f566422bb4a2433c500c0bc31dacd89497dd5620191eb76bffeaea5cb5ffb8e56dff5ddeebaed6162824ab624f2a1ca01fcf3eb580f03fcaf90c110c252a3550293f5d08e572cf22cb541fa4f265e8c198c297814685a48aae1c13eb7ec7df73aa9cfee1a85f0cd414e4f83d6cb723aa7af11aef12993c02bbc45b6cbcf981e089b7378496f65ebbbfc23f73a8488ed8b471c53b039ef19c000e84057c68a93a84732c47ad5cb168e9f0e1692ce277a2286dd7a8f6a75a1f72468ba51123b4f5b30733ce04f61f908a921c6cc5d3f1ea05b01778bdb6dc3cac46a5e8f04b57248a3c7766377cb789889e1cfcaaf5ff6a438ff42cea4c38530c0c0672c6ef28cafe4dfb1d1c28f8cb60410e390fc376cfa3debeb60955bf479b2322be2ebe42d52af915f6f85706f0e99049ddc9ceef2fae2962b6b06aa58e91870f4d3194dafc871e572886362dcf2fcdcce1e8e3ed0e0b628b8d1654824a166130837bc5b2ced63aeea3a949b2b5fa9e4b921a2fa6ec5bb0cbb25837861b3ff2fcc450b51d0024d0063da88ed1df7005955ccc9e739ff5cf68580a79be279c84fa2e1be10f5ab96eb809f859f50d8d11e23958e7799329f8a3ee9b3e569fd0c8063f90aa202fd4255199789b584016e456f76b94465b96ddea1db4d7894ddbd48ef55dc286ea6742302090fb8ee2ca1003309ec805920e1b2a6196738057763cef9abba20bcd19e2d087a273e3b244a6ef4e6ab94d6f583fd787d385b5b2ff9df5639cd83f16b2d5e289cdb5c7ddc46a9380c2b1eedb96dbc4eb9a02905768c079dca57795b10bd72af7d7cf16c239b426f8ef1269a0bf1ddbf112c9d1da74fed62714ba8de2744e8e402f5991d25622254d30545a4aab2c5b08c161b4b2a0e5fb0091d31513ebb88fb6612f4eae40ea554bef6d563dd06285862de859cbeb8112ba8602ee9ddf53d84ecbda9c8a7cbb28ec9403a3a81c51f0ff8f9ce4a329a0fd6001375a233027da4b4da8126a84c90572f7b4559b20ee146432b59e1304715013f1ec74cf12ce6281141293490f1b47363deb9a3b5b2c7e34bf81988ef04f16809947028a053a62d7be47db6a4758a61b7c3244343bf08bc72ffd9255f8cf4b01711eae00778b0edb7df2163f441c0abb368dc245c7ca4da03fa9f274236a5284cb1ad679170d41fc68518b19f584bd24d2a5e2d94100041543102222cf3f26ede817dc67eebb3bf7190b94311c8238e5ea8a8a30c132059895efa12cf678e1530c73298444c123535fc7519e42e9c3c4cf8102c43d4e6f402107bedf364f3786e0c96add5c278b0cbc5bb88998b863fa9e7410fa006ae0eea34d24b3ecac3fa4b147d279e20af59a494252de4274331790a723b5d4fbda3383d3c4515d808d562814b4796b262cbdf303940e199ace1db1648b6a9e7b266dfbd23a2fcd094962184d4654a91436768eb48e25a0d3886e6712db2b82a828fe1614e7ac324e9836c69d6119598c890362873ea83a4ec7b696b87945de61a9c2b3073ff113d211677dbc772a87f8ebdd9bce8bbc84279af14cd1ace495416ed770e8a90256e41e78c6dd72fbbb1288a78827c267c8be8e90a6368635a7c6420f7dcebe94cf11e6d4bd2aa03c05a3bbd24d5ccc65978af9a405fb4ebf6008acbd55ef1eb95ebcc6683b65320d9c6845460f37c9f7945c4826994a6a2afb37189ed58e362c886edf77b52c5784498eaa0f48341f7bd511fa70f80b917da63e12b6fbfdf4f2c33d75c4eaa6bb0f6e64b13c62d182043cb2cb7cc47f5284dcf1ad5aa64dce7f902b55551fa0016bbd76c9f147975db6eaf5f6de66bcf563a69913c6127258b8c69e3489a5c1360b535cf476a7297e6b7537c18feb1b3982076ef0bcb8019b431a8b61b8a20b878c1340e3bdd446504f0c5a094f5318f8d357052caa5f335d7c0b9aa833384f5cb21ff7192c1f4c52f15bfc009bab0b11adeb46d9b7a41a7cba3613c0ffaf5536fec1b5a2c002930e03b0d9cd1c62806f68065343fb7b40d0f0cfe90ec5bedb7566cca105140fe109143d1ce1980e1d3e740ea17d895732599836ba49313d76b159e5372f31a96abf53afc054ca013f5d18b74e263fffe96116f4b66407e32290d53fc991717e4c9c37dc86014446ed6bf85ddda5d24320b1b8537338ac462e5daeac67fd6ab65ed66738f326f3c92f9a01d59e656c3e6c4b49632a9aa7263835d86d9b335c0864509b2cf9b5c431c9770b072e90784a6b7bdceb038ee9a49f95a5a9342ce4bf4c0fb4dde8a8131d2e76260739aede900f751d5956bd229d9a6da1e78e7cbb5fee59fe4f94091046147bde5b48f6304006f8853ff333c6390d246b3a754a3b3fe3c3b609feca56b7299a155f6a7755c8418521d5c2414ad9daabf760f131dfca07fc55176ada5b976abf0aa73a7875fdb8e45ff95c94a8758019fa86964806b019992157c54bf067c4ab591f2846ad0068fe8f65959512f4a27c62bc7320749ccb4ff8a1ee5a6a0231e1f0deeb86e7619d05faf4a2ef3daa78fa0761a324b40a0c1845149c9ad2f6b15958e6c405d3f8ec8b5ed6186adb1f20b4e39080aeada15ee7215a5d9a93b3b7b6dc1680522f5afc5714d8a2bea06becd8e56fb96bf24acd6fb78eb77f5269f6247196568ed2318ecc9fe0323dc7b31f99349dd12bf576edc560134f3424de92fd133bfa548f2db8a61f9c831dafd17d20ce3b4fbe9d59bf726ebd00821ee2738f2cd92b31023dda26de426bb76d623fb6ae5643284c9c1891917cdf129562d1ad03fc8c9c9013278307f0bf9e13aaf31cdf02c16798c150aa3f5bf9f840b3872e05405f4ded212dd4d03517c4fb469ec26c0ec1e948410e6baf6932b2f793630a82b6006e9cb46dbb1fe2afb319457897ad92e40096c86ab14317d53afd5be8ed08a9de2c7be763a54f005ecdd848a80a3e8f16f6af3db8403b1e2be26c1b7c396b31b7c0ad970375dcd7be657db5448df5a6a8f2d17bf634339adae7048dd6e436c2148cae13fb85c32bc763c681c6a5d0d994c1443107f60592062607f74e206fd2033d6962c136298badf75a5d146a6baf6f575cf47e53d31951474e78498827fdcbc80908d49b5e714bea", 0x1000}], 0x7, &(0x7f0000005340)=[{0x50, 0x3d, 0x9, "02af30d07394917948fb7e6c25d29cf9cfe52725d27827f8f1a89ebad5ea328ec0324dd8f2697a8b9b8dd0e4e4ddcfff6e7c25e1b322d78517b1"}, {0x10, 0x3a, 0x44c3}, {0x20, 0x109, 0x0, "59fd4eadcaaba0ac7db0"}, {0xe8, 0x6, 0x75, "c3f6173b47a5d1b33dd60e97dff5de522c5d78e6fc16ca322968af96356ce12d8f536e81f128d58917917d88de45d9e7c996bb2b419a5fc5995977da1e8b95df67b931bd65cc1dfde24627ab32b1f080b0dec849e391862540ab1214f181eb029eb1594b922c75d7f2b33b512ef7e068be13d6778b2915f19e541de2e9af90eed940801cec6f3605b232f3350c038e12fa98a72172493b1c5ee1412de3ae8fe50875b4258cc155b9a8a16247f40ec7e6954a67112892ebb5aca2a6dc04cc94ac8dd867f6c32649866cd1bcdb8f096500d2b3c91c58ac"}, {0x110, 0x13e, 0x66, "ec25a499ec3138ac7923d3ecdf060a6951b914d84895d360610feb501e040583ebb0d884abd03a191996f54deee1ca3406dec67d4b6ee04644c750e1c358be20c508fd1087727a6a9187240562b0f9617a41f82d9ee2018218aea18b8ea57171f884f8ff69fdc361166468b12e48e13e25bb50eba3f5efa00a9729ddd31aa88d7f2c065ddb7f891f87f10c6c17d10e5c3ab6f179b71f1ac2b2c24451330a4877217f755d0ca98114a5df07cc7c5c5add4afef73277bcf6ac98931de642fcf308f8a5139d0821eaea6ff2da90ef9d1e036f9aded6dc6a19be1665d3a39edd25f6fa8a11c85b08a92299770e87b92ec5000740e6233370b0d013"}], 0x278}}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f00000055c0)="86fa55ac620ef8dc11180c7cf2f841d623e31fb364cc39092b16f4af6e79b0eaef4720b983556d76878239950201a8cb35c45c5b55107d0f95838e7dd58693928d07909bd1c9cf7462862dd2aadf120588cb66b47bc105e65ddd307909e3f7", 0x5f}, {&(0x7f0000005640)="8e8e48623bd602ad7f846482a6e1b917ca3835d67794a256f5b6940ea72fde54f0ed7953528c240cebc4b931419b99b555b61dee5808676560d8d502d2fc50f69a7c8ad22ff9394e48a1ab0a64c8ae443e7c57a33455b3c5965fb7ab45", 0x5d}, {&(0x7f00000056c0)="d12438de89d0e72d8495bc989b4885346d7c0550437319e24f5a98a3c615aa2d858b7c2afa4c026ea654ace41ef91166318fc3fa4f3db6262889081f60503849425c4505749e937ea2b8d9b5c01ceb48500f55047140d01fe0f2123c6053ffb6cfd4600672160ef8aaa03c47e1a6ae", 0x6f}], 0x3, &(0x7f0000005780)=[{0xd8, 0x115, 0xf5, "23e2e5e09c356dfc50ec7b9ef6c8e7ba4c409ab96c87076f59e7877d75c62d0bf2ae70ffa0acfab26080b11d580fed6182387267d6dd369b371298d0a2698729cc6aef4ee4061090ae384c42a575d8db35bc1a6d39e83499d0ec5dcd8811f06161a2b3653d9069c399ef8a663b86fc337792efc71a6cd4b212e7efd330517cd6c0323c3ee55566956c182e478e008c83ccf8bfbdc72dce29db7f576268d64128c7b23bca5885da63fa0befbc716ab2224f601efe439b44bcffc5b2f787b72d961b90dc8e"}, {0x78, 0x10d, 0x6, "793e9a364175d302fb2137279c89fad5a8c914915bee1877ef5cb0c2fa70e2b05b63c29994a5b1ca20312c73cb4e3e1a6cd8a1382658022dfe33e37da070f3967bcbcc64c909130de53e0f23bdbbaaed276db5a1edfdc86563198865647975b79c51ef11"}], 0x150}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x3, @broadcast, 'veth0\x00'}}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000005980)="be1e70a89bd14b35bdee29c6455e6115a5143cb621c9380866e3c658ec37085c9620febe07ad9a17792dc7562f274277c6a0c968934933b77a910520372a5642d75f916b5455d63235ee8b6b71145dea09eb61ce", 0x54}, {&(0x7f0000005a00)="2f6ad7bce538111abaf336c6441094aa72dade1c6859b9b18d42c95be3c5bf44670219e9dca8d172957d0a47675e02ec7fdbda5a0c", 0x35}, {&(0x7f0000005a40)="c22f2979f5e59f4b0bb6ad6c5a79545dd2e34fbbbd5922951e2efe820d603f5cea083eff1d9314a8c50690472510cfab17239fd2c877335d137e3ed2c7ea53516bb4590b07a88f53e6b3150fc00e0e88ac79bdb2db97706b0913b506b1430139a63438685776b6d50a9c07bee6c2db3ef0c41d72f46c6778afa8f23849164acd8d5a4f07aa10519d10599fd309627acb5d659290dbace9b0f354a67d80c5743e78b67ea77b34cddba509289dc7f7db21f5d74751e6c1a3379439b2036cf71561f17aeaf8620ebedd00fe9fded94f77", 0xcf}, {&(0x7f0000005b40)="4237a474382e106427f22a1f2045b38bdf9394cc22840cd47c9182a6e92274273253c21f4bbb78de9509b1f715a625a765fa1b97af7ec3400e1698f28998652f4758c183e52ccfd7ae6c2a21a72286ae62a61e262f63bde5e0394d66e61ac0e5132ebc8efdc6cb1566af4568ac146817e952ca502e60f42f0e1a616357cfb54e4a87000e0d099281e9568594110aa9e3a0593cd66d19341ea4", 0x99}, {&(0x7f0000005c00)="baf19556f733d93a271239cc359c63978dfc6f1c38e8c03387d45051e119914c44480171d8f0779da6cc69dcbd68dd1d70600a6d89504b869a101ea9f5947b482ad857011be221f1eb6a2c951b8a7293d19247bd2b76717dc99e143cdca4f9283b691f10eb9293335af39aee27652337b08dcb03d5f9596dad4094f32b80de61287ddcd4899e9a426639fe399bd3c0a9e960e815f19ae70c52023509e4b540db4d587d8439d14e706de2b4b1cb7988ad4f73a25090161b16b91497a79394a53b3c6115bc74a7b7b2d0", 0xc9}, {&(0x7f0000005d00)="0149920617735c8940f7f37bd365c9e4ff435817db4191735f50b1cc3dae3bce891b4e93331affdfc8406ca05918bf3fed44d0d9f2e4edf99f5db35e6b8b4733a0b2723325a4fad45615c6eee2ed18ca145bac3343a51f0fef0160f4919a538e24a803e49daffd5b7cdf9806f18c807fec7e77eba51cd9c71f65e7bcf1a324d4afa6d77d81d00d90697359d7c7f5063453024d4dd2c157642f20e3", 0x9b}, {&(0x7f0000005dc0)="46077525ba43f6c9c46f1795a2e5d16b4d39c231c89e030ef25d93b1a5421da0953a71ab45539fa0335a7b04d2681d0c4326d763ca9ccbde372f67d85b8a44e63be80d50ac553c3fd3677c9be00d4d6ee05490a5c8ffd33d0ce488348b5344c979bf99bdb4c681f0ecf4500973d937dd76bb2d83ef7b298b9b", 0x79}], 0x7, &(0x7f0000005ec0)=[{0x10, 0x114, 0x8001}, {0xf8, 0x5cd64cf760669cc3, 0x800, "210ed72c9849473789c451cd29ef6eac186577fb7892509fbd83e2c22970276ced18584ee58a0e0212a4c4b5ae037f7959c35947abbd0862b9518f5485ca62a9850c5ab353fe48e27deda610830d69d6711388f54fff7a215b3b54d526c1c8e5a370916e162704c443ad80e900c23cd0b79adb4a41de904df0536aae45ca27200671fe8bf73a9c5f8e3348b23b470ba19f4e38fe0d7b7caddf373f533c4a8aceedf4702bf7a14f3d9cf5bdd349a25fb049f79b2f129b63a6d95525295823178d0779e8bf5c4fbef910cf3a00e85c07bab3dc798d9e41e2dde2a23894d9bda43f781edc43"}, {0xa0, 0x105, 0x40, "ee2dd8dc11a08c29c40f6a416c5528142e8c88c63a8521c8bceb5543ffb2bac26dcf5d4acee9da5d52a07d6565d083035153a2d9103507f7576f548500c57170fef42fccaa6fca05f58d772a7e9302c2d1709f9ad91f1c5913868e3d8f54537df8193f75b233c7884e1e47bfcfc3fbada64a056ce3489fd7d4baa6df1c59627a57d7963668ea7d1a8a31906e02ca"}, {0xa8, 0x112, 0x2, "ade4e50501d4eed023ea0fae8953b77bf89524d532ba3489188bf355d7d49ae1959b29e37710f931a66a754138880bc39674bcb3da7ef661fe97c95d8677cb838ab24b9f6f60983d474a6fb183cb66549cf6a0a64e211f388252e0877ffbd4938324c0d929142f5085cbbe7d77b73f7a655368e7565bee76588bf9b614410864854e53517c556278c184c9c799a202bda9"}, {0x68, 0x10b, 0x101, "b3720fe9a6e547df246a40b717d492c50586106b30a631fbbbf3f55f7a1dbb67394ccd1d33c4c26edd81b4fd3f2ea083d08c974075d18e2cd938748bcf45d8bef96b504d9feb70af3e6f14131d467efe33e85c5bb67cd0"}, {0x50, 0x1e, 0x6, "72b387e23c396bcf637e74dd7e9e63acd13534699ea5a7e39c90a59ca181435451f5f61cea7050a540f59da237d88c683d4c4f71175ebd76164eadfcd9e1"}, {0xc8, 0x14, 0x7, "cbc378fc23b4e21c44f5f7b51fc7f5dc702326b28ab50c376df4ba0b5177e8e1baaa77ac7494e269f2a9442516589c128ce4ca21202b0df63c05fa40dc399054b1223bbe058464e25e945b32563b98705c4643dc490e4ae12238572e5cf36310dd8774301796f2b04085056825a499498295b8d141e79ca543e91a13c19957bdf1cb0550413242c167b5f656b4052b3fccb03c7d96c1b4c544c27cd0eb8b7ce21d357866d2734316a1fa700ba85acbc70d717ac8"}, {0x88, 0x110, 0x2, "5a8352b05d756ade4a37efa20d648cf429cab0c3ca8daa08bb4c75386e4077e557d781028560884caecb98da5a4a5c08a871a0bcfb62665868a389bef55fbaa29b228aacb9db9622e2dc4a7a1028c39ddc3f4ff4a7ef0c1de68886ba372f3e2b8a8b502dd7013180170ace375141831cfa7293"}, {0x100, 0x115, 0x7fff, "7dac38092d8a18423f6490481d8d793cb1cd147871fc64d234d4e9ae1c11d3ea96b6fdc4c52e99373784a36d1bee6c706458e85f30d8f1867a0fb4340a4d9f0b27614212bc59dc2583462812e68471c634a84164d712e575ab72fad93c48bc5c3a16976f73e2383989b71440617de30a37599916e1f8e74454274156cf9af3db35f20c3cdfffa6a2f8976c46d3f5b24a01c4a7233e210cb4daf35e5435200c98745185802d931ad070584efc9bb42eb6647515266841f6e1cd7d09a1ca6398bd108f8baeda27cac5e4cd45222821a130efd704c130539d7727c77f7dcbbe657ab994f929c0444c3002ba88c05e47a06c"}], 0x558}}, {{&(0x7f0000006440)=@ll={0x11, 0x6, 0x0, 0x1, 0x81, 0x6, @local}, 0x80, &(0x7f0000006a40)=[{&(0x7f00000064c0)="ac81718ac947e71b72341cb109787106fdeb4b980b9075e56598d8f06e2018b55119dfa5d2319adf722621eb78b84f446ff298282740e358451293d6dd4d8669e4015e782f64f7a73aee26dcdd79083379832d0c2661ab578859639f951769d98ed18f356f9ef8f4ab72ddb3502b46836bd94c9790d9d76d4736218a120f7e360468c75b38c098747e75a2f5", 0x8c}, {&(0x7f0000006580)="3e9edb5660e6b74ba2bfb672298e623ff69c5a144b8cd411c3b41e36bdaa29dc85359c10786ba0ba3247934b9fce146a25e31e0312d50cf389d89dfc28a3e6eda65b5b621579b8158a732ab41fa5be7cc25eb7228a2f4a59a48344bcf34def54eb4f2fc02e9fbe86c462fcfe280f739ac54ac6ed3efa9f9500b97a8d6356fd0ce830364066e984e9823efde0d6", 0x8d}, {&(0x7f0000006640)="54e248665cc1ce2e5224b58c7fe07b3dff3ed8d317d5115c256bc353f8eca938674e3e29e969aa5ddecbd917ddbee95a59939863b94020e1a3df431bb0f520b86dc3c1a0ba866213786c01cb6004684c3dc33ceda0085935aef26f370c4c8863cb27d8f53b03003e2f55a667f97c998a8deb397314fb43e7fab79131fbd2d6c4d466b1c1dbd2adebf3e3238d850e030db1f175975c08e90e275a", 0x9a}, {&(0x7f0000006700)="f5e4b3939975fd8e5c75d713cc5d7443861368926739ee9e", 0x18}, {&(0x7f0000006740)="e696157cfccf45de8513a12e57c8c4b9d9319768d62c5a986f20b3ec4296c7beaa290472500d1e5fac394cca755d5623fbd988643f1ff14017cfeb9151d7b8af25", 0x41}, {&(0x7f00000067c0)="b52e1be2da2d525e62071973c187002d347304c661d45f1325c13b87c24b4e76d1cc107df887ff361ab7419cd6210e723e450428677b33ee6b76c2f236b033cdae913e7607da04222d00283c54d8fcf524286726", 0x54}, {&(0x7f0000006840)="5aac4afc48781044f239801d1e9d57", 0xf}, {&(0x7f0000006880)="d1a238a7d5135bb0c49cccd2bdbf001c7be7588341e87d444703026e8f49b1a279f2ea22e9dd6e0e74da093d5893bee83c7e04734d47c3239d78dd9b8280aa07fb01deb99a38d7e2443b681e6ce60d8d6833e31f4aede8875204496cfb2e95265e9f26c05b380a2d3d5d847c606902140f1366798fa4c1f6386b5135c934ff7917a88b73c960c11d7aeaa3944849c5361617896a8e2527335389172336d3fe675dcb4287c28890f79b1bc23d358f68d81a1ca4e7eb3c1fd3f2efc72518f6ea43", 0xc0}, {&(0x7f0000006940)="0a070841c3c120fccd28482ed6d93d06ffd31f3681b1e0ca732e6871e90a0cc3abb03e9624ac9e26a73d1b6a0cb1eaab7b52b8d382c3c2bb08febf6b1b7a784f6d2e9dc3d2b4be1c5d752abab7d12ec8a36b280c4759fd031b10e6a96ac7d8c5245c59c53c2ea15c9506f302f2c35a96c965048e632f2c47cdfff94e444a50f6717418a8c78be9b6a0d87021b36030afd129d245236aa7068ff66221108da66338c6b1e76420dc9234a56e4390694699dd518c33dd030132eb2d2244d5c2fa074a9c1d2acffa451d42aa6190076325d0e6975b78b6012d7d3d0a46d821acee", 0xdf}], 0x9}}, {{&(0x7f0000006b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x3, 0x2, 0x3}}, 0x80, &(0x7f0000007e80)=[{&(0x7f0000006b80)="f0d2839b80476da5f78e59c08c547be684472707cade645176a138389548e2e5bcbfec771ec1badef953766214be1d2b38a57da8b6bf946ecb2b496988a3b9319f57d323ffe3745440c84f256a638fa8210b87ba42bbe36652dc47ba8f367d121f95e23ea483891191a435fc84d42afa8c3f16ae6ce8a88db4608705fd8067995f8023d6fbe7f32e73b6d733570a553b15b47bc8311d468775d1255d6350b4c8b2c5a8b2fad233adb079107894ddcdf98e000012a7a48e51f93e09bede2a8dc8436b2a4a3c6165be806162254d32f3ce3484a399bc2da3adead0f1c17bee", 0xde}, {&(0x7f0000006c80)="2693066200474ca223d68d280e2ab04f6cb9b9dce7afac91d5d024304ebb706b3a167201c28e11fd6f274b6976b173e1386b9a8ebe8305851dba0938", 0x3c}, {&(0x7f0000006cc0)="88ffbfb145f9ed535e76c2ef03a0cf9c0c26247e461030362aa9559c0631a8d77a809e32fd732e08177d9847daa2bd89e603c43e62b5167e1e9ceeaafad4eea81be17b", 0x43}, {&(0x7f0000006d40)="4e1d34b19af597dc2fa283edaf448e49850e91487b0c2dc8cf794f586f63616f65d1844a08584065f38e46c0d306fcb852fd774339700552391fa09d7e46938f9bcf3352a8f5458bc6c97039b9aa11d431392e9f2576cd03645c6a112bb81b6cc5cc4672e6ed2867ef386fd3127fceda612e64959bb77a550a0a7d837b59b666ac3deebc85243ba454673df6b2", 0x8d}, {&(0x7f0000006e00)="4c445c6b26d2c6b8d59c763382530a7af5d291ca361ba30537917f6fc724e3763b2fb417d26fb6b8121654ffc4c23fd1765e557bfd251d76b44af6ef81e45e92cf19c89214691ebedc35455b85", 0x4d}, {&(0x7f0000006e80)="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", 0x1000}], 0x6, &(0x7f0000007f00)=[{0x40, 0x10f, 0x9, "34940d6778c764438abe138133f191eaa0c0e20d60df18e2f58162a3dfad21e5c8db957ce9004e3c92fe8091238f"}, {0xa0, 0x114, 0x7, "e1c71ab5bf56a574442e7545add514caf5f9f44202820f6f943ed5c8a80ad4d4f046132d1aaee21125da1f53aafc73320390326e6133b5b940890d4f9bec3cdbc4b71fe7fc0d00a42e230622083ef819fc7dad72bb186163ed1f4f1b65ba22fc808f14fe1265a8c41e473af7fd0744439daa2383bb1bb4bd0b98fc3e68071e8cf1f8ebb176e02d71b2faef3614fb7222"}], 0xe0}}], 0x9, 0x4000000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000000, 0x13, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x515) close(r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x8, 0x10) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) read(r2, &(0x7f0000000080)=""/37, 0x25) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:40 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xffffff7f, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:40 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xe00000000000000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:40 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xa, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:40 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x635d1d, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xaf00, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:40 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xa, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:40 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0xa, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xc601, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:40 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:43 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000140)) 02:07:43 executing program 2 (fault-call:6 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xe704, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:43 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x24d3e27d6c020000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:43 executing program 1 (fault-call:7 fault-nth:0): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:43 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x64fb3c, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xff8f, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x2f000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2711.416230][T24149] FAULT_INJECTION: forcing a failure. [ 2711.416230][T24149] name failslab, interval 1, probability 0, space 0, times 0 [ 2711.428971][T24149] CPU: 1 PID: 24149 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2711.438860][T24149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2711.448914][T24149] Call Trace: [ 2711.452190][T24149] dump_stack_lvl+0xb7/0x103 [ 2711.456785][T24149] dump_stack+0x11/0x1a [ 2711.460943][T24149] should_fail+0x23c/0x250 02:07:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x40000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2711.465358][T24149] __should_failslab+0x81/0x90 [ 2711.470123][T24149] ? alloc_pipe_info+0xac/0x350 [ 2711.474973][T24149] should_failslab+0x5/0x20 [ 2711.479616][T24149] kmem_cache_alloc_trace+0x49/0x310 [ 2711.485024][T24149] ? cgroup_rstat_updated+0x34/0x100 [ 2711.490315][T24149] alloc_pipe_info+0xac/0x350 [ 2711.494997][T24149] splice_direct_to_actor+0x5f7/0x650 [ 2711.500377][T24149] ? security_file_permission+0x7c/0xa0 [ 2711.505968][T24149] ? do_splice_direct+0x170/0x170 [ 2711.510986][T24149] ? security_file_permission+0x87/0xa0 [ 2711.516557][T24149] do_splice_direct+0xf5/0x170 [ 2711.521332][T24149] do_sendfile+0x618/0xb90 [ 2711.525747][T24149] __x64_sys_sendfile64+0xf2/0x130 [ 2711.530863][T24149] do_syscall_64+0x3d/0x90 [ 2711.535277][T24149] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2711.541323][T24149] RIP: 0033:0x4665f9 [ 2711.545222][T24149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:07:43 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) [ 2711.565233][T24149] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2711.573685][T24149] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2711.581647][T24149] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2711.589713][T24149] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2711.597853][T24149] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 2711.605993][T24149] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:07:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x80000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:43 executing program 2 (fault-call:6 fault-nth:1): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x400000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:43 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x4, 0x2e0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000280)={0x5, 0x1d, 0xe6, 0x200, "db39c51c41223f2968c6d75a025b320efe8aebbf89c0fd8a90c59e7b568aa567"}) timer_settime(r3, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000180)=r2, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x600000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:43 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xa4a4d3866c020000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2711.782188][T24186] FAULT_INJECTION: forcing a failure. [ 2711.782188][T24186] name failslab, interval 1, probability 0, space 0, times 0 [ 2711.794980][T24186] CPU: 0 PID: 24186 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2711.804774][T24186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2711.814838][T24186] Call Trace: [ 2711.818172][T24186] dump_stack_lvl+0xb7/0x103 [ 2711.822831][T24186] dump_stack+0x11/0x1a [ 2711.826995][T24186] should_fail+0x23c/0x250 [ 2711.831400][T24186] ? kcalloc+0x32/0x40 [ 2711.835554][T24186] __should_failslab+0x81/0x90 [ 2711.840349][T24186] should_failslab+0x5/0x20 [ 2711.844978][T24186] __kmalloc+0x66/0x340 [ 2711.849131][T24186] ? kmem_cache_alloc_trace+0x20f/0x310 [ 2711.854668][T24186] ? alloc_pipe_info+0xac/0x350 [ 2711.859516][T24186] kcalloc+0x32/0x40 [ 2711.863484][T24186] alloc_pipe_info+0x1be/0x350 [ 2711.868254][T24186] splice_direct_to_actor+0x5f7/0x650 [ 2711.873626][T24186] ? security_file_permission+0x7c/0xa0 [ 2711.879170][T24186] ? do_splice_direct+0x170/0x170 [ 2711.884265][T24186] ? security_file_permission+0x87/0xa0 [ 2711.889838][T24186] do_splice_direct+0xf5/0x170 [ 2711.894601][T24186] do_sendfile+0x618/0xb90 [ 2711.899046][T24186] __x64_sys_sendfile64+0xf2/0x130 [ 2711.904157][T24186] do_syscall_64+0x3d/0x90 [ 2711.908580][T24186] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2711.914530][T24186] RIP: 0033:0x4665f9 [ 2711.918489][T24186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2711.938363][T24186] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2711.946862][T24186] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2711.954854][T24186] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2711.962895][T24186] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2711.970945][T24186] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 2711.978994][T24186] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 [ 2712.184511][T24133] FAULT_INJECTION: forcing a failure. [ 2712.184511][T24133] name fail_futex, interval 1, probability 0, space 0, times 1 [ 2712.197305][T24133] CPU: 0 PID: 24133 Comm: syz-executor.1 Tainted: G W 5.14.0-syzkaller #0 [ 2712.207407][T24133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2712.217566][T24133] Call Trace: [ 2712.220926][T24133] dump_stack_lvl+0xb7/0x103 [ 2712.225695][T24133] dump_stack+0x11/0x1a [ 2712.229851][T24133] should_fail+0x23c/0x250 [ 2712.234357][T24133] get_futex_key+0xdb/0x830 [ 2712.238980][T24133] ? __perf_event_task_sched_in+0x7e7/0x850 [ 2712.244965][T24133] futex_wake+0x89/0x3f0 [ 2712.249264][T24133] do_futex+0x987/0x1fd0 [ 2712.253572][T24133] ? __schedule+0x42c/0x670 [ 2712.258089][T24133] ? schedule+0x67/0x90 [ 2712.262383][T24133] ? schedule_hrtimeout_range_clock+0x115/0x1c0 [ 2712.268799][T24133] ? trace_event_reg+0x98/0x160 [ 2712.273636][T24133] ? poll_freewait+0x151/0x160 [ 2712.278381][T24133] ? do_sys_poll+0xb8e/0xc00 [ 2712.282949][T24133] ? rb_erase+0x500/0x750 [ 2712.287702][T24133] ? timerqueue_del+0x84/0xa0 [ 2712.292434][T24133] ? futex_cleanup+0x7e/0xa90 [ 2712.297091][T24133] ? sigqueue_free+0x138/0x150 [ 2712.301850][T24133] ? uprobe_free_utask+0x1be/0x2a0 [ 2712.306953][T24133] mm_release+0x116/0x200 [ 2712.311506][T24133] exit_mm_release+0x21/0x30 [ 2712.316074][T24133] exit_mm+0x4b/0x3f0 [ 2712.320317][T24133] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 2712.326190][T24133] ? taskstats_exit+0x373/0x6d0 [ 2712.331021][T24133] do_exit+0x3ef/0x14a0 [ 2712.335264][T24133] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 2712.341219][T24133] do_group_exit+0xce/0x1a0 [ 2712.345804][T24133] get_signal+0xfa3/0x15e0 [ 2712.350470][T24133] ? proc_fail_nth_read+0x140/0x140 [ 2712.355654][T24133] ? vfs_write+0x5e0/0x8c0 [ 2712.360325][T24133] arch_do_signal_or_restart+0x2a/0x220 [ 2712.365994][T24133] ? perf_trace_sys_exit+0x4d/0x160 [ 2712.371315][T24133] ? fpregs_restore_userregs+0x10c/0x1c0 [ 2712.377288][T24133] exit_to_user_mode_prepare+0x109/0x190 [ 2712.382984][T24133] syscall_exit_to_user_mode+0x20/0x40 [ 2712.388436][T24133] do_syscall_64+0x49/0x90 [ 2712.392829][T24133] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2712.398797][T24133] RIP: 0033:0x4665f9 [ 2712.402664][T24133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2712.422366][T24133] RSP: 002b:00007ff1245d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000010f 02:07:44 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:07:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x70121d, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:44 executing program 2 (fault-call:6 fault-nth:2): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x660c3b, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2712.430835][T24133] RAX: fffffffffffffdfe RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2712.438839][T24133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2712.446872][T24133] RBP: 00007ff1245d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2712.454826][T24133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2712.462884][T24133] R13: 00007ffc060b2bcf R14: 00007ff1245d5300 R15: 0000000000022000 02:07:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x80ffff, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2712.557042][T24206] FAULT_INJECTION: forcing a failure. [ 2712.557042][T24206] name failslab, interval 1, probability 0, space 0, times 0 [ 2712.569777][T24206] CPU: 1 PID: 24206 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2712.579614][T24206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2712.589784][T24206] Call Trace: [ 2712.593058][T24206] dump_stack_lvl+0xb7/0x103 [ 2712.597658][T24206] dump_stack+0x11/0x1a [ 2712.601829][T24206] should_fail+0x23c/0x250 [ 2712.606249][T24206] ? kmalloc_array+0x2d/0x40 [ 2712.610826][T24206] __should_failslab+0x81/0x90 [ 2712.615708][T24206] should_failslab+0x5/0x20 [ 2712.620272][T24206] __kmalloc+0x66/0x340 [ 2712.624445][T24206] ? ktime_get_coarse_real_ts64+0x10d/0x120 [ 2712.630344][T24206] ? splice_from_pipe+0xc0/0xc0 [ 2712.635183][T24206] kmalloc_array+0x2d/0x40 [ 2712.639692][T24206] iter_file_splice_write+0xc6/0x750 [ 2712.644962][T24206] ? atime_needs_update+0x2ba/0x390 [ 2712.650287][T24206] ? touch_atime+0xcf/0x240 [ 2712.654784][T24206] ? generic_file_splice_read+0x286/0x310 [ 2712.660580][T24206] ? splice_from_pipe+0xc0/0xc0 [ 2712.666285][T24206] direct_splice_actor+0x80/0xa0 [ 2712.671284][T24206] splice_direct_to_actor+0x345/0x650 [ 2712.676655][T24206] ? do_splice_direct+0x170/0x170 [ 2712.681739][T24206] do_splice_direct+0xf5/0x170 [ 2712.686603][T24206] do_sendfile+0x618/0xb90 [ 2712.691014][T24206] __x64_sys_sendfile64+0xf2/0x130 [ 2712.696139][T24206] do_syscall_64+0x3d/0x90 [ 2712.700603][T24206] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2712.706561][T24206] RIP: 0033:0x4665f9 [ 2712.710469][T24206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2712.730428][T24206] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2712.738841][T24206] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2712.746806][T24206] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 02:07:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xc0ffff, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xe602b38c6c020000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2712.754869][T24206] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2712.762952][T24206] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 2712.771284][T24206] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:07:44 executing program 2 (fault-call:6 fault-nth:3): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xd0ff20, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2712.942344][T24227] FAULT_INJECTION: forcing a failure. [ 2712.942344][T24227] name failslab, interval 1, probability 0, space 0, times 0 [ 2712.954971][T24227] CPU: 1 PID: 24227 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2712.964859][T24227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2712.974908][T24227] Call Trace: [ 2712.978353][T24227] dump_stack_lvl+0xb7/0x103 [ 2712.982954][T24227] dump_stack+0x11/0x1a [ 2712.987163][T24227] should_fail+0x23c/0x250 [ 2712.991585][T24227] __should_failslab+0x81/0x90 [ 2712.996367][T24227] ? __iomap_dio_rw+0x12a/0xfa0 [ 2713.001374][T24227] should_failslab+0x5/0x20 [ 2713.005893][T24227] kmem_cache_alloc_trace+0x49/0x310 [ 2713.011173][T24227] __iomap_dio_rw+0x12a/0xfa0 [ 2713.015844][T24227] ? ext4_dirty_inode+0x58/0xa0 [ 2713.020690][T24227] ? __list_del_entry_valid+0x54/0xc0 [ 2713.026177][T24227] ? __list_add_valid+0x28/0x90 [ 2713.031021][T24227] iomap_dio_rw+0x30/0x70 [ 2713.035359][T24227] ? ext4_file_write_iter+0x471/0x11a0 [ 2713.040811][T24227] ext4_file_write_iter+0xa5e/0x11a0 [ 2713.046112][T24227] ? ext4_file_write_iter+0x471/0x11a0 [ 2713.051566][T24227] ? avc_policy_seqno+0x22/0x30 [ 2713.056423][T24227] do_iter_readv_writev+0x2cd/0x370 [ 2713.061634][T24227] do_iter_write+0x192/0x5c0 [ 2713.066399][T24227] ? splice_from_pipe_next+0x34f/0x3b0 [ 2713.072024][T24227] ? kmalloc_array+0x2d/0x40 [ 2713.076597][T24227] vfs_iter_write+0x4c/0x70 [ 2713.081153][T24227] iter_file_splice_write+0x40a/0x750 [ 2713.086520][T24227] ? splice_from_pipe+0xc0/0xc0 [ 2713.091524][T24227] direct_splice_actor+0x80/0xa0 [ 2713.096537][T24227] splice_direct_to_actor+0x345/0x650 [ 2713.101922][T24227] ? do_splice_direct+0x170/0x170 [ 2713.107047][T24227] do_splice_direct+0xf5/0x170 [ 2713.112115][T24227] do_sendfile+0x618/0xb90 [ 2713.116713][T24227] __x64_sys_sendfile64+0xf2/0x130 [ 2713.122002][T24227] do_syscall_64+0x3d/0x90 [ 2713.126528][T24227] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2713.132407][T24227] RIP: 0033:0x4665f9 [ 2713.136294][T24227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2713.155988][T24227] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2713.164529][T24227] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2713.172485][T24227] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2713.180736][T24227] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2713.188897][T24227] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 2713.197246][T24227] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:07:46 executing program 2 (fault-call:6 fault-nth:4): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xf00200, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:46 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x67b759, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x7, 0x0, 0x0, 0x0) 02:07:46 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xfeffffff00000000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:46 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141000, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00000001c0)={{}, {r4, r5+10000000}}, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0xe, 0x0, 0x0, 0x0) 02:07:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x1000000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x1e, 0x0, 0x0, 0x0) 02:07:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x700, 0x0, 0x0, 0x0) [ 2714.845026][T24269] FAULT_INJECTION: forcing a failure. [ 2714.845026][T24269] name failslab, interval 1, probability 0, space 0, times 0 [ 2714.857883][T24269] CPU: 1 PID: 24269 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2714.867682][T24269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2714.877733][T24269] Call Trace: [ 2714.881002][T24269] dump_stack_lvl+0xb7/0x103 [ 2714.885709][T24269] dump_stack+0x11/0x1a [ 2714.889958][T24269] should_fail+0x23c/0x250 [ 2714.894376][T24269] ? kcalloc+0x32/0x50 [ 2714.898453][T24269] __should_failslab+0x81/0x90 [ 2714.903233][T24269] should_failslab+0x5/0x20 [ 2714.907733][T24269] __kmalloc+0x66/0x340 [ 2714.911880][T24269] kcalloc+0x32/0x50 [ 2714.915781][T24269] ext4_find_extent+0x21c/0x7f0 [ 2714.920648][T24269] ext4_ext_map_blocks+0xd9/0x1f10 [ 2714.925796][T24269] ? __find_get_block+0x6fd/0x900 [ 2714.930815][T24269] ? __down_read_common+0x16d/0x530 [ 2714.936071][T24269] ? percpu_counter_add_batch+0x69/0xd0 [ 2714.941603][T24269] ? ext4_es_lookup_extent+0x206/0x490 [ 2714.947057][T24269] ext4_map_blocks+0x1be/0xef0 [ 2714.951816][T24269] ? ext4_iomap_begin+0x3f7/0x620 [ 2714.956922][T24269] ? __cond_resched+0x11/0x40 [ 2714.961712][T24269] ext4_iomap_begin+0x4a0/0x620 [ 2714.966593][T24269] ? should_fail+0xd6/0x250 [ 2714.971091][T24269] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2714.976292][T24269] iomap_iter+0x39c/0x470 [ 2714.980669][T24269] ? __iomap_dio_rw+0x12a/0xfa0 [ 2714.985765][T24269] __iomap_dio_rw+0x63c/0xfa0 [ 2714.990432][T24269] ? __vfs_getxattr+0x264/0x280 [ 2714.995270][T24269] iomap_dio_rw+0x30/0x70 [ 2714.999849][T24269] ? ext4_file_write_iter+0x471/0x11a0 [ 2715.005314][T24269] ext4_file_write_iter+0xa5e/0x11a0 [ 2715.010596][T24269] ? ext4_file_write_iter+0x471/0x11a0 [ 2715.016099][T24269] ? avc_policy_seqno+0x22/0x30 [ 2715.021036][T24269] do_iter_readv_writev+0x2cd/0x370 [ 2715.026243][T24269] do_iter_write+0x192/0x5c0 [ 2715.030833][T24269] ? splice_from_pipe_next+0x34f/0x3b0 [ 2715.036281][T24269] ? kmalloc_array+0x2d/0x40 [ 2715.040859][T24269] vfs_iter_write+0x4c/0x70 02:07:47 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f00000000c0)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x2000000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2715.045461][T24269] iter_file_splice_write+0x40a/0x750 [ 2715.050833][T24269] ? splice_from_pipe+0xc0/0xc0 [ 2715.055708][T24269] direct_splice_actor+0x80/0xa0 [ 2715.060749][T24269] splice_direct_to_actor+0x345/0x650 [ 2715.066119][T24269] ? do_splice_direct+0x170/0x170 [ 2715.071185][T24269] do_splice_direct+0xf5/0x170 [ 2715.075938][T24269] do_sendfile+0x618/0xb90 [ 2715.080491][T24269] __x64_sys_sendfile64+0xf2/0x130 [ 2715.086437][T24269] do_syscall_64+0x3d/0x90 [ 2715.090939][T24269] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2715.096832][T24269] RIP: 0033:0x4665f9 [ 2715.100715][T24269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2715.120917][T24269] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2715.129382][T24269] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2715.137467][T24269] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2715.145420][T24269] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2715.153459][T24269] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 2715.161505][T24269] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:07:47 executing program 2 (fault-call:6 fault-nth:5): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0xe00, 0x0, 0x0, 0x0) [ 2715.316473][T24303] FAULT_INJECTION: forcing a failure. [ 2715.316473][T24303] name failslab, interval 1, probability 0, space 0, times 0 [ 2715.329959][T24303] CPU: 0 PID: 24303 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2715.341343][T24303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2715.351486][T24303] Call Trace: [ 2715.354750][T24303] dump_stack_lvl+0xb7/0x103 [ 2715.359718][T24303] dump_stack+0x11/0x1a [ 2715.363867][T24303] should_fail+0x23c/0x250 [ 2715.368508][T24303] ? __es_insert_extent+0x51f/0xe70 [ 2715.373704][T24303] __should_failslab+0x81/0x90 [ 2715.378506][T24303] should_failslab+0x5/0x20 [ 2715.383005][T24303] kmem_cache_alloc+0x46/0x2e0 [ 2715.387762][T24303] __es_insert_extent+0x51f/0xe70 [ 2715.392799][T24303] ? __kmalloc+0x237/0x340 [ 2715.397216][T24303] ? kcalloc+0x32/0x50 [ 2715.401275][T24303] ext4_es_insert_extent+0x1bb/0x19d0 [ 2715.406653][T24303] ? ext4_ext_convert_to_initialized+0xf50/0xf50 [ 2715.413065][T24303] ext4_ext_map_blocks+0xf89/0x1f10 [ 2715.418250][T24303] ? __find_get_block+0x6fd/0x900 [ 2715.423366][T24303] ? __down_read_common+0x16d/0x530 [ 2715.428616][T24303] ? percpu_counter_add_batch+0x69/0xd0 [ 2715.434159][T24303] ? ext4_es_lookup_extent+0x206/0x490 [ 2715.439669][T24303] ext4_map_blocks+0x1be/0xef0 [ 2715.444412][T24303] ? ext4_iomap_begin+0x3f7/0x620 [ 2715.449537][T24303] ? __cond_resched+0x11/0x40 [ 2715.454197][T24303] ext4_iomap_begin+0x4a0/0x620 [ 2715.459116][T24303] ? should_fail+0xd6/0x250 [ 2715.463607][T24303] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2715.468805][T24303] iomap_iter+0x39c/0x470 [ 2715.473135][T24303] ? __iomap_dio_rw+0x12a/0xfa0 [ 2715.477982][T24303] __iomap_dio_rw+0x63c/0xfa0 [ 2715.482711][T24303] ? __vfs_getxattr+0x264/0x280 [ 2715.487539][T24303] iomap_dio_rw+0x30/0x70 [ 2715.491880][T24303] ? ext4_file_write_iter+0x471/0x11a0 [ 2715.497338][T24303] ext4_file_write_iter+0xa5e/0x11a0 [ 2715.502640][T24303] ? ext4_file_write_iter+0x471/0x11a0 [ 2715.508116][T24303] ? avc_policy_seqno+0x22/0x30 [ 2715.513027][T24303] do_iter_readv_writev+0x2cd/0x370 [ 2715.518224][T24303] do_iter_write+0x192/0x5c0 [ 2715.522889][T24303] ? splice_from_pipe_next+0x34f/0x3b0 [ 2715.528360][T24303] ? kmalloc_array+0x2d/0x40 [ 2715.532949][T24303] vfs_iter_write+0x4c/0x70 [ 2715.537447][T24303] iter_file_splice_write+0x40a/0x750 [ 2715.542826][T24303] ? splice_from_pipe+0xc0/0xc0 [ 2715.547655][T24303] direct_splice_actor+0x80/0xa0 [ 2715.552578][T24303] splice_direct_to_actor+0x345/0x650 [ 2715.558024][T24303] ? do_splice_direct+0x170/0x170 [ 2715.563033][T24303] do_splice_direct+0xf5/0x170 [ 2715.567789][T24303] do_sendfile+0x618/0xb90 [ 2715.572284][T24303] __x64_sys_sendfile64+0xf2/0x130 [ 2715.577416][T24303] do_syscall_64+0x3d/0x90 [ 2715.581824][T24303] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2715.587726][T24303] RIP: 0033:0x4665f9 [ 2715.591691][T24303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:07:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x2040000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x1e00, 0x0, 0x0, 0x0) 02:07:47 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xffffff7f00000000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:47 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x69dc60, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2715.611814][T24303] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2715.620426][T24303] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2715.628612][T24303] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2715.636571][T24303] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2715.644533][T24303] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 2715.652486][T24303] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:07:47 executing program 2 (fault-call:6 fault-nth:6): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:47 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x7) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = clone3(&(0x7f00000005c0)={0x2000900, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x11}, &(0x7f00000004c0)=""/254, 0xfe, &(0x7f0000000280)=""/91, &(0x7f0000000300)=[r0, r0, r0], 0x3, {r3}}, 0x58) tkill(r4, 0x6) syz_io_uring_setup(0x2597, &(0x7f0000000680)={0x0, 0x0, 0x10, 0xfffffffe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x2000, 0x0, 0x0, 0x0) 02:07:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x3000000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:47 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3ff, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="33ae96ee102721de87c0de886df5db5f4d237f77875e9fd0dd5eb3815553b1f161f2727b0d1f122923bb1cf648d745ecc42e886cfd44e9f859838318bcc636ca0815b132693e49abf11fd6622f89657467d692456861983149e0f354a71fe9c6490e4229c0396a004ebb59bb7eff2836c51685ac40fb08524341dba533f53cf58c4b8d54f0f5572fc5d303846d9df0dbc34843b0d2ccd80f3ace1373a8a7f755e4678b7fafcb0349b9fa39fe974ec166e04e8cc99ef51b8450c4b7fed41d3b0393f46576cab49acfe6a60c033b30f8674aa3582d30d74def96956b6d00544a44924e18956bec83044399a642e1c1f17d00a2181e8f", 0xf5, 0x10001}, {&(0x7f00000002c0)="abc07fd463ea9f6bfc5633b53d56fe6c40172df02e8aefeae5278133e19bbea9c7544aec19ce52d0fc7f22a24d34fe76d79cb2e90e", 0x35, 0x7f}], 0x40010, &(0x7f00000005c0)={[{@usrquota}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r3}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '\'#\\(]{$]&%:*/\xb1'}}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x62, 0x61, 0x35, 0x36, 0x50, 0x66, 0x31], 0x2d, [0x31, 0x39, 0x32, 0x36], 0x2d, [0xb, 0x61, 0x61, 0x33], 0x2d, [0x62, 0x36, 0x66, 0x65], 0x2d, [0x34, 0x38, 0x65, 0x63, 0x31, 0x34, 0x0, 0x33]}}}]}) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x200000, 0x0, 0x0, 0x0) 02:07:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x4000000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x7000000, 0x0, 0x0, 0x0) 02:07:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0xe000000, 0x0, 0x0, 0x0) [ 2715.904728][T24365] FAULT_INJECTION: forcing a failure. [ 2715.904728][T24365] name failslab, interval 1, probability 0, space 0, times 0 [ 2715.917440][T24365] CPU: 1 PID: 24365 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2715.927332][T24365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2715.937430][T24365] Call Trace: [ 2715.940803][T24365] dump_stack_lvl+0xb7/0x103 [ 2715.945399][T24365] dump_stack+0x11/0x1a [ 2715.949596][T24365] should_fail+0x23c/0x250 [ 2715.954087][T24365] ? kcalloc+0x32/0x50 [ 2715.958147][T24365] __should_failslab+0x81/0x90 [ 2715.962999][T24365] should_failslab+0x5/0x20 [ 2715.967538][T24365] __kmalloc+0x66/0x340 [ 2715.971747][T24365] ? kcalloc+0x32/0x50 [ 2715.975830][T24365] kcalloc+0x32/0x50 [ 2715.979724][T24365] ext4_find_extent+0x21c/0x7f0 [ 2715.984806][T24365] ? kfree+0xf0/0x1d0 [ 2715.988801][T24365] ext4_ext_map_blocks+0xd9/0x1f10 [ 2715.993922][T24365] ? __find_get_block+0x82c/0x900 [ 2715.998955][T24365] ? __down_write_common+0x42/0x810 [ 2716.004149][T24365] ? __down_read_common+0x16d/0x530 [ 2716.009348][T24365] ? percpu_counter_add_batch+0x69/0xd0 [ 2716.014892][T24365] ? ext4_es_lookup_extent+0x206/0x490 [ 2716.020352][T24365] ext4_map_blocks+0x70d/0xef0 [ 2716.025118][T24365] ? ext4_iomap_begin+0x3f7/0x620 [ 2716.030184][T24365] ? __cond_resched+0x11/0x40 [ 2716.034968][T24365] ext4_iomap_begin+0x4a0/0x620 [ 2716.039996][T24365] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2716.045195][T24365] iomap_iter+0x39c/0x470 [ 2716.049646][T24365] ? __iomap_dio_rw+0x12a/0xfa0 02:07:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x6000000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2716.054482][T24365] __iomap_dio_rw+0x63c/0xfa0 [ 2716.059158][T24365] ? __vfs_getxattr+0x264/0x280 [ 2716.064009][T24365] iomap_dio_rw+0x30/0x70 [ 2716.068381][T24365] ? ext4_file_write_iter+0x471/0x11a0 [ 2716.073839][T24365] ext4_file_write_iter+0xa5e/0x11a0 [ 2716.079209][T24365] ? ext4_file_write_iter+0x471/0x11a0 [ 2716.084670][T24365] ? avc_policy_seqno+0x22/0x30 [ 2716.089660][T24365] do_iter_readv_writev+0x2cd/0x370 [ 2716.094880][T24365] do_iter_write+0x192/0x5c0 [ 2716.099473][T24365] ? splice_from_pipe_next+0x34f/0x3b0 [ 2716.104970][T24365] ? kmalloc_array+0x2d/0x40 [ 2716.109548][T24365] vfs_iter_write+0x4c/0x70 [ 2716.114081][T24365] iter_file_splice_write+0x40a/0x750 [ 2716.119530][T24365] ? splice_from_pipe+0xc0/0xc0 [ 2716.124401][T24365] direct_splice_actor+0x80/0xa0 [ 2716.129406][T24365] splice_direct_to_actor+0x345/0x650 [ 2716.134824][T24365] ? do_splice_direct+0x170/0x170 [ 2716.139842][T24365] do_splice_direct+0xf5/0x170 [ 2716.144723][T24365] do_sendfile+0x618/0xb90 [ 2716.149126][T24365] __x64_sys_sendfile64+0xf2/0x130 [ 2716.154301][T24365] do_syscall_64+0x3d/0x90 [ 2716.158879][T24365] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2716.164991][T24365] RIP: 0033:0x4665f9 [ 2716.168867][T24365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2716.188472][T24365] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2716.196921][T24365] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2716.205007][T24365] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2716.213107][T24365] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2716.221111][T24365] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 2716.229174][T24365] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:07:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x6b5855, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x6040000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:48 executing program 2 (fault-call:6 fault-nth:7): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:48 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d338"], &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x1000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000001140)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) r4 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\x91\x1b\x80\x93\x81v\xc5o\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x97z\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00', 0x0) fallocate(r4, 0x0, 0x2000428, 0x1) write(r4, &(0x7f0000000140)='/', 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000180)={0x9, 0x8, '\x00', 0x1, &(0x7f00000000c0)=[0x0]}) sendfile(r4, 0xffffffffffffffff, &(0x7f0000001000), 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 02:07:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0xffffffff00000000, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x7000000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:48 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x24a}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x9208}, {0xffffffffffffffff, 0x8044}, {r2, 0x4000}, {r3, 0x1440}, {0xffffffffffffffff, 0x9}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0xa220}, {0xffffffffffffffff, 0x280}], 0xa, &(0x7f00000002c0)={r4, r5+60000000}, &(0x7f0000000300)={[0x9]}, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getsockopt$packet_buf(r6, 0x107, 0x2, &(0x7f0000000580)=""/48, &(0x7f00000005c0)=0x30) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000640)={{r7, r8+60000000}, {0x77359400}}, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb1, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0x3be}, &(0x7f00005fb000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) mq_timedsend(r6, &(0x7f0000000440)="a861d62dc4f6a364094a90f23dfc956c6616bd567ca7f646370acaf71123592f271e31ada002028515123d9dfd7d7105a5ae5ed543467a638f35327b11be1865ee937f4cffe31b88c8f8a127b9a362517946aef597e4dda25262214ea3b71af74468f674d372cf09a2f5cfbb518c4a77feaab946590eb7ef53217463806d50944f4745c6c542f32cb61033be4acf8871061bd9becfbdae6e7e9f2b441653d0d1a741544e4ac232d188c8f9e272b29a930fbb46d395b47e00b35b30c186120f211afb362369b31bca09f50a6b76", 0xcd, 0x1, &(0x7f0000000540)={r9, r10+10000000}) timer_settime(0x0, 0x1, 0x0, 0x0) [ 2716.652434][T24405] FAULT_INJECTION: forcing a failure. [ 2716.652434][T24405] name failslab, interval 1, probability 0, space 0, times 0 [ 2716.667151][T24405] CPU: 1 PID: 24405 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2716.676948][T24405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2716.686996][T24405] Call Trace: [ 2716.690265][T24405] dump_stack_lvl+0xb7/0x103 [ 2716.694850][T24405] dump_stack+0x11/0x1a [ 2716.699045][T24405] should_fail+0x23c/0x250 [ 2716.703458][T24405] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 2716.708736][T24405] __should_failslab+0x81/0x90 [ 2716.713496][T24405] should_failslab+0x5/0x20 [ 2716.718056][T24405] kmem_cache_alloc+0x46/0x2e0 [ 2716.722815][T24405] ext4_mb_new_blocks+0x2e7/0x1f90 [ 2716.727924][T24405] ? ext4_find_extent+0x6cf/0x7f0 [ 2716.733117][T24405] ? ext4_ext_search_right+0x300/0x540 [ 2716.738567][T24405] ? ext4_inode_to_goal_block+0x1bd/0x1d0 [ 2716.744283][T24405] ext4_ext_map_blocks+0x1579/0x1f10 [ 2716.749598][T24405] ? __down_write_common+0x42/0x810 [ 2716.754813][T24405] ? __down_read_common+0x16d/0x530 [ 2716.760095][T24405] ? percpu_counter_add_batch+0x69/0xd0 [ 2716.765644][T24405] ? ext4_es_lookup_extent+0x206/0x490 [ 2716.771184][T24405] ext4_map_blocks+0x70d/0xef0 [ 2716.776007][T24405] ? ext4_iomap_begin+0x3f7/0x620 [ 2716.781138][T24405] ? __cond_resched+0x11/0x40 [ 2716.785810][T24405] ext4_iomap_begin+0x4a0/0x620 [ 2716.790761][T24405] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2716.795959][T24405] iomap_iter+0x39c/0x470 02:07:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x8000000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2716.800277][T24405] ? __iomap_dio_rw+0x12a/0xfa0 [ 2716.805254][T24405] __iomap_dio_rw+0x63c/0xfa0 [ 2716.809923][T24405] iomap_dio_rw+0x30/0x70 [ 2716.814270][T24405] ? ext4_file_write_iter+0x471/0x11a0 [ 2716.819907][T24405] ext4_file_write_iter+0xa5e/0x11a0 [ 2716.825187][T24405] ? ext4_file_write_iter+0x471/0x11a0 [ 2716.830646][T24405] ? avc_policy_seqno+0x22/0x30 [ 2716.835704][T24405] do_iter_readv_writev+0x2cd/0x370 [ 2716.840904][T24405] do_iter_write+0x192/0x5c0 [ 2716.845731][T24405] ? splice_from_pipe_next+0x34f/0x3b0 02:07:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x10000000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2716.851190][T24405] ? kmalloc_array+0x2d/0x40 [ 2716.855808][T24405] vfs_iter_write+0x4c/0x70 [ 2716.860314][T24405] iter_file_splice_write+0x40a/0x750 [ 2716.865695][T24405] ? splice_from_pipe+0xc0/0xc0 [ 2716.870901][T24405] direct_splice_actor+0x80/0xa0 [ 2716.876002][T24405] splice_direct_to_actor+0x345/0x650 [ 2716.881554][T24405] ? do_splice_direct+0x170/0x170 [ 2716.886572][T24405] do_splice_direct+0xf5/0x170 [ 2716.891404][T24405] do_sendfile+0x618/0xb90 [ 2716.895830][T24405] __x64_sys_sendfile64+0xf2/0x130 [ 2716.901151][T24405] do_syscall_64+0x3d/0x90 [ 2716.906073][T24405] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2716.912125][T24405] RIP: 0033:0x4665f9 [ 2716.916013][T24405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2716.935986][T24405] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2716.945096][T24405] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 02:07:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x1d127000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2716.953225][T24405] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2716.961275][T24405] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2716.969541][T24405] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 2716.977676][T24405] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:07:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x1e000000, 0x0, 0x0, 0x0) 02:07:49 executing program 2 (fault-call:6 fault-nth:8): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) [ 2717.282017][T24440] FAULT_INJECTION: forcing a failure. [ 2717.282017][T24440] name failslab, interval 1, probability 0, space 0, times 0 [ 2717.294662][T24440] CPU: 0 PID: 24440 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2717.304725][T24440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2717.314983][T24440] Call Trace: [ 2717.318265][T24440] dump_stack_lvl+0xb7/0x103 [ 2717.322915][T24440] dump_stack+0x11/0x1a [ 2717.327067][T24440] should_fail+0x23c/0x250 [ 2717.331494][T24440] ? __es_insert_extent+0x51f/0xe70 [ 2717.336861][T24440] __should_failslab+0x81/0x90 [ 2717.341618][T24440] should_failslab+0x5/0x20 [ 2717.346120][T24440] kmem_cache_alloc+0x46/0x2e0 [ 2717.350883][T24440] __es_insert_extent+0x51f/0xe70 [ 2717.355915][T24440] ? ext4_ext_map_blocks+0x10b8/0x1f10 [ 2717.361409][T24440] ext4_es_insert_extent+0x1bb/0x19d0 [ 2717.366870][T24440] ? percpu_counter_add_batch+0x69/0xd0 [ 2717.372445][T24440] ? ext4_es_lookup_extent+0x206/0x490 [ 2717.377899][T24440] ext4_map_blocks+0xa4c/0xef0 [ 2717.382707][T24440] ? ext4_iomap_begin+0x3f7/0x620 [ 2717.387745][T24440] ? __cond_resched+0x11/0x40 [ 2717.392432][T24440] ext4_iomap_begin+0x4a0/0x620 [ 2717.397330][T24440] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2717.402577][T24440] iomap_iter+0x39c/0x470 [ 2717.406890][T24440] ? __iomap_dio_rw+0x12a/0xfa0 [ 2717.411720][T24440] __iomap_dio_rw+0x63c/0xfa0 [ 2717.416448][T24440] ? __vfs_getxattr+0x264/0x280 [ 2717.421295][T24440] iomap_dio_rw+0x30/0x70 [ 2717.425622][T24440] ? ext4_file_write_iter+0x471/0x11a0 02:07:49 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x6cb0de, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x20ffd000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:49 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mq_notify(r0, &(0x7f00000015c0)={0x0, 0x2a, 0x4, @thr={&(0x7f00000004c0)="53c98ddb57eccb616c1eeffea69a2afc52a6bd133c1472ad6af7e01cedc552b1be9bf6eb0121fb715b87cc2f5a7f263dac02aadc64d443aa5b87a59e2e553f0339199d370cc7310bbec25a74ec5c230ee6c0247c29000e852ac28be6e23be9f6795c79fdcc1d45905d7d7ee5dd13224ef5326cca543d331c9ec9873bf3d012c906edf23c1f4cb6c0582acac92f75a9b03d8ee4b5708f3632bbfdd2e9c2e9c1c2f67fb03f00c8f56071ceab970dd8884e106073a1d5e7bf99dbae4631eb78fe79f6725a9d3ae59b287b3a45cc64e6b4fb78eca1c0ca4440564cc0ab7f3c62e0d7bd75010f5945fff4916cbe6cab10d2ebe3eafa24c755d4ed3ff8286e95e1dce793b2fc236bc83fc52c1da464b36184b833213c0cb5f016a547910b3831a9fcaa50f3f28f0dabcc20b0d46faee3ea9790a7f11b7e4e3f4130c23815122264758b60a13fd70709bc8554b58b71f5bac7ffe04f3aaea8df3ae68118c83bc68f304003940cc53815606c66901671b8f06e13028227bc18f21b9b57ffbf8d23a4e5e7b7b103ce5a922ae82ef6387c3c5f281b25aa1bbc44cad8c91a996b789d94d68149193b424bb2372643c174742dc4397ee96da9a8d1bc5b12e8080f15c9daf5e02026aa78c2dfccec8cce4d56383e1ac602ad3181d4350c15cf8f7af49e1645faea918b0d761d08a17422bb726dd19716aa79b1dc45db3d01ae7dfa7fef89810c347b414aa05ada818b75e0ae10344f177ac42ffe7f0fa201bbcf585677a6b81c1222e95880fcf2d4364784f620c4b9efaec62dcfb232549df3920740bab692e19b853a3a6bb753a7db40da0b51357eba5b2fe43214a1fac3a2e55f962b57a71ac96e2b919b7441a70571176fd5f18c82e6c0a849daabc3cb6346ad04370aa12daef86e29de14637622242f1a0d49e191ea618e68a39e3d866fd49566d27c626235c3e2288375d5968b740d58d4c1a3bc416e966443593862e9cea757af16bbb2da626b75c5174cb98f67eeec28ec29ea138cf0feb6f6fb6ab6140a41264b0821b3f4ea50cd8af565409958aa6a48c78388cf47fb9cad4fc39e460c7e5b2e948d955bb8b1a53a3bafcf5915085877d7926ca81d163260f3b62fd2a7cc260ead458ad46269e41b381e3b019bbd3c2ca13008b3e2b39cc1533e94e1c6c059019c7765afd58715b126e50ab2ffb3518da176cc96aa028f3fa5939f03ae6fed2e1d126c57534ffb536727e1474a12f8b00fda3b057ae081b219883810a94919d29bdd76d94fb6f5a7cb739fd2f490eece9a481ec976bd681f4526af3736517e82d54232293995725f23913bfa458a21997b43b16f718a08bd5c57af54afd4e70401a6514d34cf7aa3c59ef3ff405f471e2abe34021e8468e1b2a3b84ff511900dd4e09c175b4b91e1df2a61ee9047a14e672dcccfb12f1ba55310feab12f63f40c9109cc41293add4d3928413ba394295ac7dfa3e038a6e014c24b8de6edfe24d58f8b91721e0f6ff4d7f857d28e00b41d4aff3bb56379ff03008adb6f539d382278cc294c059d0a462c7614f533392f01746f1168c1a6252b2d4630431ee3cd39ad6f20de14b5c6ac1300880b2bea33c4597d69b55d35f9e5422f63a9ec2b9b0cc22fd245efbdd738650d0bd07ca0ed3c14aa3a4a902e84944be05a713af4781af36ce5904e274bcc6206689438887fd3d3072175c4d376c23c6779a9170e2c9b345b1dc000dfe496461c8c6c384c57487e867fa970f7a3d6e29e4a003776ae84bd8b6a32bfc98cc58d5c8e769025b729fbe412a7ffeeace674efef75562c304b19cf0aef834a5f13cdf840b03e6b7e2fd0b7f332855ece637bd612c6a6a50fe4787e065b3c8a1babadc8ba6cb97cb0c386b84a916d8d7f26903948fbf4f2b136288a4dd0b23c1955670a206605f819b05af5b0a8f5d072068010e6dcdaf62267eaca2aac832559d02822e780c89651466077e102413ab4f20f102b04dd9cc5082cf6c390539ee98bd902491f7daee5be1d5d5e0d8fabc30b21a32967e60cbaa4a27f9782bbeb40f2e4e71045a653de9f77ccd795b9321194f662414f831b7a50fa987c56758a09e94040ec1ad8921f1a4ef4a2bbd82bf18d29d71720fdd576151fdc1b7b08cb645b10efbd931f24504316aa22d60941cddf2070dfe39e78530b5d2e87ac0f15d0d5fa349448177fc3f47620c623800f10149eb3333dfebebb9894f59b302a2f9b2842abca18bb2897abc7c8affea1ca9545e732b80b85ba5a0ecd582dff5a7b9b61ccbf224d7609e93402e57550d27c915a5541bb4fc9fa04baba1746e9d3d31dab3ed15c9a610450ea478eba6353633a1c1ba609c58efd7bd0c1f1fa0f01b12f8cfa56f2b90581aa1ff758bc270a52a1ea16b4619cacb5d15e7a4699639a99f1ff7136a86ca1051e2f13c3d86938d1167e49153a2f39738d8bfea8aaec4b7fde34a58e7d6d29b6efc3de645dd99c6f7f5c18a3fac83663aed14a114a9269af54569a25a793c1eb019abf4a16bb999d5fa04b6b50f887873f53b00c4a60fd451e2fe58905087c1e5c26027e944c8f75e81d4d63edab56340af84f83f0c6f3749566211b1f7b8a55f72a1f149f0c27ce068db69cac019f59bd453731fb5fc82e8012a275a948313cd445e2e0002dedf7521041bc248879a644f3031dd5089b21805f529601f9bb4829d562bd59cc38a23689714197f34f60f8d9684de9f6ed6f1ed7d4d612b3324fb0f2991c83578c80d7cfc63352e7abc6b7d29a35397e6323a808f4372a7794c6662c543aff8f440ca0820068038362c36cf8f93e605b8e82b14e9120a602b58ac9edf3efaaec26f071dd44d0934af9fecf0cca91f4a16875fb585e51b368772c11bc2e981eca4e3caa7609b39d8da08c8fb40a56dcd296ea8034975bb1075c6616b7108791f3a31eea049236d89823e66f56be8ed509d6896f285e298eb64d655e49fcf24fc8f2e501bf3d484c1d41006b17063a9fa7c78c19177d742fcb25ffacc3ff5a1804a1860da093726947c0844831746a9c0f33bedd4c54e5f44bf84d9acb23c9315507bb361f0295d400a876e0cecb0ded73fbd3ca89354b6a432bd70cc092084c8bb182b5060a9ce1987d8c4e7e5ab71bddd327e2a48ef880c8f1850acab81f960beaf47e0d5abf86f471997120439b14d36251b7df535d026497b3bdb487a3a1b3ceb8aecce4aae624f0316b8befedeebc9d568d7c34478998cca40eb65586c90f041a50020ccfee601e488a9c02c80bb964302c2baca2203e92bebba377d2b015a3bd58c949c17afa7ad9e2156fbb73dd7371538f931f93f25f03ba3dbb0c58617945d577cc48f1b529ec36985b3784b978474b9be4e4dc1df8429b1a512ce63935173c6482de6cb74265436cc039cb1549bfb5e339988ad5561caa5aa018b71b852bdc1ab032914a8ff345ea4f149024d9ad11673a22016e56af90ffe36a0a1541f2517125d15d09acd92c44029d6804ba31a5677bb3d512c551d2216e5ad4f9d525383450a3710a6f46880dd88d18212d6b43d0a35ca9323cab7ee3dd9d675d75a8eb3920eb5041d5808d2602719a8f22ed9083a2f75e2864b133f4a873457b3d751643af972f356f8476a8fb8ef53c22bc234449373783367464eec702574fc604c23c83a03583020fb7a4e1e83e3ea854fbe9f9efd4308534c7e5f50aa7aadde55ea850266a9df11e0084dfbfbdc0e7749e23c98fb168e14ba865306a01c2e612cd555f72727c9a880695613dff8d13c55bc3b043d5b91d692c63f4623d6e3433c4481a0230aebbc56368d985128d94f4542a443ef8deafee3d32dc9eed8319db6c5eaf764f526eb1b6a73a7311d1916b09cee545ac82f9599d1b9e1a92199ab7e238d9d50b95a70d83469bfa6a18b8a2718d1a54ff69480a01abc709e22fec637a5666875d51a91d6a39e1bb115321303210848b3e8c18e2512f2e4f0d5c11e7e3ab10948fdbb4a33f8ebbb45118932019954c305020ca6a4f3eb8819ad020a0b97e03c02bb91ca7a4a879dbd5b9a18dd415898614cd46bfb43f5883ac0cf75721e084e014c461e0c0a7c3e3c744f16b5192efe9cf3741ffc4660ba8beb1db3786aaf3b7ffdfa16bd7ab2d4c136603124e69f78fa1053b462b8e782153a34a6c9e95952b3e50930f7e8c2f684fa0ef87b35767be048fb275f32e6521f69bd37a6c207335f412bae686986a514855ca657741437b9437a509cc17d420ac46f8cdcf8c9d520cfee83cb66d55693febc940ab1bd154aa51a24168335f4305ef3484bd31cfab9f8f6c8de450c0573ebbccfdcab47867e5a3f14a1d5da3fbc0535572b157f1d194eb55452653cc9653b78db74f6f6ef5a7552d86d49dd980be264dcb546a48bd3acf67426817cbc0b2c84b74716cdaad0258548b9b7235e1295b528cb6f500e9d7ea5dd3d5b6b0e312deea97ead4e7e3087985a5e5792b195f04ba17bf012a1f1f2ebbb898cff500d4e16e0e8bcfd22b3b2654164a9ead749be96ac54ed21a3d02a314f2fb0d66a66ffbf836468885696bb3856ae57396d7131d964e30138dc25bf59dc2fad2de12e2de1071ae35a034aed56e534bc7026c243e7897bac6b3b5f82ecfab9f3d55c3bdc01c44917fd0731b2a5814a0aacf92d7641f9d98c52e0203662715ba31b871d09ad388bf0160c88a4f6da9b0c0efadea4897295c6a3ab7ca5465b7e147c0b5cd61be6f4196ad9e548e34f260c46e6eafee7f7ff029346a8b5e62b0dd608833a966c8cf587ebf482682d978fe3f11bde09f3bc5cad7e427feab75cec57d3d47345a9b94ad4b803f65f0ccaef30405be4f24b6de330b6967bebd1cb524a12d7c31f224d3bcfb417a3fe998faf751519fe10592277c8f8ffdd457ddf8bec47a833e3d674eeac8682efa5962c932438112a357532a26db689a3ddda45612b9676e1c0488f7d11ffd4cf99df56229067b9cd4ce05972c91eda0045041360e790325d23740c6f1a24654cb3374eb2a075ea966f82caaea36ab0ec3ae29d6a0c0130f33c6fbd2e4f0732281b5ec1a341f63af1db4054fa9324764db3535e4322b223803b4ae0e6a9fe5ceff6f5e31cfb5687d0cc63f7dfbeef8aa8d4ccaeb6fb62d9e4a792f2a9bd18deecc3dafcae43cb38e22ddfb85f1282a5ec78300cdc9be964079bd9cf67a434fd9dbfff5931c7978fdaa99cd4cecaf2d151acb35f2f2cfaa5975dcec063d91f110ccec43f142fe21db928fbd893df5a87c49a73c0112b31214582c7a0384573c825638e3696af4a5a3de80ca2e43ebb23019482d488fe33693e19dff3dff0ebe7103b37389cf3dc2c662d61c3808fb2f1c7ba5569e322e07407e42cc91570ebd28d668669bd4bbed9f0f3cfc8f991bef5907d0366ff890bdbea56f3e73336f9016b249191f4a4797262cda052be672b2df282f88d6ed1232467d2e35a3755966e63a499871bb349746668c4c58d51e55edfdcf1afd6f1589263d190ac0fdcc5203d4e5616b962f4905026a06b7efb9d38154e35359fc9cbe9428f666aa8761e0a4ae353cc18eb96c709900d6f960a50b1a3e31a7e6eaed2f466f58f91ee38a4d81935fbd96b7612e4a47f54cec2f620c8c6f2f9d2151cb21db425b4f15f7fd4ddeff13202a30247102a383e244eb787f3b3ddbf7b8e6984be9fe6a256769c42b2820e5f7205c95a175c8a86c223958667d2e2068982afcaa04b887a9c9234a756ef614a04def83bde846007a4920e70c9180a45125604f4f1bdc668bd757f14ad9b27aa968a389a36115f889554e9c09dde456af2bc8a1a5b", &(0x7f0000000280)="1d63bd3bfbc7d1d81a1ed58af171482b5523563097b468b7fa6fabe5a698db7434e0b1b73112162ba3504cdbef01e59c3e4f7a8cb15b1febc022ba93e8ccbfe3cfbb862ec6547310d8779604bcc482e461feccec6cbd9d4196efca0e16"}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) mq_timedsend(r1, &(0x7f00000016c0)="7b07dad3a2c141c1a5d43ed9c4043b1fc4bf99d6689e329dbe62c465e46b24d052e46bffd98cfb5a5a71a47234ecd357bd9e47a1a657df3e07ea4ef66836ee302ff291214ee2a6d8026e53a10e82a8218e5b3e295bb9a0c813868c8bbb8dacb47d8678ded5cfa5c4f75e7f409b0f6e2ee27f96fb2b9cd09643176a536264772c022db7600bf3ecca181991650ce2df5c0b677a0e94ed23d0a466a2d4157b3a3c52c9ff04442b3d44cc0ad83e12589bf991c1d168531549f01348a81df4574ed7fde664ed8f93b734247bd32c829ee0eb277dfb80748f972f9e035235e83b14b36458e8b870919ab26a7d438e445638d4fc89e775a9865090", 0xf8, 0x4, &(0x7f0000000380)={r2, r3+10000000}) timer_create(0x1, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={&(0x7f00000014c0)="367ac535a3c0c9ed6e4fddc34cade6e3b1d5ce4ff68c3771fd8bdad50c8ca0efa715e155954b93dd1404e125c05620fd0e9d8d674eab0408a6c983b425b2b237f04226f95e673cbb7021696e935e356d8e9eff6ff2742a4be99c43a6933597221bb965cd84c846600e7cedbc6bf162215b300f1981614c0140e905d6962ca641dcc2a15e31dac9684cfc31a215421dfc3395bda2d94ff053688540d0d1d8157e07e598b68088956eddad16af03b61c3abb3dfe4a92d69e1241c50f29bdfe3ad274462e85d599", &(0x7f0000001640)="c59ea748ae157c2a2d5b27c646f4cdcf75497bf8d6ecb1df659b2df6b66d13a136e7b321484c017eaa9abb6c8fa7dd1bb7953b501057255c4a383f747fc719fd46fdf4001c98489d28d25798745076fd4a14fe019b03fc9c14ca5ea41c2ca3f0f92813ea5ac1d58f71e0ca9725335471deb9739f"}}, &(0x7f0000000040)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r5, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r6+10000000}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000001c0)={{}, {r1, r2+10000000}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 02:07:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0xfeffffff, 0x0, 0x0, 0x0) [ 2717.431079][T24440] ext4_file_write_iter+0xa5e/0x11a0 [ 2717.436592][T24440] ? ext4_file_write_iter+0x471/0x11a0 [ 2717.442134][T24440] ? avc_policy_seqno+0x22/0x30 [ 2717.446976][T24440] do_iter_readv_writev+0x2cd/0x370 [ 2717.452178][T24440] do_iter_write+0x192/0x5c0 [ 2717.456767][T24440] ? splice_from_pipe_next+0x34f/0x3b0 [ 2717.462311][T24440] ? kmalloc_array+0x2d/0x40 [ 2717.466944][T24440] vfs_iter_write+0x4c/0x70 [ 2717.471449][T24440] iter_file_splice_write+0x40a/0x750 [ 2717.476830][T24440] ? splice_from_pipe+0xc0/0xc0 02:07:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x39020000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2717.481675][T24440] direct_splice_actor+0x80/0xa0 [ 2717.486614][T24440] splice_direct_to_actor+0x345/0x650 [ 2717.492065][T24440] ? do_splice_direct+0x170/0x170 [ 2717.497084][T24440] do_splice_direct+0xf5/0x170 [ 2717.501840][T24440] do_sendfile+0x618/0xb90 [ 2717.506252][T24440] __x64_sys_sendfile64+0xf2/0x130 [ 2717.511368][T24440] do_syscall_64+0x3d/0x90 [ 2717.515802][T24440] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2717.521692][T24440] RIP: 0033:0x4665f9 02:07:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0xfffffffe, 0x0, 0x0, 0x0) [ 2717.525601][T24440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2717.545222][T24440] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2717.553631][T24440] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2717.561604][T24440] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2717.569595][T24440] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 02:07:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x40000000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:49 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb4, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x200000000000, 0x0, 0x0, 0x0) [ 2717.577559][T24440] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 2717.585955][T24440] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:07:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x42000000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:49 executing program 2 (fault-call:6 fault-nth:9): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) [ 2717.799963][T24497] FAULT_INJECTION: forcing a failure. [ 2717.799963][T24497] name failslab, interval 1, probability 0, space 0, times 0 [ 2717.812638][T24497] CPU: 1 PID: 24497 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2717.822614][T24497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2717.832720][T24497] Call Trace: [ 2717.836031][T24497] dump_stack_lvl+0xb7/0x103 [ 2717.840633][T24497] dump_stack+0x11/0x1a [ 2717.844784][T24497] should_fail+0x23c/0x250 [ 2717.849188][T24497] ? mempool_alloc_slab+0x16/0x20 [ 2717.854204][T24497] __should_failslab+0x81/0x90 [ 2717.858957][T24497] should_failslab+0x5/0x20 [ 2717.863525][T24497] kmem_cache_alloc+0x46/0x2e0 [ 2717.868455][T24497] ? ext4_fc_track_range+0x80/0x130 [ 2717.873730][T24497] mempool_alloc_slab+0x16/0x20 [ 2717.878577][T24497] ? mempool_free+0x130/0x130 [ 2717.883245][T24497] mempool_alloc+0x8c/0x300 [ 2717.887843][T24497] ? ext4_set_iomap+0x43a/0x460 [ 2717.892680][T24497] bio_alloc_bioset+0xcc/0x530 [ 2717.897429][T24497] ? iov_iter_alignment+0x34b/0x370 [ 2717.902757][T24497] iomap_dio_bio_iter+0x5c1/0xbc0 [ 2717.907767][T24497] __iomap_dio_rw+0x87d/0xfa0 [ 2717.912430][T24497] iomap_dio_rw+0x30/0x70 [ 2717.916740][T24497] ? ext4_file_write_iter+0x471/0x11a0 [ 2717.922187][T24497] ext4_file_write_iter+0xa5e/0x11a0 [ 2717.927460][T24497] ? ext4_file_write_iter+0x471/0x11a0 [ 2717.932919][T24497] ? avc_policy_seqno+0x22/0x30 [ 2717.938067][T24497] do_iter_readv_writev+0x2cd/0x370 [ 2717.943248][T24497] do_iter_write+0x192/0x5c0 [ 2717.947903][T24497] ? splice_from_pipe_next+0x34f/0x3b0 [ 2717.953413][T24497] ? kmalloc_array+0x2d/0x40 [ 2717.957986][T24497] vfs_iter_write+0x4c/0x70 [ 2717.962472][T24497] iter_file_splice_write+0x40a/0x750 [ 2717.968623][T24497] ? splice_from_pipe+0xc0/0xc0 [ 2717.973470][T24497] direct_splice_actor+0x80/0xa0 [ 2717.978389][T24497] splice_direct_to_actor+0x345/0x650 [ 2717.983815][T24497] ? do_splice_direct+0x170/0x170 [ 2717.988915][T24497] do_splice_direct+0xf5/0x170 [ 2717.993663][T24497] do_sendfile+0x618/0xb90 [ 2717.998070][T24497] __x64_sys_sendfile64+0xf2/0x130 [ 2718.003215][T24497] do_syscall_64+0x3d/0x90 [ 2718.007629][T24497] ? irqentry_exit+0xe/0x30 [ 2718.012150][T24497] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2718.018181][T24497] RIP: 0033:0x4665f9 [ 2718.022055][T24497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2718.041846][T24497] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2718.050340][T24497] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2718.058309][T24497] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2718.066260][T24497] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2718.074376][T24497] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000002 [ 2718.084411][T24497] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:07:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x6e2bc4, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x60020000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:50 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x4, 0x1, &(0x7f0000000140)={r4, r5+10000000}, &(0x7f00000001c0)) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timerfd_gettime(r8, &(0x7f00000002c0)) timer_settime(r0, 0x0, &(0x7f0000000240)={{}, {r6, r7+10000000}}, &(0x7f0000000280)) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:52 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000340)={{0x0, 0x80000000, 0xffffffffffffffb3, 0x10001, 0x2, 0xca, 0x6, 0x100, 0x800, 0xffff8001, 0x1000, 0x3, 0x0, 0x6, 0x3f}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000400)={0x0, r1, "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", "bf4cbf3921f1be77b6d78247b92c65b14e2c47f4883fe7838310a21a8d17b5e10c021244919887d35af238658a47e5dffa4ee6ad5190d04e6e31cfe034217cdaab4afcc3237121ffbaf9c834808190e5b1c4887040b344690452cbc63628cc6c9b8b10092703a78910263b068ada62bc36638aa80f4e59f05cb5ca173c2086c420fea9f44b0de82463b29833fbd1855e9cda1714a10034ef535af0f64d58d387bc2233fbf32ede2896a18600e3c597321ae0fa99045663865c6b755621fabcac12329bc8b39f0ba35db6fb60b0900f17da38e407bd871858c1e0ae2de1d4ad7d97dbc2254187ac3b5d383bbdc2782370e9fc3c63a60ece79058a822a2e718f689c98dc6ce8bf9479be243280bdb0275e71aaa10ce2e352a947c27f91dba98ca36e69b395b2abffecd3e81a9cb05ea3f7e13ae3e62fbced6abb0eb228f0eefd050e5843865624270c7e85e99cb3c2bb6a4d0e245c2cb43d4957c4dbe974606d11d6c13acd11e31657dfb3a49b28d9f54c4fe4b35d4b517034bbe41d25c296c83f82209ecbe42530b0d4c0512cafb3709f9b4095fbc94bacca9743b231fad28177248b33f9959aa5dcfe886549c9046829ac369a9e19f1a33925415478f7e3cc6c2c44e68b8cbcbdb1125cb80b14ab78cc9f363dcbee4f320d5626fd1bcda7f00ea54d5332019897664a72e23707c607d85a59c33a01b9f740ec829f60f88bf2f91bdef3ca04490d9533c988f8eef33bd0663599453240dbcb692577438e430dfb6cc6b790f709b95c91601c1bf1f67b8d50f13ec27ab98b234074f9de6ab3240d2ca9cefef1b014ef83816b5759b2afa4865210a5e1076a38b07a3b83b613e07bb70c47464dea2cf420da0b9415da12bb3e1eb6c20cf9679a6781cd31b2debb014f612945f6d324ca27f349a86da776c28d69cdef5cb4749ee1a3a0854d2c8d1bea9704b86ceb4a67c3607733b38ab8323bacfb74adda04a92fc94f9b71967004b5bc3fc2a2c07bb4606147de525aa003d0b6edf6d9e6ad1967dc74f52c9a7099ca492b89d9d67496bfef59f9ed53068ce8bd61f5333688ebc13b68308fda4ec4fa8e54b769e0e28ee17383832690bd0cda1578f72067cf6901a81fa9f2aba04e0202fd4de43de43882648627d49e5ae83350ce75180f627b3c3f8efeef9e7413691217804926f4e85b7c31bb568e240e0a680c740cc0291a7a06ab99c8e91a4b3d63bef8647681285ce2faf933de71512558182a2aa09473b69f6ce63da17e8124f2b4686e0ce63a83821e7d8f55d59c3b32485801e33ee0d9d91c3a966aac841bd1ef241483c1f224cb4054480997db2a0ff4316daa34a22b9e49ec94209c8ff4757a0c57c431e35cd365787566e3bfe8691a8b1312f436987e870a751b9a23246e81d11b099781d9b80923a89c3a0bda6045f5d486a00cd9722153cb6ecb2a171cb6f790d812867426843234f804fafa942d6da80d1a07d035eb7a67f2fce950c1a005b4de19e1c6b9b433546b773f8540cdec9c174a3a5f808054cfc5acff358683d00daf76aced1f7795c5f776ce6c2d4d193a4166e16bfbdc2a46498740ecfd3211be19555ce303fe9a8d04b98181d6a8f1394041ea4ed426893c41d9de18dde90f33e4fc26d4d3bb5eddb92fcf7363b42e22fa3026ae7c608931b36301450a303a0816d2c261443176ec460f33d62b76d12c7ebc716c5f4ff66828844ee87156411c999f557d36335ec7a6dcdaadaa388706bf5e99652a0517573068322112ae105e38dd1c29e226f4b2ebdd288cf25edd868fa879257a3e565036b725a3de19b2e11fed646c51a5d4dd83a106d7129063d194824250c4c2f6c8a5fcb9b73957cf2d24c17a6918143ed507f6cda03eb77aec61f780be3baee1cec4044289b1c9a7c211ad0a29b8796ea7d55195bc977cb606969b37e85650067013bc715dc1e4b6f91cd04855ef7f02ba0455615565f453798e83560503acf1452e53bc837e238d2e1d78c44fd4fbfb2797290c2ee652011f955f396663d1abfc51cc98e28ae3fe5517e38ca2e037b71756c16d69527f3dfa32304dc90ddef95f07914c979524db47ada61953675882d4d979a9a7009b80e2b00d55f5ea1d7100452701cc6113a793ecf9e11c83a8946d2ccda365696ab0f39d18b6f6451dbd5f5f6ff8f97c1672614782cc4465ce865fe711e1359710865d15c11803b63e39f57912967c511fe8270378de16b53c375dac64e523d2c56ae2225b59f8f02289596f2b1a3b220fd28383e2d039c75f577d09d0dea2cea69d2e631e877c4b0b44dc730069b1738e0c8f191d0f5e6c8885ff740eb6068a2e8dc31324a17d406ae6f5b7eea622f66ba83192704910b936015cbd6ed9fc516bc0a47858d844d028cbc0d3965f93b2b660b195424d59ddf996a2732039c52fa31d3fbcf84e877e0a7e009e96ae6a9c633d56508f1450c7a76cfe1889122340865d1b8998f5ed7af095c4adb891879110cf64ded7e229b048fb2a2f159b64809035a1c412a85e7d0cd948d12e13ae96a473c6c66079fa27bb0a036e924624704e43f01eb8ee2c935b36afe436f9538bd92c20fc6a3f4f361405e0d254c041b5d925a8869cdd081bcd9468c5de86f8d1e224a2bf3f843c1fe4d4743797b70d9a0095622bfd074b771eaf8d352e74bdbb8187bd1cc88bd9221fe9c87e7ad87c42d760a0115b6dd32063512afc2ec5f05d5a5cb1858e8db9927f3fedeb848ee4d970580a28132e85bf9a05c661fff78ac5f92dd252828190bd3ed0a0126853f60f69bdf64ccd2aa4a9e469a95ee47efaaae69d3a10044e3d0681c5825600eb145fefdccbd9a69417fdb9ed9a51d40d9146cdb47b944de8cae976172ceebae778d9922f65c4183d45fa5b444cf7c8f725487fe54c8450b588963424300a3e98652dd39ea5f7142987d9211b1195bb2adb484b95f197370c5585162f10298eddfaef0bbbdc2e515f296da7144b07d32022545d6c12a168b861b0b03bc1356944f06281d6c1ba7535ca59dd4433e3309034230c62dde4f8416c1afe7e979f17630bcd42de9d7e35cb41175b1563db14f62a9c2bff6319f071231058c1fd8fe15198b5c73c7f0cde877ddc1bd9ae1906c0b0f3acf3dbecf94df6e416180e963fa2c630632791f0d9ffcc9c021b43a17c1ac7851bf8d6135c2b972c2ee4ddb815ea092937aab15eb1828ea7ed767d71fc23e28008206f3c23b74e4dff15aa082ad15efc07712dd36c91b8f3b437eac34d4d992f3a44c5a711711b3e91feb86d308e27c966bfa145d3d834931535c3c6b9a935c96b2aee350b65f12e451f339ba8df6a62a6671e898d2586461adbdcc9bb156f0abf6f9ab4107b107168d24460a237a1b28aff31244ac6356e8af80cef4818da94d6489d2134705c8663e0b3c62954008267fc8095d324d5c850ae62cd986befe5fa62da08be8402561d3be8b89b56ac03c2d38500f6f98df1a4c087dc15d9237ad96afbbe911ba762b18f1045d1135ab1890f1fd8f444c51594a44d3d0afd5e47b82044597bb321ec86ca99bd79f85d9ee5bc0a3281304cfb7e59e00b7e05476386e82f40ec6b140ee7db6101ffe1fd52d81249836ba976e953c576aaffb597582ad9c3b055fd4ef6c455495317445d02ec309192d2b51bffa73a5d9ceb2b380e67a0cfa69311dfb558978bc4b2cd0924a6370395c92262aa1bdf7108a83a25381721fc6b71570efd5d47c997b033ef013a2433b2f155756bb6b5ca0c58c87f2198d78481dad25d6a93ba034b88ae45ad327c3fb14abb497ea175766ff0059d4c185894b8a129aaecf761d7f0ab925afaa1d7902c68e7f2aa6a6843bbd8beaa0970d475edb858aa3d2c65f5f020063ca5519b2471f35c7484a7e57340d60537671366f3181a615ec4942b4365a116cba026569f7925bcca7d02e9a6aeb4a395889e49d5fba4a541a4bc7ce8c25d16bb0fa005f50ec76a482fe795f468c2b0d5aa46b4ff42d1618d8d01625cb64cc6e6fb7fbbc99db02299511108f6c66ddec978fbc343edbd69e249e384f37287f5546fb819ff812822b9cc2cd50988e7944d11451673274c187061bfc6e79cd907372ca944f468fd2a4bc234480a16e449622946ffcc45230c93066a6e22fa9a7f92e6e03a1d575a0f65729f5681bcf5bd77b0d720b14a163bea8f9ed5111e4e5b6744b336e221dd286fc4c7d42a92061a9d196a3b8ba1a778595a7cafc9e6f37a703508a1f9bfb4eec7343638553e08fb9a12edeebc59e250e2d8645aac9d95d7889e6394fcc73cf029af72f6f8dbd090fcc503015f5efe2712e7b9eaa2420460a7575c2349ccf43196e5644358fe9c809194799cc487296ecdf9bff7dbc57b1d615fb9668cf387967722314f9f67b3ab0e9f1bc4154550d20f1f1baac670bfca7daf3506f5c51e096460a3c4907178cf59da58e759ebec3c31a0a78ed70869e5e726238e9aded0c301c3273670e751715f61066df449654c200f187e9b225b414b4f59d7919ffb3e0c3b41c70b0e26d28df986b0e0b16939c4be092b1a338afee21de7dbb67a6d79e6066f10ddb95873937e66b0a25378ec25cc0c906bdbc5f51cd73e9eed7cf61de4100f46bb21af739b080c8c23d39111595aef3984deec4ea9cc8e2da007152ccf844edac99ca33324a0f6f84c9df1e7dc201149e7a36e2b8b9d9c942dc745f0d17d50fda67a00af6a172cd11102259e6ec34b5a347904d825e22f9d0eb8e39ef274df3338b1cbb28475c5ad7ea755e55a0b4d74b5417e7f4b34f5bb3d3a011b4f1109c2597a1454531bf80a01996a5fae21dd8b86ed8733def9e04ef52055356c18359bf69ab93f8f2dda23d16b405e50032583ecbdae376cdf1dd00ba56bff9d31170f44090025ba47129dc54e08de88f0bf343a93037b424612853109d42205f19412b302c7d70f27335b030293dddaa5cc56acb7c18fa03dc35b18a07dc3af5a1416a75024281e62d70be411898a244e7f324156a141597b4329e47de3f783f9b071f5799b63ff81ed4078b64300bb6d595ff918f80a78d7d7d8192ac660aba4f53cdbedbd0b45f5d82735d5409f4a4d2d19e399f570e472b82590c6f1ecd3a4fba1983d759eeb13d1ecf7f008c57657cf8bd1ce895351e809c174bb977e95cd01455085d17a444e3555193b61140209fcab045ddbbbacaf3f41d6f5ca00451364358a226d18c85796a4d51f8f222f2c10116171b71a9e489466165802b7808153c5eaa068bcd688a332155b777a1eb8dcdd8003d47ed4ef4d0762e3586d3f2bb450a6b2625c569a2d6b711e4605c2ad7f6c1b1de7aefe33b6cd39d4c594a102dc3d3efe2820f1a7aab8a47eec9ed3c7d8b03802917077783a68aadf4f95c565168b4067282f3adf2c23da4db7a7b68d24cba47f777e"}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clone(0x20000080, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="f85c7f00927d64d6b1b0972d") clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f00000002c0)={{}, {r5, r6+10000000}}, &(0x7f0000000300)) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 02:07:52 executing program 2 (fault-call:6 fault-nth:10): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x66020000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x7ffffffff000, 0x0, 0x0, 0x0) 02:07:52 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x7028cd, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x1000000000000, 0x0, 0x0, 0x0) 02:07:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x6c020000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x93010000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2720.557842][T24549] FAULT_INJECTION: forcing a failure. [ 2720.557842][T24549] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.570692][T24549] CPU: 0 PID: 24549 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2720.580646][T24549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2720.590763][T24549] Call Trace: [ 2720.594120][T24549] dump_stack_lvl+0xb7/0x103 [ 2720.598709][T24549] dump_stack+0x11/0x1a [ 2720.602863][T24549] should_fail+0x23c/0x250 [ 2720.607284][T24549] ? mempool_alloc_slab+0x16/0x20 [ 2720.612306][T24549] __should_failslab+0x81/0x90 [ 2720.617094][T24549] should_failslab+0x5/0x20 [ 2720.621588][T24549] kmem_cache_alloc+0x46/0x2e0 [ 2720.626351][T24549] ? __crc32c_le_base+0x23a/0x330 [ 2720.631368][T24549] mempool_alloc_slab+0x16/0x20 [ 2720.636242][T24549] ? mempool_free+0x130/0x130 [ 2720.640961][T24549] mempool_alloc+0x8c/0x300 [ 2720.645454][T24549] ? chksum_update+0x39/0x50 [ 2720.650074][T24549] ? crypto_shash_update+0x12c/0x190 [ 2720.657863][T24549] sg_pool_alloc+0x74/0x90 [ 2720.662321][T24549] __sg_alloc_table+0xce/0x290 [ 2720.667089][T24549] sg_alloc_table_chained+0xaf/0x140 [ 2720.672417][T24549] ? sg_alloc_table_chained+0x140/0x140 [ 2720.677962][T24549] scsi_alloc_sgtables+0x184/0x510 [ 2720.683149][T24549] ? __brelse+0x2c/0x50 [ 2720.687354][T24549] sd_init_command+0x952/0x1610 [ 2720.692209][T24549] scsi_queue_rq+0x10cd/0x15a0 [ 2720.697078][T24549] blk_mq_dispatch_rq_list+0x695/0x1040 [ 2720.702627][T24549] ? __sbitmap_queue_get+0x11/0x20 02:07:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x98010000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x9e010000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2720.707805][T24549] blk_mq_do_dispatch_sched+0x3b5/0x640 [ 2720.713341][T24549] __blk_mq_sched_dispatch_requests+0x1eb/0x290 [ 2720.719589][T24549] ? rb_insert_color+0x2fa/0x310 [ 2720.724675][T24549] blk_mq_sched_dispatch_requests+0x9f/0x110 [ 2720.730715][T24549] __blk_mq_run_hw_queue+0xbc/0x140 [ 2720.736000][T24549] __blk_mq_delay_run_hw_queue+0x163/0x2f0 [ 2720.741812][T24549] blk_mq_run_hw_queue+0x22c/0x250 [ 2720.746923][T24549] blk_mq_sched_insert_requests+0x12b/0x1f0 [ 2720.752958][T24549] blk_mq_flush_plug_list+0x2f2/0x3c0 [ 2720.758363][T24549] blk_flush_plug_list+0x235/0x260 [ 2720.763477][T24549] blk_finish_plug+0x44/0x60 [ 2720.768063][T24549] __iomap_dio_rw+0xc38/0xfa0 [ 2720.772766][T24549] iomap_dio_rw+0x30/0x70 [ 2720.777078][T24549] ? ext4_file_write_iter+0x471/0x11a0 [ 2720.782542][T24549] ext4_file_write_iter+0xa5e/0x11a0 [ 2720.787933][T24549] ? ext4_file_write_iter+0x471/0x11a0 [ 2720.793431][T24549] ? avc_policy_seqno+0x22/0x30 [ 2720.798312][T24549] do_iter_readv_writev+0x2cd/0x370 [ 2720.803889][T24549] do_iter_write+0x192/0x5c0 [ 2720.808478][T24549] ? splice_from_pipe_next+0x34f/0x3b0 [ 2720.814022][T24549] ? kmalloc_array+0x2d/0x40 [ 2720.818898][T24549] vfs_iter_write+0x4c/0x70 [ 2720.823399][T24549] iter_file_splice_write+0x40a/0x750 [ 2720.828763][T24549] ? splice_from_pipe+0xc0/0xc0 [ 2720.833646][T24549] direct_splice_actor+0x80/0xa0 [ 2720.838603][T24549] splice_direct_to_actor+0x345/0x650 [ 2720.843953][T24549] ? do_splice_direct+0x170/0x170 [ 2720.848953][T24549] do_splice_direct+0xf5/0x170 [ 2720.853697][T24549] do_sendfile+0x618/0xb90 [ 2720.858179][T24549] __x64_sys_sendfile64+0xf2/0x130 [ 2720.863433][T24549] do_syscall_64+0x3d/0x90 [ 2720.867844][T24549] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2720.873775][T24549] RIP: 0033:0x4665f9 [ 2720.877654][T24549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.897398][T24549] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:07:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xaf000000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2720.905814][T24549] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2720.913782][T24549] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2720.921937][T24549] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.929904][T24549] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000002 [ 2720.937968][T24549] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:07:53 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x6aa94000) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000004c0)={0x0, 0x2, 0xf363, 0x1}) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) exit_group(0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xc6010000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:55 executing program 2 (fault-call:6 fault-nth:11): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:55 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x71df64, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:55 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000001940)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, 0xd9f, 0x0) r2 = syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000001a80)=""/135, 0x87}, {&(0x7f00000006c0)=""/107, 0x6b}, {&(0x7f0000000740)=""/84, 0x54}], 0x3, 0x80, 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000900)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f00000008c0)) clock_gettime(0x1, &(0x7f0000000840)) timer_create(0x7, &(0x7f00000007c0)={0x0, 0x23, 0x2, @thr={&(0x7f0000000600)="345726f65d6aa388b2bd2b8d43f864f291e349416d48db32a2ee5d329bf3483ffdaf101101060a2a3775d6756e567031ec21c978cf5e1ef12cea7bdcff2d662ab095c2ca1d6eb8b6e027d23898ecd2beec5e936a5661d74f5ad70455c8d1e7f1f8ec0bbc5d7afc56db86fc518aaca1db77686c0504b70f23f9f411d0e862f45febc6e533dfced5f1a3554f65b7", &(0x7f0000001980)="7943c1a445fb76514420f5e8f8e146267d6efca6a7bfa6a6f1f53917f85580ef2a852c566aaab9776e9c4791c5464506339143f30a7fd99d3ecc7dd4754a0e4e944279252a6c64068b43e3aa707047a4ca8685ff24222797d03b3ac120cdba14a3eaea35a69a1d0f4f890c78f2ce716b4e3c174f2feca58e22e5976b42c35fa68e79d0573cbc61cfacb33629ed01b314df7661b38a171c90b5d69ef597ac72ae100783d2bb5fb6ac4b1efc9013a345f83b1af084865a784395fc8577d4280e406efd0457be30598a8d91db4f82536b12cbf5"}}, &(0x7f0000000800)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0xf, 0x1, @thr={&(0x7f0000000280)="120005968c61f67f6cefb8603bdace0369a392bc8f15b882cc67b37662e213389f6e9942bef49470f255971a4f540b6e8a88f04c44b13e358a3b00ec9b6e1c6b95a67d2ac39ffedf", &(0x7f00000004c0)="0bb9aa47505705ab6ab7897f81582fa3042186eccc07f58d1479f783c341ef83c7c9a3c49d2197e5edf6a55d6cb29f5eada984939d518651894ad0e87cce430b2c3d94c558f48e7df048"}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f0000000540)) timer_settime(r4, 0x1, &(0x7f0000000580)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000005c0)) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000880)) 02:07:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0xf0ffffff7f0000, 0x0, 0x0, 0x0) 02:07:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x700000000000000, 0x0, 0x0, 0x0) 02:07:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xe7040000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) preadv(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000080)=""/41, 0x29}, {&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f0000000540)=""/250, 0xfa}], 0x6, 0x3ff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 02:07:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xfeffffff, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2723.576308][T24602] FAULT_INJECTION: forcing a failure. [ 2723.576308][T24602] name failslab, interval 1, probability 0, space 0, times 0 [ 2723.588949][T24602] CPU: 0 PID: 24602 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2723.598846][T24602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2723.609990][T24602] Call Trace: [ 2723.613264][T24602] dump_stack_lvl+0xb7/0x103 [ 2723.617861][T24602] dump_stack+0x11/0x1a [ 2723.622164][T24602] should_fail+0x23c/0x250 [ 2723.626581][T24602] ? kmalloc_array+0x2d/0x40 [ 2723.631160][T24602] __should_failslab+0x81/0x90 [ 2723.636103][T24602] should_failslab+0x5/0x20 [ 2723.640666][T24602] __kmalloc+0x66/0x340 [ 2723.644810][T24602] ? ktime_get_coarse_real_ts64+0x10d/0x120 [ 2723.650705][T24602] ? splice_from_pipe+0xc0/0xc0 [ 2723.655692][T24602] kmalloc_array+0x2d/0x40 [ 2723.660181][T24602] iter_file_splice_write+0xc6/0x750 [ 2723.665837][T24602] ? atime_needs_update+0x2ba/0x390 [ 2723.671031][T24602] ? touch_atime+0xcf/0x240 [ 2723.675614][T24602] ? generic_file_splice_read+0x286/0x310 [ 2723.681422][T24602] ? splice_from_pipe+0xc0/0xc0 [ 2723.686392][T24602] direct_splice_actor+0x80/0xa0 [ 2723.691326][T24602] splice_direct_to_actor+0x345/0x650 [ 2723.696694][T24602] ? do_splice_direct+0x170/0x170 [ 2723.701708][T24602] do_splice_direct+0xf5/0x170 [ 2723.706470][T24602] do_sendfile+0x618/0xb90 [ 2723.710968][T24602] __x64_sys_sendfile64+0xf2/0x130 [ 2723.716189][T24602] do_syscall_64+0x3d/0x90 [ 2723.720604][T24602] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2723.727970][T24602] RIP: 0033:0x4665f9 [ 2723.731954][T24602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2723.751571][T24602] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2723.760156][T24602] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2723.768129][T24602] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 02:07:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xff8f0000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:55 executing program 2 (fault-call:6 fault-nth:12): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) [ 2723.776447][T24602] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2723.784417][T24602] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000002 [ 2723.792767][T24602] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:07:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xffff8000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xffffc000, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2723.922757][T24631] FAULT_INJECTION: forcing a failure. [ 2723.922757][T24631] name failslab, interval 1, probability 0, space 0, times 0 [ 2723.935603][T24631] CPU: 1 PID: 24631 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2723.945494][T24631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2723.955544][T24631] Call Trace: [ 2723.958817][T24631] dump_stack_lvl+0xb7/0x103 [ 2723.963533][T24631] dump_stack+0x11/0x1a [ 2723.967796][T24631] should_fail+0x23c/0x250 [ 2723.972203][T24631] __should_failslab+0x81/0x90 [ 2723.976962][T24631] ? __iomap_dio_rw+0x12a/0xfa0 [ 2723.982059][T24631] should_failslab+0x5/0x20 [ 2723.986559][T24631] kmem_cache_alloc_trace+0x49/0x310 [ 2723.991924][T24631] __iomap_dio_rw+0x12a/0xfa0 [ 2723.996597][T24631] ? ext4_inode_csum+0x3a6/0x430 [ 2724.001706][T24631] ? __brelse+0x2c/0x50 [ 2724.005876][T24631] ? ext4_mark_iloc_dirty+0x161a/0x1700 [ 2724.011447][T24631] iomap_dio_rw+0x30/0x70 [ 2724.015772][T24631] ? ext4_file_write_iter+0x471/0x11a0 [ 2724.021310][T24631] ext4_file_write_iter+0xa5e/0x11a0 [ 2724.026605][T24631] ? ext4_file_write_iter+0x471/0x11a0 [ 2724.032131][T24631] ? avc_policy_seqno+0x22/0x30 [ 2724.037239][T24631] do_iter_readv_writev+0x2cd/0x370 [ 2724.042478][T24631] do_iter_write+0x192/0x5c0 [ 2724.047062][T24631] ? splice_from_pipe_next+0x34f/0x3b0 [ 2724.052504][T24631] ? kmalloc_array+0x2d/0x40 [ 2724.057097][T24631] vfs_iter_write+0x4c/0x70 [ 2724.061735][T24631] iter_file_splice_write+0x40a/0x750 [ 2724.067130][T24631] ? splice_from_pipe+0xc0/0xc0 [ 2724.072034][T24631] direct_splice_actor+0x80/0xa0 [ 2724.077051][T24631] splice_direct_to_actor+0x345/0x650 [ 2724.082524][T24631] ? do_splice_direct+0x170/0x170 [ 2724.087581][T24631] do_splice_direct+0xf5/0x170 [ 2724.092339][T24631] do_sendfile+0x618/0xb90 [ 2724.096821][T24631] __x64_sys_sendfile64+0xf2/0x130 [ 2724.102064][T24631] do_syscall_64+0x3d/0x90 [ 2724.106524][T24631] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2724.112508][T24631] RIP: 0033:0x4665f9 [ 2724.116379][T24631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.136056][T24631] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2724.144449][T24631] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2724.152404][T24631] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2724.160415][T24631] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2724.168384][T24631] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000002 [ 2724.176470][T24631] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:07:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x736abe, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:58 executing program 2 (fault-call:6 fault-nth:13): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xc6, 0x6, 0x0, 0x7f, 0x0, 0x63, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x53, 0x4, @perf_bp={&(0x7f00000001c0), 0xd}, 0x10000, 0x0, 0xd2b, 0x2, 0x40, 0x30f, 0xffff, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xf, r0, 0xb) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105000, 0x62) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 02:07:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0xe00000000000000, 0x0, 0x0, 0x0) 02:07:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x74b423, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:07:58 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:07:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2726.628044][T24674] FAULT_INJECTION: forcing a failure. [ 2726.628044][T24674] name failslab, interval 1, probability 0, space 0, times 0 [ 2726.640835][T24674] CPU: 1 PID: 24674 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2726.650647][T24674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2726.660741][T24674] Call Trace: [ 2726.664019][T24674] dump_stack_lvl+0xb7/0x103 [ 2726.668614][T24674] dump_stack+0x11/0x1a [ 2726.672793][T24674] should_fail+0x23c/0x250 02:07:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x7, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2726.677719][T24674] ? kcalloc+0x32/0x50 [ 2726.681781][T24674] __should_failslab+0x81/0x90 [ 2726.686537][T24674] should_failslab+0x5/0x20 [ 2726.691033][T24674] __kmalloc+0x66/0x340 [ 2726.695181][T24674] kcalloc+0x32/0x50 [ 2726.699104][T24674] ext4_find_extent+0x21c/0x7f0 [ 2726.703953][T24674] ? dd_has_work+0x242/0x250 [ 2726.708685][T24674] ? blk_mq_do_dispatch_sched+0x619/0x640 [ 2726.714831][T24674] ext4_ext_map_blocks+0xd9/0x1f10 [ 2726.719957][T24674] ? __perf_event_task_sched_in+0x7e7/0x850 [ 2726.725852][T24674] ? __down_write_common+0x42/0x810 [ 2726.731219][T24674] ? rb_erase+0x4bb/0x750 [ 2726.735599][T24674] ? percpu_counter_add_batch+0x69/0xd0 [ 2726.741154][T24674] ? ext4_es_lookup_extent+0x36b/0x490 [ 2726.746615][T24674] ext4_map_blocks+0x70d/0xef0 [ 2726.751387][T24674] ? ext4_iomap_begin+0x3f7/0x620 [ 2726.756413][T24674] ? __cond_resched+0x2a/0x40 [ 2726.761157][T24674] ext4_iomap_begin+0x4a0/0x620 [ 2726.766307][T24674] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2726.771507][T24674] iomap_iter+0x39c/0x470 02:07:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x22, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2726.776002][T24674] ? __iomap_dio_rw+0x12a/0xfa0 [ 2726.780899][T24674] __iomap_dio_rw+0x63c/0xfa0 [ 2726.785846][T24674] iomap_dio_rw+0x30/0x70 [ 2726.790222][T24674] ? ext4_file_write_iter+0x471/0x11a0 [ 2726.795701][T24674] ext4_file_write_iter+0xa5e/0x11a0 [ 2726.801009][T24674] ? ext4_file_write_iter+0x471/0x11a0 [ 2726.806611][T24674] ? avc_policy_seqno+0x22/0x30 [ 2726.811463][T24674] do_iter_readv_writev+0x2cd/0x370 [ 2726.816802][T24674] do_iter_write+0x192/0x5c0 [ 2726.821395][T24674] ? splice_from_pipe_next+0x34f/0x3b0 02:07:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x981, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:07:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x25ff, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2726.826854][T24674] ? kmalloc_array+0x2d/0x40 [ 2726.831526][T24674] vfs_iter_write+0x4c/0x70 [ 2726.836158][T24674] iter_file_splice_write+0x40a/0x750 [ 2726.842394][T24674] ? splice_from_pipe+0xc0/0xc0 [ 2726.847249][T24674] direct_splice_actor+0x80/0xa0 [ 2726.852185][T24674] splice_direct_to_actor+0x345/0x650 [ 2726.857618][T24674] ? do_splice_direct+0x170/0x170 [ 2726.862634][T24674] do_splice_direct+0xf5/0x170 [ 2726.867392][T24674] do_sendfile+0x618/0xb90 [ 2726.871814][T24674] __x64_sys_sendfile64+0xf2/0x130 [ 2726.876926][T24674] do_syscall_64+0x3d/0x90 [ 2726.881340][T24674] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2726.887248][T24674] RIP: 0033:0x4665f9 [ 2726.891240][T24674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2726.911166][T24674] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2726.919776][T24674] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 02:07:58 executing program 2 (fault-call:6 fault-nth:14): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:07:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2726.927741][T24674] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2726.935842][T24674] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2726.943973][T24674] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000002 [ 2726.952185][T24674] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 [ 2727.083511][T24697] FAULT_INJECTION: forcing a failure. [ 2727.083511][T24697] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.096371][T24697] CPU: 0 PID: 24697 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2727.106174][T24697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2727.116308][T24697] Call Trace: [ 2727.119572][T24697] dump_stack_lvl+0xb7/0x103 [ 2727.124212][T24697] dump_stack+0x11/0x1a [ 2727.128366][T24697] should_fail+0x23c/0x250 [ 2727.132818][T24697] ? ext4_mb_new_blocks+0x2e7/0x1f90 [ 2727.138098][T24697] __should_failslab+0x81/0x90 [ 2727.142854][T24697] should_failslab+0x5/0x20 [ 2727.147352][T24697] kmem_cache_alloc+0x46/0x2e0 [ 2727.152104][T24697] ext4_mb_new_blocks+0x2e7/0x1f90 [ 2727.157214][T24697] ? ext4_find_extent+0x7b2/0x7f0 [ 2727.162285][T24697] ? ext4_ext_search_right+0x246/0x540 [ 2727.167792][T24697] ext4_ext_map_blocks+0x1579/0x1f10 [ 2727.173071][T24697] ? ext4_es_lookup_extent+0x36b/0x490 [ 2727.178524][T24697] ext4_map_blocks+0x70d/0xef0 [ 2727.183331][T24697] ? ext4_iomap_begin+0x3f7/0x620 [ 2727.188428][T24697] ? __cond_resched+0x11/0x40 [ 2727.193140][T24697] ext4_iomap_begin+0x4a0/0x620 [ 2727.198015][T24697] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2727.203283][T24697] iomap_iter+0x39c/0x470 [ 2727.207678][T24697] ? __iomap_dio_rw+0x12a/0xfa0 [ 2727.212535][T24697] __iomap_dio_rw+0x63c/0xfa0 [ 2727.217229][T24697] iomap_dio_rw+0x30/0x70 [ 2727.221536][T24697] ? ext4_file_write_iter+0x471/0x11a0 [ 2727.226994][T24697] ext4_file_write_iter+0xa5e/0x11a0 [ 2727.232348][T24697] ? ext4_file_write_iter+0x471/0x11a0 [ 2727.237793][T24697] ? avc_policy_seqno+0x22/0x30 [ 2727.242650][T24697] do_iter_readv_writev+0x2cd/0x370 [ 2727.247912][T24697] do_iter_write+0x192/0x5c0 [ 2727.252603][T24697] ? splice_from_pipe_next+0x34f/0x3b0 [ 2727.258062][T24697] ? kmalloc_array+0x2d/0x40 [ 2727.262641][T24697] vfs_iter_write+0x4c/0x70 [ 2727.267184][T24697] iter_file_splice_write+0x40a/0x750 [ 2727.272567][T24697] ? splice_from_pipe+0xc0/0xc0 [ 2727.277412][T24697] direct_splice_actor+0x80/0xa0 [ 2727.282338][T24697] splice_direct_to_actor+0x345/0x650 [ 2727.287696][T24697] ? do_splice_direct+0x170/0x170 [ 2727.292887][T24697] do_splice_direct+0xf5/0x170 [ 2727.297640][T24697] do_sendfile+0x618/0xb90 [ 2727.302057][T24697] __x64_sys_sendfile64+0xf2/0x130 [ 2727.307338][T24697] do_syscall_64+0x3d/0x90 [ 2727.311806][T24697] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2727.317698][T24697] RIP: 0033:0x4665f9 [ 2727.321581][T24697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2727.341301][T24697] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2727.349689][T24697] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2727.357638][T24697] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2727.365595][T24697] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2727.373548][T24697] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000002 02:07:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xea}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2727.381500][T24697] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:07:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x1e00000000000000, 0x0, 0x0, 0x0) 02:07:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x2, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:01 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000000c0)={{}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000000)="7ba41e4972090e82874f7e9d0a1adec0", 0x10) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000100)) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:08:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x75acaf, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:01 executing program 2 (fault-call:6 fault-nth:15): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:08:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x3, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:01 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0) 02:08:01 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}, {r2, r3+60000000}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000344000/0x2000)=nil, 0x2000, 0x2000007, 0x11, r4, 0x55a0b000) mq_timedsend(r4, &(0x7f00000001c0)="a36287161c5f3c3a0a782a4f6297de224b0166d0ce2a1714572d0799d772b5d95886251527b82b0acec2dfc460a3e5a654f3a4bea41c36ba4e71fd1dd71513e66fc2fe", 0x43, 0x8001, &(0x7f0000000240)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x77359400}}, &(0x7f00000003c0)) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r5, 0x0, 0x0, 0x0, 0x40002260, 0x1, {0xfffb, r6}}, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) 02:08:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x4, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x6, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2729.703483][T24752] FAULT_INJECTION: forcing a failure. [ 2729.703483][T24752] name failslab, interval 1, probability 0, space 0, times 0 [ 2729.716241][T24752] CPU: 0 PID: 24752 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2729.726047][T24752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2729.736163][T24752] Call Trace: [ 2729.739480][T24752] dump_stack_lvl+0xb7/0x103 [ 2729.744075][T24752] dump_stack+0x11/0x1a [ 2729.748319][T24752] should_fail+0x23c/0x250 [ 2729.752738][T24752] ? ext4_mb_new_blocks+0x70f/0x1f90 [ 2729.758105][T24752] __should_failslab+0x81/0x90 [ 2729.762868][T24752] should_failslab+0x5/0x20 [ 2729.767386][T24752] kmem_cache_alloc+0x46/0x2e0 [ 2729.772227][T24752] ext4_mb_new_blocks+0x70f/0x1f90 [ 2729.777391][T24752] ? ext4_find_extent+0x7b2/0x7f0 [ 2729.782424][T24752] ? ext4_ext_search_right+0x246/0x540 [ 2729.787912][T24752] ext4_ext_map_blocks+0x1579/0x1f10 [ 2729.793190][T24752] ? ext4_es_lookup_extent+0x36b/0x490 [ 2729.798663][T24752] ext4_map_blocks+0x70d/0xef0 [ 2729.803550][T24752] ? ext4_iomap_begin+0x3f7/0x620 [ 2729.808599][T24752] ? __cond_resched+0x11/0x40 [ 2729.813315][T24752] ext4_iomap_begin+0x4a0/0x620 [ 2729.818289][T24752] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2729.823756][T24752] iomap_iter+0x39c/0x470 [ 2729.828161][T24752] ? __iomap_dio_rw+0x12a/0xfa0 [ 2729.833066][T24752] __iomap_dio_rw+0x63c/0xfa0 [ 2729.837738][T24752] iomap_dio_rw+0x30/0x70 [ 2729.842065][T24752] ? ext4_file_write_iter+0x471/0x11a0 02:08:01 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x2b, 0x2}, &(0x7f0000000140)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x0, &(0x7f0000006c00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006a80)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000300)=""/57, 0x39}], 0x4, &(0x7f0000000600)=""/210, 0xd2}, 0x1000}, {{&(0x7f0000000700)=@ipx, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/233, 0xe9}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000980)=""/67, 0x43}, {&(0x7f0000000a00)=""/105, 0x69}], 0x4, &(0x7f0000000ac0)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000001ac0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001b40)=""/152, 0x98}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x2}, 0x10000}, {{&(0x7f0000002c40)=@l2, 0x80, &(0x7f0000004080)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/96, 0x60}, {&(0x7f0000003d40)=""/182, 0xb6}, {&(0x7f0000003e00)=""/214, 0xd6}, {&(0x7f0000003f00)=""/99, 0x63}, {&(0x7f0000003f80)=""/83, 0x53}, {&(0x7f0000004000)=""/120, 0x78}], 0x7, &(0x7f0000004100)=""/4096, 0x1000}, 0x42f39b0b}, {{&(0x7f0000005100)=@hci, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005180)=""/47, 0x2f}, {&(0x7f00000051c0)=""/179, 0xb3}, {&(0x7f0000005280)=""/36, 0x24}, {&(0x7f00000052c0)=""/49, 0x31}, {&(0x7f0000005300)=""/38, 0x26}, {&(0x7f0000005340)=""/92, 0x5c}], 0x6, &(0x7f0000005440)=""/185, 0xb9}, 0x8e}, {{&(0x7f0000005500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000006940)=[{&(0x7f0000005580)=""/145, 0x91}, {&(0x7f0000005640)=""/154, 0x9a}, {&(0x7f0000005700)=""/253, 0xfd}, {&(0x7f0000005800)}, {&(0x7f0000005840)=""/231, 0xe7}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x6, &(0x7f00000069c0)=""/157, 0x9d}, 0x80000001}], 0x6, 0x40, &(0x7f0000006c40)={r4, r5+10000000}) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:08:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x7, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2729.847550][T24752] ext4_file_write_iter+0xa5e/0x11a0 [ 2729.854479][T24752] ? ext4_file_write_iter+0x471/0x11a0 [ 2729.860000][T24752] do_iter_readv_writev+0x2cd/0x370 [ 2729.865196][T24752] do_iter_write+0x192/0x5c0 [ 2729.869923][T24752] ? splice_from_pipe_next+0x34f/0x3b0 [ 2729.875377][T24752] ? kmalloc_array+0x2d/0x40 [ 2729.879959][T24752] vfs_iter_write+0x4c/0x70 [ 2729.884588][T24752] iter_file_splice_write+0x40a/0x750 [ 2729.890023][T24752] ? splice_from_pipe+0xc0/0xc0 [ 2729.894871][T24752] direct_splice_actor+0x80/0xa0 02:08:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x8, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x10, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2729.899808][T24752] splice_direct_to_actor+0x345/0x650 [ 2729.905176][T24752] ? do_splice_direct+0x170/0x170 [ 2729.910219][T24752] do_splice_direct+0xf5/0x170 [ 2729.914973][T24752] do_sendfile+0x618/0xb90 [ 2729.919551][T24752] __x64_sys_sendfile64+0xf2/0x130 [ 2729.924662][T24752] do_syscall_64+0x3d/0x90 [ 2729.929073][T24752] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2729.935162][T24752] RIP: 0033:0x4665f9 [ 2729.939118][T24752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2729.958874][T24752] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2729.967278][T24752] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2729.975676][T24752] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2729.983974][T24752] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2729.991959][T24752] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000002 [ 2729.999996][T24752] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:08:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x768e07, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x42, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:02 executing program 2 (fault-call:6 fault-nth:16): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) [ 2730.597821][T24790] FAULT_INJECTION: forcing a failure. [ 2730.597821][T24790] name failslab, interval 1, probability 0, space 0, times 0 [ 2730.610615][T24790] CPU: 1 PID: 24790 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2730.620413][T24790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2730.630521][T24790] Call Trace: [ 2730.633791][T24790] dump_stack_lvl+0xb7/0x103 [ 2730.638438][T24790] dump_stack+0x11/0x1a [ 2730.642590][T24790] should_fail+0x23c/0x250 [ 2730.647086][T24790] ? __es_insert_extent+0x51f/0xe70 [ 2730.652277][T24790] __should_failslab+0x81/0x90 [ 2730.657025][T24790] should_failslab+0x5/0x20 [ 2730.661610][T24790] kmem_cache_alloc+0x46/0x2e0 [ 2730.666375][T24790] __es_insert_extent+0x51f/0xe70 [ 2730.671437][T24790] ext4_es_insert_extent+0x1bb/0x19d0 [ 2730.676784][T24790] ? ext4_es_lookup_extent+0x36b/0x490 [ 2730.682218][T24790] ext4_map_blocks+0xa4c/0xef0 [ 2730.686971][T24790] ? ext4_iomap_begin+0x3f7/0x620 [ 2730.691973][T24790] ? __cond_resched+0x11/0x40 [ 2730.696630][T24790] ext4_iomap_begin+0x4a0/0x620 [ 2730.701514][T24790] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2730.706972][T24790] iomap_iter+0x39c/0x470 [ 2730.711507][T24790] ? __iomap_dio_rw+0x12a/0xfa0 [ 2730.716357][T24790] __iomap_dio_rw+0x63c/0xfa0 [ 2730.721010][T24790] iomap_dio_rw+0x30/0x70 [ 2730.725401][T24790] ? ext4_file_write_iter+0x471/0x11a0 [ 2730.730838][T24790] ext4_file_write_iter+0xa5e/0x11a0 [ 2730.736106][T24790] ? ext4_file_write_iter+0x471/0x11a0 [ 2730.741557][T24790] ? avc_policy_seqno+0x22/0x30 [ 2730.746458][T24790] do_iter_readv_writev+0x2cd/0x370 [ 2730.751712][T24790] do_iter_write+0x192/0x5c0 [ 2730.756405][T24790] ? splice_from_pipe_next+0x34f/0x3b0 [ 2730.761861][T24790] ? kmalloc_array+0x2d/0x40 [ 2730.766422][T24790] vfs_iter_write+0x4c/0x70 [ 2730.770930][T24790] iter_file_splice_write+0x40a/0x750 [ 2730.776321][T24790] ? splice_from_pipe+0xc0/0xc0 [ 2730.781151][T24790] direct_splice_actor+0x80/0xa0 [ 2730.786060][T24790] splice_direct_to_actor+0x345/0x650 [ 2730.791406][T24790] ? do_splice_direct+0x170/0x170 [ 2730.796403][T24790] do_splice_direct+0xf5/0x170 [ 2730.801157][T24790] do_sendfile+0x618/0xb90 [ 2730.805599][T24790] __x64_sys_sendfile64+0xf2/0x130 [ 2730.810690][T24790] do_syscall_64+0x3d/0x90 [ 2730.815083][T24790] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2730.820970][T24790] RIP: 0033:0x4665f9 [ 2730.824840][T24790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2730.844424][T24790] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2730.852824][T24790] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2730.860869][T24790] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2730.868905][T24790] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2730.876853][T24790] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000002 [ 2730.884811][T24790] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:08:04 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x88}], 0x1, &(0x7f0000000200)={r3, r4+60000000}, &(0x7f0000000240)={[0x3]}, 0x8) 02:08:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 02:08:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x60, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:04 executing program 2 (fault-call:6 fault-nth:17): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:08:04 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x77bc4b, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2732.686455][T24810] FAULT_INJECTION: forcing a failure. [ 2732.686455][T24810] name failslab, interval 1, probability 0, space 0, times 0 [ 2732.699210][T24810] CPU: 0 PID: 24810 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2732.709086][T24810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2732.719132][T24810] Call Trace: [ 2732.722433][T24810] dump_stack_lvl+0xb7/0x103 [ 2732.727081][T24810] dump_stack+0x11/0x1a [ 2732.731239][T24810] should_fail+0x23c/0x250 [ 2732.735649][T24810] ? mempool_alloc_slab+0x16/0x20 [ 2732.740671][T24810] __should_failslab+0x81/0x90 [ 2732.745444][T24810] should_failslab+0x5/0x20 [ 2732.750069][T24810] kmem_cache_alloc+0x46/0x2e0 [ 2732.754833][T24810] ? ext4_fc_track_range+0x80/0x130 [ 2732.760095][T24810] mempool_alloc_slab+0x16/0x20 [ 2732.764959][T24810] ? mempool_free+0x130/0x130 [ 2732.769647][T24810] mempool_alloc+0x8c/0x300 [ 2732.774141][T24810] ? ext4_iomap_begin+0x3f7/0x620 [ 2732.779408][T24810] ? ext4_set_iomap+0x43a/0x460 [ 2732.784272][T24810] bio_alloc_bioset+0xcc/0x530 [ 2732.789033][T24810] ? iov_iter_alignment+0x34b/0x370 [ 2732.794232][T24810] iomap_dio_bio_iter+0x5c1/0xbc0 [ 2732.799493][T24810] __iomap_dio_rw+0x87d/0xfa0 [ 2732.804226][T24810] iomap_dio_rw+0x30/0x70 [ 2732.808550][T24810] ? ext4_file_write_iter+0x471/0x11a0 [ 2732.813998][T24810] ext4_file_write_iter+0xa5e/0x11a0 [ 2732.819450][T24810] ? ext4_file_write_iter+0x471/0x11a0 [ 2732.824901][T24810] ? avc_policy_seqno+0x22/0x30 [ 2732.829768][T24810] do_iter_readv_writev+0x2cd/0x370 02:08:04 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:08:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xaf, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2732.835004][T24810] do_iter_write+0x192/0x5c0 [ 2732.839596][T24810] ? splice_from_pipe_next+0x34f/0x3b0 [ 2732.845043][T24810] ? kmalloc_array+0x2d/0x40 [ 2732.849669][T24810] vfs_iter_write+0x4c/0x70 [ 2732.854172][T24810] iter_file_splice_write+0x40a/0x750 [ 2732.859546][T24810] ? splice_from_pipe+0xc0/0xc0 [ 2732.864391][T24810] direct_splice_actor+0x80/0xa0 [ 2732.869318][T24810] splice_direct_to_actor+0x345/0x650 [ 2732.874761][T24810] ? do_splice_direct+0x170/0x170 [ 2732.879890][T24810] do_splice_direct+0xf5/0x170 [ 2732.884645][T24810] do_sendfile+0x618/0xb90 [ 2732.889121][T24810] __x64_sys_sendfile64+0xf2/0x130 [ 2732.894288][T24810] do_syscall_64+0x3d/0x90 [ 2732.898701][T24810] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2732.904749][T24810] RIP: 0033:0x4665f9 [ 2732.908656][T24810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2732.928372][T24810] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 02:08:04 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000140)={{r4, r5+60000000}, {0x0, 0x3938700}}, &(0x7f00000001c0)) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:08:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x193, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2732.936808][T24810] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2732.944984][T24810] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2732.952957][T24810] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2732.961045][T24810] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000002 [ 2732.969065][T24810] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:08:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x198, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x19e, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:05 executing program 2 (fault-call:6 fault-nth:18): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) [ 2733.164508][T24836] FAULT_INJECTION: forcing a failure. [ 2733.164508][T24836] name failslab, interval 1, probability 0, space 0, times 0 [ 2733.177406][T24836] CPU: 0 PID: 24836 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2733.187209][T24836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2733.197257][T24836] Call Trace: [ 2733.200532][T24836] dump_stack_lvl+0xb7/0x103 [ 2733.205124][T24836] dump_stack+0x11/0x1a [ 2733.209286][T24836] should_fail+0x23c/0x250 [ 2733.213693][T24836] ? mempool_alloc_slab+0x16/0x20 [ 2733.218755][T24836] __should_failslab+0x81/0x90 [ 2733.223570][T24836] should_failslab+0x5/0x20 [ 2733.228075][T24836] kmem_cache_alloc+0x46/0x2e0 [ 2733.232846][T24836] ? __crc32c_le_base+0x23a/0x330 [ 2733.237868][T24836] ? rb_erase+0x4bb/0x750 [ 2733.242263][T24836] mempool_alloc_slab+0x16/0x20 [ 2733.247102][T24836] ? mempool_free+0x130/0x130 [ 2733.251893][T24836] mempool_alloc+0x8c/0x300 [ 2733.256385][T24836] ? chksum_update+0x39/0x50 [ 2733.260990][T24836] ? crypto_shash_update+0x12c/0x190 [ 2733.266281][T24836] sg_pool_alloc+0x74/0x90 [ 2733.270701][T24836] __sg_alloc_table+0xce/0x290 [ 2733.275467][T24836] sg_alloc_table_chained+0xaf/0x140 [ 2733.280855][T24836] ? sg_alloc_table_chained+0x140/0x140 [ 2733.286415][T24836] scsi_alloc_sgtables+0x184/0x510 [ 2733.291545][T24836] ? __brelse+0x2c/0x50 [ 2733.295709][T24836] sd_init_command+0x952/0x1610 [ 2733.300551][T24836] scsi_queue_rq+0x10cd/0x15a0 [ 2733.305313][T24836] blk_mq_dispatch_rq_list+0x695/0x1040 [ 2733.311137][T24836] ? __sbitmap_queue_get+0x11/0x20 [ 2733.316569][T24836] blk_mq_do_dispatch_sched+0x3b5/0x640 [ 2733.322282][T24836] __blk_mq_sched_dispatch_requests+0x1eb/0x290 [ 2733.328620][T24836] ? rb_insert_color+0x2fa/0x310 [ 2733.333645][T24836] blk_mq_sched_dispatch_requests+0x9f/0x110 [ 2733.339626][T24836] __blk_mq_run_hw_queue+0xbc/0x140 [ 2733.344836][T24836] __blk_mq_delay_run_hw_queue+0x163/0x2f0 [ 2733.350627][T24836] blk_mq_run_hw_queue+0x22c/0x250 [ 2733.355918][T24836] blk_mq_sched_insert_requests+0x12b/0x1f0 [ 2733.363080][T24836] blk_mq_flush_plug_list+0x2f2/0x3c0 [ 2733.368443][T24836] blk_flush_plug_list+0x235/0x260 [ 2733.373578][T24836] blk_finish_plug+0x44/0x60 [ 2733.378180][T24836] __iomap_dio_rw+0xc38/0xfa0 [ 2733.382912][T24836] iomap_dio_rw+0x30/0x70 [ 2733.387556][T24836] ? ext4_file_write_iter+0x471/0x11a0 [ 2733.393087][T24836] ext4_file_write_iter+0xa5e/0x11a0 [ 2733.398360][T24836] ? ext4_file_write_iter+0x471/0x11a0 [ 2733.404161][T24836] ? avc_policy_seqno+0x22/0x30 [ 2733.409168][T24836] do_iter_readv_writev+0x2cd/0x370 [ 2733.414607][T24836] do_iter_write+0x192/0x5c0 [ 2733.419181][T24836] ? splice_from_pipe_next+0x34f/0x3b0 [ 2733.424623][T24836] ? kmalloc_array+0x2d/0x40 [ 2733.429536][T24836] vfs_iter_write+0x4c/0x70 [ 2733.434304][T24836] iter_file_splice_write+0x40a/0x750 [ 2733.439853][T24836] ? splice_from_pipe+0xc0/0xc0 [ 2733.444738][T24836] direct_splice_actor+0x80/0xa0 [ 2733.449717][T24836] splice_direct_to_actor+0x345/0x650 [ 2733.455213][T24836] ? do_splice_direct+0x170/0x170 [ 2733.460228][T24836] do_splice_direct+0xf5/0x170 [ 2733.465007][T24836] do_sendfile+0x618/0xb90 [ 2733.469682][T24836] __x64_sys_sendfile64+0xf2/0x130 [ 2733.474889][T24836] do_syscall_64+0x3d/0x90 [ 2733.479379][T24836] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2733.485268][T24836] RIP: 0033:0x4665f9 [ 2733.489144][T24836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2733.508856][T24836] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2733.517506][T24836] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2733.525669][T24836] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2733.533635][T24836] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2733.541586][T24836] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000002 [ 2733.549576][T24836] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:08:07 executing program 5: timer_create(0x0, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x2b, 0x2}, &(0x7f0000000140)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x0, &(0x7f0000006c00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006a80)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000300)=""/57, 0x39}], 0x4, &(0x7f0000000600)=""/210, 0xd2}, 0x1000}, {{&(0x7f0000000700)=@ipx, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/233, 0xe9}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000980)=""/67, 0x43}, {&(0x7f0000000a00)=""/105, 0x69}], 0x4, &(0x7f0000000ac0)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000001ac0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001b40)=""/152, 0x98}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x2}, 0x10000}, {{&(0x7f0000002c40)=@l2, 0x80, &(0x7f0000004080)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/96, 0x60}, {&(0x7f0000003d40)=""/182, 0xb6}, {&(0x7f0000003e00)=""/214, 0xd6}, {&(0x7f0000003f00)=""/99, 0x63}, {&(0x7f0000003f80)=""/83, 0x53}, {&(0x7f0000004000)=""/120, 0x78}], 0x7, &(0x7f0000004100)=""/4096, 0x1000}, 0x42f39b0b}, {{&(0x7f0000005100)=@hci, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005180)=""/47, 0x2f}, {&(0x7f00000051c0)=""/179, 0xb3}, {&(0x7f0000005280)=""/36, 0x24}, {&(0x7f00000052c0)=""/49, 0x31}, {&(0x7f0000005300)=""/38, 0x26}, {&(0x7f0000005340)=""/92, 0x5c}], 0x6, &(0x7f0000005440)=""/185, 0xb9}, 0x8e}, {{&(0x7f0000005500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000006940)=[{&(0x7f0000005580)=""/145, 0x91}, {&(0x7f0000005640)=""/154, 0x9a}, {&(0x7f0000005700)=""/253, 0xfd}, {&(0x7f0000005800)}, {&(0x7f0000005840)=""/231, 0xe7}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x6, &(0x7f00000069c0)=""/157, 0x9d}, 0x80000001}], 0x6, 0x40, &(0x7f0000006c40)={r4, r5+10000000}) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 02:08:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x3b7256d87acb6955, &(0x7f0000000080)={0x0, 0x39, 0x1}, &(0x7f00000001c0)=0x0) timer_gettime(r1, &(0x7f0000000200)) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 02:08:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x1c6, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x7) 02:08:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x78e843, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:07 executing program 2 (fault-call:6 fault-nth:19): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:08:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x204, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x239, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2735.687518][T24872] FAULT_INJECTION: forcing a failure. [ 2735.687518][T24872] name failslab, interval 1, probability 0, space 0, times 0 [ 2735.700308][T24872] CPU: 0 PID: 24872 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2735.710302][T24872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2735.720698][T24872] Call Trace: [ 2735.724190][T24872] dump_stack_lvl+0xb7/0x103 [ 2735.728782][T24872] dump_stack+0x11/0x1a [ 2735.733023][T24872] should_fail+0x23c/0x250 [ 2735.737467][T24872] ? kmalloc_array+0x2d/0x40 [ 2735.742230][T24872] __should_failslab+0x81/0x90 [ 2735.746988][T24872] should_failslab+0x5/0x20 [ 2735.751627][T24872] __kmalloc+0x66/0x340 [ 2735.755777][T24872] ? ktime_get_coarse_real_ts64+0x10d/0x120 [ 2735.762199][T24872] ? splice_from_pipe+0xc0/0xc0 [ 2735.767101][T24872] kmalloc_array+0x2d/0x40 [ 2735.775363][T24872] iter_file_splice_write+0xc6/0x750 [ 2735.780647][T24872] ? atime_needs_update+0x2ba/0x390 [ 2735.786280][T24872] ? touch_atime+0xcf/0x240 [ 2735.790773][T24872] ? generic_file_splice_read+0x286/0x310 [ 2735.796563][T24872] ? splice_from_pipe+0xc0/0xc0 [ 2735.801407][T24872] direct_splice_actor+0x80/0xa0 [ 2735.806422][T24872] splice_direct_to_actor+0x345/0x650 [ 2735.811853][T24872] ? do_splice_direct+0x170/0x170 [ 2735.816896][T24872] do_splice_direct+0xf5/0x170 [ 2735.821649][T24872] do_sendfile+0x618/0xb90 [ 2735.826126][T24872] __x64_sys_sendfile64+0xf2/0x130 [ 2735.831313][T24872] do_syscall_64+0x3d/0x90 02:08:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x260, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x266, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2735.835769][T24872] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2735.841669][T24872] RIP: 0033:0x4665f9 [ 2735.845558][T24872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2735.865301][T24872] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2735.873802][T24872] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 02:08:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x26c, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:07 executing program 2 (fault-call:6 fault-nth:20): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) [ 2735.881769][T24872] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2735.889787][T24872] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2735.897754][T24872] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000002 [ 2735.905733][T24872] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 [ 2736.024049][T24890] FAULT_INJECTION: forcing a failure. [ 2736.024049][T24890] name failslab, interval 1, probability 0, space 0, times 0 [ 2736.036790][T24890] CPU: 0 PID: 24890 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2736.046613][T24890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2736.056659][T24890] Call Trace: [ 2736.059926][T24890] dump_stack_lvl+0xb7/0x103 [ 2736.064513][T24890] dump_stack+0x11/0x1a [ 2736.068755][T24890] should_fail+0x23c/0x250 [ 2736.073255][T24890] __should_failslab+0x81/0x90 [ 2736.078034][T24890] ? __iomap_dio_rw+0x12a/0xfa0 [ 2736.082884][T24890] should_failslab+0x5/0x20 [ 2736.087388][T24890] kmem_cache_alloc_trace+0x49/0x310 [ 2736.092837][T24890] __iomap_dio_rw+0x12a/0xfa0 [ 2736.097582][T24890] ? ext4_dirty_inode+0x58/0xa0 [ 2736.102548][T24890] ? __ext4_journal_stop+0x47/0x110 [ 2736.107745][T24890] iomap_dio_rw+0x30/0x70 [ 2736.112114][T24890] ? ext4_file_write_iter+0x471/0x11a0 [ 2736.117570][T24890] ext4_file_write_iter+0xa5e/0x11a0 [ 2736.122857][T24890] ? ext4_file_write_iter+0x471/0x11a0 [ 2736.128399][T24890] ? avc_policy_seqno+0x22/0x30 [ 2736.133247][T24890] do_iter_readv_writev+0x2cd/0x370 [ 2736.138472][T24890] do_iter_write+0x192/0x5c0 [ 2736.143144][T24890] ? splice_from_pipe_next+0x34f/0x3b0 [ 2736.148623][T24890] ? kmalloc_array+0x2d/0x40 [ 2736.153263][T24890] vfs_iter_write+0x4c/0x70 [ 2736.157753][T24890] iter_file_splice_write+0x40a/0x750 [ 2736.163130][T24890] ? splice_from_pipe+0xc0/0xc0 [ 2736.167987][T24890] direct_splice_actor+0x80/0xa0 [ 2736.172992][T24890] splice_direct_to_actor+0x345/0x650 [ 2736.178359][T24890] ? do_splice_direct+0x170/0x170 [ 2736.183451][T24890] do_splice_direct+0xf5/0x170 [ 2736.188199][T24890] do_sendfile+0x618/0xb90 [ 2736.192621][T24890] __x64_sys_sendfile64+0xf2/0x130 [ 2736.198168][T24890] do_syscall_64+0x3d/0x90 [ 2736.202607][T24890] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2736.208506][T24890] RIP: 0033:0x4665f9 [ 2736.212438][T24890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2736.232257][T24890] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2736.240744][T24890] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 2736.248795][T24890] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2736.256748][T24890] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2736.264718][T24890] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000002 [ 2736.272677][T24890] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:08:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xc6, 0x6, 0x0, 0x7f, 0x0, 0x63, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x53, 0x4, @perf_bp={&(0x7f00000001c0), 0xd}, 0x10000, 0x0, 0xd2b, 0x2, 0x40, 0x30f, 0xffff, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xf, r0, 0xb) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105000, 0x62) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 02:08:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x300, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:10 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000002c0)={0x0, "eeb3df7a40d1527123e13af21958d9c4"}) clock_settime(0x7, &(0x7f0000000080)={0x0, 0x3938700}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000012c0)={r3, 0x48, 0x0, 0x1}) 02:08:10 executing program 2 (fault-call:6 fault-nth:21): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:08:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x7abe79, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xe) 02:08:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x402, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x406, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2738.683141][T24926] FAULT_INJECTION: forcing a failure. [ 2738.683141][T24926] name failslab, interval 1, probability 0, space 0, times 0 [ 2738.695967][T24926] CPU: 0 PID: 24926 Comm: syz-executor.2 Tainted: G W 5.14.0-syzkaller #0 [ 2738.705768][T24926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2738.715820][T24926] Call Trace: [ 2738.719107][T24926] dump_stack_lvl+0xb7/0x103 [ 2738.723701][T24926] dump_stack+0x11/0x1a [ 2738.727934][T24926] should_fail+0x23c/0x250 [ 2738.732521][T24926] ? kcalloc+0x32/0x50 [ 2738.736651][T24926] __should_failslab+0x81/0x90 [ 2738.741431][T24926] should_failslab+0x5/0x20 [ 2738.746107][T24926] __kmalloc+0x66/0x340 [ 2738.750534][T24926] kcalloc+0x32/0x50 [ 2738.754423][T24926] ext4_find_extent+0x21c/0x7f0 [ 2738.759271][T24926] ? dd_has_work+0x242/0x250 [ 2738.763947][T24926] ? blk_mq_do_dispatch_sched+0x619/0x640 [ 2738.769694][T24926] ext4_ext_map_blocks+0xd9/0x1f10 [ 2738.775046][T24926] ? __down_write_common+0x42/0x810 [ 2738.780362][T24926] ? __blk_mq_sched_dispatch_requests+0x1eb/0x290 [ 2738.786800][T24926] ? percpu_counter_add_batch+0x69/0xd0 [ 2738.792556][T24926] ? ext4_es_lookup_extent+0x36b/0x490 [ 2738.798026][T24926] ext4_map_blocks+0x70d/0xef0 [ 2738.802986][T24926] ? ext4_iomap_begin+0x3f7/0x620 [ 2738.808214][T24926] ? __cond_resched+0x11/0x40 [ 2738.812949][T24926] ext4_iomap_begin+0x4a0/0x620 [ 2738.817858][T24926] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 2738.823067][T24926] iomap_iter+0x39c/0x470 [ 2738.827468][T24926] ? __iomap_dio_rw+0x12a/0xfa0 02:08:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x4e7, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x600, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2738.832327][T24926] __iomap_dio_rw+0x63c/0xfa0 [ 2738.837030][T24926] iomap_dio_rw+0x30/0x70 [ 2738.841499][T24926] ? ext4_file_write_iter+0x471/0x11a0 [ 2738.846968][T24926] ext4_file_write_iter+0xa5e/0x11a0 [ 2738.852477][T24926] ? ext4_file_write_iter+0x471/0x11a0 [ 2738.857950][T24926] ? avc_policy_seqno+0x22/0x30 [ 2738.863347][T24926] do_iter_readv_writev+0x2cd/0x370 [ 2738.868630][T24926] do_iter_write+0x192/0x5c0 [ 2738.873748][T24926] ? splice_from_pipe_next+0x34f/0x3b0 [ 2738.879201][T24926] ? kmalloc_array+0x2d/0x40 02:08:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x604, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2738.883881][T24926] vfs_iter_write+0x4c/0x70 [ 2738.888420][T24926] iter_file_splice_write+0x40a/0x750 [ 2738.893806][T24926] ? splice_from_pipe+0xc0/0xc0 [ 2738.898816][T24926] direct_splice_actor+0x80/0xa0 [ 2738.903752][T24926] splice_direct_to_actor+0x345/0x650 [ 2738.909361][T24926] ? do_splice_direct+0x170/0x170 [ 2738.914465][T24926] do_splice_direct+0xf5/0x170 [ 2738.919278][T24926] do_sendfile+0x618/0xb90 [ 2738.923738][T24926] __x64_sys_sendfile64+0xf2/0x130 [ 2738.928855][T24926] do_syscall_64+0x3d/0x90 [ 2738.933434][T24926] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2738.944324][T24926] RIP: 0033:0x4665f9 [ 2738.948261][T24926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2738.967970][T24926] RSP: 002b:00007f3c3ff4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2738.976597][T24926] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 02:08:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x700, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2738.984707][T24926] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2738.992659][T24926] RBP: 00007f3c3ff4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2739.000617][T24926] R10: 0000000401ffc000 R11: 0000000000000246 R12: 0000000000000002 [ 2739.008584][T24926] R13: 00007fff85bf5d5f R14: 00007f3c3ff4f300 R15: 0000000000022000 02:08:11 executing program 5 (fault-call:13 fault-nth:0): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:11 executing program 2 (fault-call:6 fault-nth:22): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) [ 2739.298070][T24951] FAULT_INJECTION: forcing a failure. [ 2739.298070][T24951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2739.311512][T24951] CPU: 1 PID: 24951 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2739.321387][T24951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2739.331623][T24951] Call Trace: [ 2739.334898][T24951] dump_stack_lvl+0xb7/0x103 [ 2739.339761][T24951] dump_stack+0x11/0x1a [ 2739.344002][T24951] should_fail+0x23c/0x250 [ 2739.348413][T24951] should_fail_usercopy+0x16/0x20 [ 2739.353552][T24951] _copy_from_user+0x1c/0xd0 [ 2739.358143][T24951] get_timespec64+0x31/0xd0 [ 2739.362646][T24951] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2739.368274][T24951] ? exit_to_user_mode_prepare+0x65/0x190 [ 2739.374240][T24951] do_syscall_64+0x3d/0x90 [ 2739.378648][T24951] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2739.384549][T24951] RIP: 0033:0x4665f9 [ 2739.388430][T24951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2739.408048][T24951] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2739.416580][T24951] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2739.424682][T24951] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2739.432736][T24951] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2739.440892][T24951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 02:08:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x3902, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x77, 0x10000000000000ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:11 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x7be411, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x1e) [ 2739.448961][T24951] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x4000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x4200, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) 02:08:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x6000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x6002, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x6602, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:12 executing program 5 (fault-call:13 fault-nth:1): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x6c02, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7ffff000) [ 2740.200042][T25011] FAULT_INJECTION: forcing a failure. [ 2740.200042][T25011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2740.214254][T25011] CPU: 0 PID: 25011 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2740.224213][T25011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2740.234348][T25011] Call Trace: [ 2740.237707][T25011] dump_stack_lvl+0xb7/0x103 [ 2740.242364][T25011] dump_stack+0x11/0x1a [ 2740.246843][T25011] should_fail+0x23c/0x250 [ 2740.251258][T25011] should_fail_usercopy+0x16/0x20 [ 2740.256287][T25011] _copy_from_user+0x1c/0xd0 [ 2740.260882][T25011] get_timespec64+0x31/0xd0 [ 2740.265439][T25011] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2740.271248][T25011] ? exit_to_user_mode_prepare+0x65/0x190 [ 2740.277153][T25011] do_syscall_64+0x3d/0x90 [ 2740.281670][T25011] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2740.287574][T25011] RIP: 0033:0x4665f9 [ 2740.291496][T25011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2740.311406][T25011] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2740.320151][T25011] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2740.328123][T25011] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2740.336104][T25011] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2740.344098][T25011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2740.352243][T25011] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x3, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x7ce8f6, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x8fff, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x700) 02:08:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x9301, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x4, &(0x7f0000000080)={0x0, 0x33, 0x1}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x9801, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ff1f00) 02:08:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x9e01, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:13 executing program 5 (fault-call:13 fault-nth:2): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xaf00, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ff4000) 02:08:13 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0xa000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) [ 2741.063511][T25069] FAULT_INJECTION: forcing a failure. [ 2741.063511][T25069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2741.076653][T25069] CPU: 1 PID: 25069 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2741.086449][T25069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2741.096528][T25069] Call Trace: [ 2741.099812][T25069] dump_stack_lvl+0xb7/0x103 [ 2741.104541][T25069] dump_stack+0x11/0x1a [ 2741.108689][T25069] should_fail+0x23c/0x250 [ 2741.113099][T25069] should_fail_usercopy+0x16/0x20 [ 2741.118115][T25069] _copy_from_user+0x1c/0xd0 [ 2741.122719][T25069] get_timespec64+0x31/0xd0 [ 2741.127241][T25069] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2741.132892][T25069] ? exit_to_user_mode_prepare+0x65/0x190 [ 2741.138609][T25069] do_syscall_64+0x3d/0x90 [ 2741.143070][T25069] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2741.149027][T25069] RIP: 0033:0x4665f9 [ 2741.152919][T25069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.172601][T25069] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2741.181081][T25069] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2741.189122][T25069] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2741.197070][T25069] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.205021][T25069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2741.213188][T25069] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:13 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x7df02d, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xc601, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xe00) 02:08:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffb000) 02:08:13 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x1000, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{r1, r2+10000000}, {0x0, 0x3938700}}, &(0x7f0000000200)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r3+10000000}, 0x0) 02:08:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xe704, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xff8f, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x2f000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:13 executing program 5 (fault-call:13 fault-nth:3): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x40000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffb100) 02:08:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x80000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2741.954625][T25132] FAULT_INJECTION: forcing a failure. [ 2741.954625][T25132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2741.967856][T25132] CPU: 1 PID: 25132 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2741.978026][T25132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2741.988119][T25132] Call Trace: [ 2741.991457][T25132] dump_stack_lvl+0xb7/0x103 [ 2741.996038][T25132] dump_stack+0x11/0x1a [ 2742.000181][T25132] should_fail+0x23c/0x250 [ 2742.004677][T25132] should_fail_usercopy+0x16/0x20 [ 2742.009700][T25132] _copy_from_user+0x1c/0xd0 [ 2742.014293][T25132] get_timespec64+0x31/0xd0 [ 2742.018790][T25132] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2742.024413][T25132] ? exit_to_user_mode_prepare+0x65/0x190 [ 2742.030179][T25132] do_syscall_64+0x3d/0x90 [ 2742.034605][T25132] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2742.040614][T25132] RIP: 0033:0x4665f9 [ 2742.044508][T25132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.064690][T25132] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2742.073189][T25132] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2742.081145][T25132] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2742.089101][T25132] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.097055][T25132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2742.105012][T25132] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:14 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x7fe597, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x400000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x1e00) 02:08:14 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffb200) 02:08:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x600000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x70121d, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x80ffff, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:14 executing program 5 (fault-call:13 fault-nth:4): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xc0ffff, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffb300) 02:08:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xd0ff20, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2742.836520][T25192] FAULT_INJECTION: forcing a failure. [ 2742.836520][T25192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2742.849615][T25192] CPU: 0 PID: 25192 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2742.859415][T25192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2742.870035][T25192] Call Trace: [ 2742.873363][T25192] dump_stack_lvl+0xb7/0x103 [ 2742.878059][T25192] dump_stack+0x11/0x1a [ 2742.882212][T25192] should_fail+0x23c/0x250 [ 2742.886616][T25192] should_fail_usercopy+0x16/0x20 [ 2742.891737][T25192] _copy_from_user+0x1c/0xd0 [ 2742.896418][T25192] get_timespec64+0x31/0xd0 [ 2742.900923][T25192] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2742.906634][T25192] ? exit_to_user_mode_prepare+0x65/0x190 [ 2742.912776][T25192] do_syscall_64+0x3d/0x90 [ 2742.917183][T25192] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2742.923074][T25192] RIP: 0033:0x4665f9 [ 2742.926950][T25192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.946544][T25192] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2742.954969][T25192] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2742.963001][T25192] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2742.970968][T25192] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.978932][T25192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2742.986902][T25192] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:15 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x80f6c6, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xf00200, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffb400) 02:08:15 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x16, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3, 0xff, 0x2, 0x1f, 0x0, 0x10001, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000080), 0x3}, 0x822, 0x7f, 0x0, 0x4, 0x2885, 0x100, 0x7, 0x0, 0x3a89d2c, 0x0, 0x20}, 0xffffffffffffffff, 0x6, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 02:08:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x2000) 02:08:15 executing program 5 (fault-call:13 fault-nth:5): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x1000000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:16 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xa923}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x2000000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x2040000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x3000000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x4000000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2744.181860][T25231] FAULT_INJECTION: forcing a failure. [ 2744.181860][T25231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2744.196054][T25231] CPU: 0 PID: 25231 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2744.207080][T25231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2744.217284][T25231] Call Trace: [ 2744.220549][T25231] dump_stack_lvl+0xb7/0x103 [ 2744.225135][T25231] dump_stack+0x11/0x1a [ 2744.229380][T25231] should_fail+0x23c/0x250 [ 2744.233798][T25231] should_fail_usercopy+0x16/0x20 [ 2744.238815][T25231] _copy_from_user+0x1c/0xd0 [ 2744.243491][T25231] get_timespec64+0x31/0xd0 [ 2744.248332][T25231] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2744.253966][T25231] ? exit_to_user_mode_prepare+0x65/0x190 [ 2744.260034][T25231] do_syscall_64+0x3d/0x90 [ 2744.264439][T25231] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2744.270326][T25231] RIP: 0033:0x4665f9 [ 2744.274246][T25231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2744.294376][T25231] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2744.302789][T25231] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2744.311268][T25231] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2744.319521][T25231] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2744.330123][T25231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2744.338115][T25231] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x825137, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x6000000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:16 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000066000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000007c0)) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {r3, r4+60000000}}, &(0x7f0000000200)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x5, &(0x7f0000000480)={0x0, 0x1, 0x6, @thr={&(0x7f0000000340)="62691013cb3452cca76febc686e1b66887c6e02aeb701adb1173153f7871629eb2de8c4b6c947abb043d1ec2d493c8f4fa6ddb00d361841afeecf0559cc65cd4192d92b80f5669432f7eb7450e70d30cdf57bd719c413934353425c83d9da684796dd380b8e21aae69acce03844e992d7bc8104277cfe8c499237e04c9caaf9467fc3c0de20d6a461f50bb932df937a4c90b0f93ab13a0b28ffaa0645c5605124a4da600589d950bd89c073ea44307219aacc521e8968306941ded0c3c6d78b02e3577adea89f068c7313264884c004715499e8d06ce0dbe8c8c9c7b4de007e949ed7cef498f6993dfb50eb62b3c953b0c7385454f00158e", &(0x7f0000000440)="811387badafd06a318ab7c8ce941f48204"}}, &(0x7f00000004c0)=0x0) timer_settime(r6, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000540)) timer_create(0x7, &(0x7f00000006c0)={0x0, 0x1d, 0x4, @thr={&(0x7f0000000580)="f8196cdec18011f5e099fe7a814c82eb4dbd24bc98c8e519a7a2308569e1e84297bfbc38e82e34ea2f96bfcf00ab69d630d276bea15d6c1e5de88e16259fa4b93eece25e7b74ec6868446b01b6aea70b62d1f212ddf724d959950d6993139fb197b18a4204982f627ef8b9a047a689f1df6ee0134a67451893943cdb4df66e0f950ed65d76cc4be94b7bac056becfd4a2025fadabd95ea73f2ba26d70996544a1cdc108b05803ef85ed55cad5034dcd60b", &(0x7f0000000640)="a40f23cf6a21b78964b8b49af5475df9f00cb221f8ef763cc0ea99cf2687c375e324e39f523540c6dc018d2678938865a3a2bcf12b4a157ba2b39ef269eaaab88ff50a65ece7ce5e51c263bebe2f1c17574b1c5d0960ba7931bed67e129c53a61a301e9f8d416e0ea23b01"}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000740)={{}, {0x0, 0x989680}}, &(0x7f0000000780)) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r5+10000000}, 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x6, 0xe9, 0x40, 0x7, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x101, 0x3fb, 0x2, 0x1, 0xaa, 0xffff, 0x0, 0x525, 0x0, 0x5}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) 02:08:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffb500) 02:08:16 executing program 5 (fault-call:13 fault-nth:6): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x200000) 02:08:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x6040000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x7000000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x8000000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x10000000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x1d127000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x20ffd000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2745.140039][T25287] FAULT_INJECTION: forcing a failure. [ 2745.140039][T25287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2745.153222][T25287] CPU: 1 PID: 25287 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2745.163137][T25287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2745.173266][T25287] Call Trace: [ 2745.176535][T25287] dump_stack_lvl+0xb7/0x103 [ 2745.181225][T25287] dump_stack+0x11/0x1a [ 2745.185379][T25287] should_fail+0x23c/0x250 [ 2745.189792][T25287] should_fail_usercopy+0x16/0x20 [ 2745.194822][T25287] _copy_from_user+0x1c/0xd0 [ 2745.199469][T25287] get_timespec64+0x31/0xd0 [ 2745.204143][T25287] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2745.209889][T25287] ? exit_to_user_mode_prepare+0x65/0x190 [ 2745.215614][T25287] do_syscall_64+0x3d/0x90 [ 2745.220070][T25287] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2745.226060][T25287] RIP: 0033:0x4665f9 [ 2745.230226][T25287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2745.250003][T25287] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2745.258507][T25287] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2745.266474][T25287] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2745.274569][T25287] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2745.282815][T25287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2745.290955][T25287] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x853cbe, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffb600) 02:08:19 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfd7f}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x39020000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x7000000) 02:08:19 executing program 5 (fault-call:13 fault-nth:7): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffb700) 02:08:19 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x863104, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x40000000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x42000000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x60020000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x66020000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x6c020000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x93010000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2748.147918][T25353] FAULT_INJECTION: forcing a failure. [ 2748.147918][T25353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2748.161032][T25353] CPU: 0 PID: 25353 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2748.170858][T25353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2748.180926][T25353] Call Trace: [ 2748.184368][T25353] dump_stack_lvl+0xb7/0x103 [ 2748.189060][T25353] dump_stack+0x11/0x1a [ 2748.193277][T25353] should_fail+0x23c/0x250 [ 2748.197708][T25353] should_fail_usercopy+0x16/0x20 [ 2748.202756][T25353] _copy_from_user+0x1c/0xd0 [ 2748.207350][T25353] get_timespec64+0x31/0xd0 [ 2748.211844][T25353] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2748.217505][T25353] ? exit_to_user_mode_prepare+0x65/0x190 [ 2748.223365][T25353] do_syscall_64+0x3d/0x90 [ 2748.227775][T25353] ? irqentry_exit+0xe/0x30 [ 2748.232311][T25353] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2748.238265][T25353] RIP: 0033:0x4665f9 [ 2748.242184][T25353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2748.262149][T25353] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2748.270593][T25353] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2748.278822][T25353] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2748.288689][T25353] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2748.296659][T25353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2748.304814][T25353] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0xffff, 0x3, &(0x7f00000002c0)="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", 0x3, 0x0, 0x1, {0x2}}, 0x2) 02:08:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x98010000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffb800) 02:08:20 executing program 5 (fault-call:13 fault-nth:8): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xe000000) 02:08:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x87a7f2, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x9e010000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xaf000000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xc6010000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xe7040000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2749.007881][T25419] FAULT_INJECTION: forcing a failure. [ 2749.007881][T25419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2749.021007][T25419] CPU: 0 PID: 25419 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2749.031083][T25419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2749.041136][T25419] Call Trace: [ 2749.044408][T25419] dump_stack_lvl+0xb7/0x103 [ 2749.049002][T25419] dump_stack+0x11/0x1a [ 2749.053204][T25419] should_fail+0x23c/0x250 02:08:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xfeffffff, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2749.057616][T25419] should_fail_usercopy+0x16/0x20 [ 2749.062652][T25419] _copy_from_user+0x1c/0xd0 [ 2749.067239][T25419] get_timespec64+0x31/0xd0 [ 2749.071827][T25419] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2749.077461][T25419] ? exit_to_user_mode_prepare+0x65/0x190 [ 2749.083239][T25419] do_syscall_64+0x3d/0x90 [ 2749.087647][T25419] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2749.093535][T25419] RIP: 0033:0x4665f9 02:08:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xff8f0000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2749.097423][T25419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.117030][T25419] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2749.125702][T25419] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2749.133775][T25419] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2749.141920][T25419] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.150244][T25419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2749.158219][T25419] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xffff8000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffb900) 02:08:21 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x88a913, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x1e000000) 02:08:21 executing program 3: r0 = getpgrp(0xffffffffffffffff) waitid(0x2, r0, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1161, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @tid=r0}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$cont(0x1f, r2, 0x0, 0x7) ptrace$setregs(0xf, r2, 0x4, &(0x7f0000000240)="c5a1b70b0c8cb9fc98ada400abc6ecba3b1f342e9d8937a89e32") ptrace$setopts(0x4206, 0xffffffffffffffff, 0x6, 0x0) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r3+10000000}, 0x0) clock_gettime(0x2, &(0x7f0000000080)) 02:08:21 executing program 5 (fault-call:13 fault-nth:9): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xffffc000, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) exit_group(0x5d) 02:08:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0xfffffffe, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030002}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030003}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030004}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030006}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2750.060772][T25466] FAULT_INJECTION: forcing a failure. [ 2750.060772][T25466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2750.074054][T25466] CPU: 0 PID: 25466 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2750.083855][T25466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2750.093900][T25466] Call Trace: [ 2750.097214][T25466] dump_stack_lvl+0xb7/0x103 [ 2750.101804][T25466] dump_stack+0x11/0x1a [ 2750.105963][T25466] should_fail+0x23c/0x250 02:08:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffba00) [ 2750.110378][T25466] should_fail_usercopy+0x16/0x20 [ 2750.115423][T25466] _copy_from_user+0x1c/0xd0 [ 2750.120038][T25466] get_timespec64+0x31/0xd0 [ 2750.124538][T25466] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2750.130172][T25466] ? exit_to_user_mode_prepare+0x65/0x190 [ 2750.135905][T25466] do_syscall_64+0x3d/0x90 [ 2750.140332][T25466] ? irqentry_exit+0xe/0x30 [ 2750.144838][T25466] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2750.150785][T25466] RIP: 0033:0x4665f9 [ 2750.154675][T25466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2750.174341][T25466] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2750.182840][T25466] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2750.190806][T25466] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2750.198946][T25466] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2750.207090][T25466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2750.215060][T25466] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:22 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x89a0c5, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xfeffffff) 02:08:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030007}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000001c0)) 02:08:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffbb00) 02:08:22 executing program 5 (fault-call:13 fault-nth:10): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030008}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030042}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030060}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb80300af}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030193}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030198}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2751.087419][T25542] FAULT_INJECTION: forcing a failure. [ 2751.087419][T25542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2751.100863][T25542] CPU: 0 PID: 25542 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2751.110665][T25542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2751.120887][T25542] Call Trace: [ 2751.124170][T25542] dump_stack_lvl+0xb7/0x103 [ 2751.128760][T25542] dump_stack+0x11/0x1a [ 2751.132908][T25542] should_fail+0x23c/0x250 [ 2751.137311][T25542] should_fail_usercopy+0x16/0x20 [ 2751.142415][T25542] _copy_from_user+0x1c/0xd0 [ 2751.146996][T25542] get_timespec64+0x31/0xd0 [ 2751.151795][T25542] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2751.157483][T25542] ? exit_to_user_mode_prepare+0x65/0x190 [ 2751.163440][T25542] do_syscall_64+0x3d/0x90 [ 2751.168059][T25542] ? irqentry_exit+0xe/0x30 [ 2751.172618][T25542] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2751.178577][T25542] RIP: 0033:0x4665f9 [ 2751.182447][T25542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2751.202036][T25542] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2751.210433][T25542] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2751.218577][T25542] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2751.226592][T25542] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2751.234756][T25542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2751.242767][T25542] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x8b8d3a, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffbc00) 02:08:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb803019e}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:23 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000600)) timer_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x80, &(0x7f0000000080)="6923a478d165f3420956137eab4cc407b521893311fc8c843c3714c602b898a290f5cb94614600e35b", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="3454dddca763") wait4(0x0, &(0x7f00000002c0), 0x1, 0x0) clone(0x40000, &(0x7f0000000300)="e07570a38cdec7f2ec32f38d8d48f7bbe4f04ae742aae499e311296391ccf243e075c170e325cffccbe03a1a727e6b728e488953a0b66e9e7c0fab33948272ef4c75104e82b7385e3f139a6476a67bbad783d7", &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="16558e756537043ec584816d01d3d94fe0117f259013881ee2255c705a574dd61b95dbb77dda520bac52f09c8cad0b0b70a006") timer_create(0x1, &(0x7f00000004c0)={0x0, 0x5, 0x2}, &(0x7f0000000500)=0x0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000580)={{0x77359400}, {r2, r3+10000000}}, &(0x7f00000006c0)) exit_group(0x5) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x77359400}, {0x77359400}}, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000640)={{}, {0x0, 0x989680}}, &(0x7f0000000680)) tkill(0xffffffffffffffff, 0x8) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 02:08:23 executing program 5 (fault-call:13 fault-nth:11): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffe) 02:08:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb80301c6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030204}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030239}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030260}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030266}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb803026c}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2752.295701][T25591] FAULT_INJECTION: forcing a failure. [ 2752.295701][T25591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2752.308780][T25591] CPU: 1 PID: 25591 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2752.318754][T25591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2752.328800][T25591] Call Trace: [ 2752.332073][T25591] dump_stack_lvl+0xb7/0x103 [ 2752.336651][T25591] dump_stack+0x11/0x1a [ 2752.340798][T25591] should_fail+0x23c/0x250 [ 2752.345740][T25591] should_fail_usercopy+0x16/0x20 [ 2752.350755][T25591] _copy_from_user+0x1c/0xd0 [ 2752.355411][T25591] get_timespec64+0x31/0xd0 [ 2752.359966][T25591] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2752.365594][T25591] ? exit_to_user_mode_prepare+0x65/0x190 [ 2752.371356][T25591] do_syscall_64+0x3d/0x90 [ 2752.375820][T25591] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2752.381861][T25591] RIP: 0033:0x4665f9 [ 2752.385764][T25591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2752.405371][T25591] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2752.413784][T25591] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2752.421997][T25591] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2752.430076][T25591] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2752.438366][T25591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:08:24 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x8c7f98, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030300}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffbd00) [ 2752.446322][T25591] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:24 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x5, &(0x7f0000000080)={0x0, 0x38, 0x2, @thr={&(0x7f00000002c0)="ebc4fef2a5a3cfe065af32558c4dbff68b8fe785694d38db49a7e05f6ed78606ffe7d7505722c911fd0c054c33f96f43ece170b79eaf45db7ecd3bbaf586e550ba086d10537ff197091c58aa5aa12e229d0f5685cdb05db814e1062e006f354cef63611da0adac5a2eeb53d23f12e31676ec06740383c3f2fc6a03629ac625de5c961afc3883e62eebec93a39ed1edf19de6c24f6aa2ab857e0cc07692989e4fa3725e756462f5b88f5024f094e24a1d840a6b327599d324f930918f3b55bf472de0804a1b8d4ad854839dcbd3977896fc17a35e47b76fbfa1454695f256df72fb0b692f777c438435c724b58154bc20497ab74e6b2e4cf1d91f9b5331e1f85ea5db1b2c336e9a84e435928dd6078f3537e2ffc4fc40bfa7fc79b54f759c1824f44c46774aea7355cb306d65ec321e4b5ef25c1ecf8a1f0bceddcaaad2386cdd6d2da00c06f2942496a00acc0db4b283d429a471128d01516eff592d2b242defaa0c0fa2c2aec8f36947f46aea133e3d22ee259b294f5d766c2fff29ebafab9bf07dae7bef2a121f09a91c805700c35694badba981f87fa83c89032f170f9393c931a937a2a8a05d07ed857bea4ad067923439ec2e903a6d64e736745da9e285524c5be80379108bef3e934b68d28f5606d1a93fbbf3c8dc0b61878c6b506107fd69165839a0c3b7bd51e761eb720134d2b12e2b9da4b70049f5fb48d93cb61d0fa2ec327ec561ef45821c6d1387a1172ec0686ff87629dbe4a8dee963f808c59e5108355d907d1eb8351c3191e5b7703a83c96907f67191a2d86c02a347d7e3ad50c81ea5ae8e2d82e59ebd089011111f7cb9f4126c2ea3adbb6f6c4433fa9d47d21c4914e16d6701a154e67aea1ab97f929278effa8a119b49a7624271193d25fa3f7cbdf2605a83727c32235bf2977c61354d2a350591ed456411073c507d5e01ca2f29729088c495345dd0453130a21fb776e70061b53e0e1b85ea1f97bfcaf351d99adbea6859b7b9758640c0597158c15f6cc76c0cf5f3a02d118eb0eced20cde1c2a121b3c99f04265e5941ffeebfb880fae42642c47dc879f989c2a4a73027938d925d47516de68f2a245a3a287ad561cb51ea5b1fd71258c3d2cecef8af0a84fd424f7e5f8274b281dc8f05dd41b04fedcc501e63feca0f887057b27ca4b241e54b7aa758c78dee565f68205e659e334cf29f674c1d39d09f01eeb7ed3ba9ec62acf113d83f484673d36832804797188ad48969e0b7f1c983920e0f06c609dc636250554109af939461bc783081180e06dcfd2f384d1c4f6b8f3860c51d6d3b3fbf599b32f71172c6babf25a70372ddbc2bc4ff881ec26081fe35dc3db2c27924b0f3cafc33790598285db9aeef8f7b28f751579859e1a52532dcb1d720d3b0897fe775b61174f72dd4e444a7c9ca4eda42495e3dccce1c35f1ec0a3097f65a299b422d2f49f8b2c4caf154d9e01d5523c700c22f87e244390da9ac868463d9dbdbdcd999b2227b2a5329d49fa1eec577c51f5adfe60ee002e2e48c6ef39ae9f0b0840d704b60b68289a52964aacf4fe69d4cc49c540f672a0c7d77c34a971df8aee1e5ea688b4c5741181d7755aaa1628c88d6bcb729ac3f7c990784897cf5a807f2419efde982ae3a034992d02f11d2d4f4f32dae0c52db6c456ac9f8a0bdbc950a7f15d70b25df7ca058dc7e1180a86e620656a16356a5c15807f7c34c87bf2992c6a0dc053d4a9cb8b56ecf2bb174aec18f14a495bb77b26683b3ed6b4d6d8852d4c9158c040018ca58120c6dfee58f11d5bb1a237b337e52434672f8f4c16bcb0ef372299f6167218e2ae80ede5b8a51803c4acee3d25c89bb482bb9b7310e305a79e9fd6985fa661b0547e3d0a148e8d2cd39e03309db3f17f56d83b1669978e9fae40d6d3943e1d24b277494ce16f2498a39c5593f442e4d5a8b3e5de243e49d3283e33a8b8446a6f299ac626ee20900bcfdc14e1f250f10cc81daa7e4b20ae7583069aa88ce82764834d969c2f826563f690c71f306ec7fed4411155c4d7b4dbabb9c62b2438da3cf682bedb05cfc569d4ea7ab26cd338e93856a742c99823b469fe7d7290ef3d84e8fdcd75c4893727e91a688d059abbe7c77ab8e14c4040398c3372a1d332b9605ccfb722a6bb88b22e664f79338798f768047adbd3f2b43cccd8cea35f3a4f946b84fb41f866a532db6d2ab9d97435e40ed62338e4e544db3b550660b2f1637aad7a6e2af8366c8b35a8e229b61ac3d3bd9f76d5088be9ee441310e08ee1fe6e0c0bc5ef4b0f7b6b5c800435e254e126a42829d301044219283eb89243099072d77e16225e205142414c71d473531cd2a5672883e4bbca3b2df78eba149faafb2bb47516d030deace67106b8d6c5af06ae21ec919460597a1a01f8efb992f512abd94f7b2a81118a1c922c76f2fbb50ee6785249b9142e7bf289affec3eebabe33d27cd00b46f3ef2704b2754c3157862ca8484df4e893170671454c3d3a23d8fab897e6309b732b2a4151396639df48ea58ab80834ebcd622e0b43743490550d8800f01c204681e4302332ac8dfa9bbd93400edeb14c0a2f32f31c47564cb22e6c9fd6e250dd69f24971c71971b2c9251624146b015730dd3f5e8e3b65babe49a8d7ddfc625d79b908bc648c5a316558d8b47dc9bfbfeb28df6762aa80b479fb7920dd278191806b6066bee6adece132e72f1271553c7ffd227d4c18ae5036140e2713d0261e89dd931282c6e160f01d356daeebe6ec07cedbd449af6e3fa618de77ece00c9090d066fa5fd329e689dc691a763b9745439c8503ae4bb6d5aeea9acaf407a592fee48076ba25fc4fb72dbde50b7f0b9bc86f5c1bd4f5d63a5eac3b34467d05a4c99b7cd8075bb0538f82a0c1e5cbde5771ed4e07c85723076d5cba923a15048b881b0ad93211a8c223db77fc2c899e5b8c21cc084d419f66482b996a9c577124cb9cd5bac375f215c92ad9fab39ae654762c29748efb4408b79620894e7f238c7a164237f1c6b4f4303f9155941d27a52a4646f3f2573153781ea88dd3043313eca1fa8b05f9eedef4665dacaf2c7ccf4535bcc772eefce597b8d9c9de95d71defd98b4418aec4eb8b0f0c7b779c8ec503cb0ea11a70e6c741b0d994615ee39ca2d0ce1e326ffe81a9e89a7ba8fd242d2214bcf01e906c311301bdcb405941ab6a5863a34be37c8400045c230840c34845de5d6c18041fac0173740f530e8cf569307fc8a84050c7a441ca044e8d839d4669ba0bd3a08a017e4d1698738dddf7f83b101577f71274f5d4e2de2ecc57ec4ab1b609c671fc53a6610244fde1f9dc4efd6df35c115718c813af1e49ebe0a39432b02a7d971830a474b3585dbd5218061a423d0bf29939975d20d991836af1efa82285ab25570a01b83f8171b563a98a5b6a799f7f52cc110b5fb66b85513e431e9417d25c46a00c6105348eff0ae6c18fa783e1e4a0c60baddded35e0ed07fb2f38197f7d68833533e7ea78d9fa087f0b87732e75a24c201a64575d211ecec4813830c9b223777c220978a3298fa599837a7ad6cc7c4d64fb31d03c9595c0a88cd5b0bbf933b3980e2b70f32f5e4d26d8f0df32f9650fc937e022fb39fb93c44504c9771780f6df83b8b7e55a1d146dac6319dffd8614dde7688dd30ad321937e3fbf612dcdc05e909fd6e6d35e56d0cb28712ec2c0b38064470dc4097dc24bab1841e9324bb5c40348f69c4f90aa3e110ab8852deba8b2443598243c14c30654210a942ef9069551ef5bee960ef30cf982549653e87be579b56c0b0f11f0cb5663b7ba3fe59af8aa76fc0ddcaa1cdb19d9588dc5710fcbe65bb9ce75538012eb03367f25ec585c2b372c6c586d671e3d6629e0347299c2c7897c07a07f254fc5fe7aca5fc91a6bc9a7385b91340a6fbf0c3d2ab79118dedacfb8a420f9d4da564bec68d2b213063dc40f6613b3859a34d1ed5f7fe5bfc3a58aa30d82f4611834790b5018c1a6c0a2cb4181ded59e6492633739759829df79ff60b409874028299d81a94b2f9a169bb3a8e614b53d79f7218aa2deb2cdc5bbb3a716a91ca3342d3740754e6ec226f5739a1c50fee7f2cb73c08239f9f0f78e0896831fecd613f81dde59102f69f5c9dca92601330dff176a9802a7a3efdb78301e27468259a4c30248c592a78edde8beb24e05ec5fed384abfc81257adaea7c9c0e8ee7f3f4e8c4457f0a5f615847e3eb976208e5a9a55280e28185e83b67d05c9afd7495c1040c3124f373e74510149fa316b4a0980b93e9ef91d2cda26ca7f13beacd0782904d6df9970589e79e30e5eb8ae06ba6482d92cd10998bdc1e32bf9f0541bafb4d24e516bc7021bf2aa8f037d078a736da0a7a780f365e2c024fa29629fac9a209cc32dea5ced154ce8f1a28a43ae21c3a3a4734e26999395476cef3e7cd55eca4ea8dc84d6914adbf12ba7d775f7427c250d6a39da5d38f907186fd418e4c32cf795ebd80230d973af46edf0a13359837712fcdce0250d515d57b0b3f922c78b3ed6ccc6cf68017f7a4e16f1869c5224cc34310a864628f224f582bbcbc8380b057933f214c81bb1f69d650f7898be505945ca85db4da95aba1762f58be495aebc60bc3d211ff4d5a6d8f45fbeca56559295596538b323ed066e550a425b1560e471f9dddfb824849cc78def68c8ac91025d64a50b802485d49cdcd30c2e19a568b85951bd62f5e9f90f97525dbc39ed1bfc2f85de60c5e27c2797a3fd2cd9396c1a7206490dd0ab685d55bb97aa1c5a2dd9ede47c74cbef1ca196c3841889770f8f0c46003a9fd15a57d303f1016f939b3c075c6a9555ef65953829cbd61077f5305d82fb811ddbc548994daab64956902fce60712c10527210faf678e15c8320f9bc470b7b3ba904063dc469379cbeacc978aa789c2dbd332264c00e2ad1805b0ca97f79486d1d66bf12d3bab3bb037ec6fb6dec04bfaab98d2184fc4facb66d389edab445427237633d642898e4ac19556264e110fa6c05c4003ae2176f1958db5bec0dc6900bacb9bc5bf7a2484daaa33a0b358c66cb4d5daf7c6fa71738d55a4e099b2105a2c38d13fd6266c96ece76e071b0411872eec2bf6f9cb9cc7ab02d4c67c352b2c62c775802ee06ad93770a148f3224349a2b7b1b018c0fd321310c735e3d1beeaffd7a5944c93e7d0b513b6115dfbdfb82fc5447281ea0b642e1eca8cf5f8588007f691240b43f44b11f9cb150e8dd4142d5efab39f944d6e519bd192b4e8679f944159b3ea59aa5ff279447e2e09f108216f444b999c801eb67894e4f3cc3781ee8daf9d9b851a6f68dc54684ddb2427436d5942ab87de0b299699ffe9dc5776ff0a67ec2b856d223c969147effc197a0cae8173787f0232382e51c31cce39075ba1cb687d7353c3b4e89e5e13335b9b4012f7488232fad4ec7de964ed3513d5d69b26d27152df8707da0df2a57447bbfba26839fe2f71585ce8bb40290a416be4be2217e3af30f5f100a93841ae73fb83581829b5e0366910471e8f34756a8d162b96b83ca38a1d67e95b27fdf61a0c24bda4e6573e3e4e5c4aa8d1e77d4a6f49294a7a4e4588ed13e1072863024680427170c0f6d8e79b0cc92a3fb5eb888aa9f2aab42e4169f03bf07a2959f1976959adbd81f572f12b48f34da471d80706bd9e9f735bb095b9c276fe6b8e591b3deb32104c5b0c8c99c27eb484205fa8d08bdd0223ee101d370e167ca102aae18ea80eb9df6a314d9f31c85b120f93b6b9ba708ac816e23afd0ecfb9095cef9a0c4", &(0x7f00000012c0)="c4b1a8b59848f7085f2aa053207414032f3bde332c14c34b825292fbf7eb8a376976c1e465a81b7a946f99b7b323f78aac37c6a32edb31ef95138b111c824c1d0495a90d673a6bf7a04baaf3ec72f1dc793da65111353e7c1d80ae22f62e1135da2be1717730cd9e4ea0e40463505fd8b0cb3c52b35ba41c3d60904794b75203435eb1d33eff8b7736d8e2eb947b8019fb161a21f1bae022d61f9353b425bb2c3752b837d0103266e0b08dc8740ff31fa25ed43a63f0f049ba0418036dc0201116d6714b3d89cf3e453d6d913347c661b805f579e838d83c3120463d"}}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000001400)={{r2, r3+10000000}, {0x77359400}}, &(0x7f0000001440)) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 02:08:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030402}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:24 executing program 5 (fault-call:13 fault-nth:12): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffbe00) 02:08:24 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x200000000000) 02:08:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030406}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb80304e7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030600}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030604}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2752.920591][T25665] FAULT_INJECTION: forcing a failure. [ 2752.920591][T25665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2752.933738][T25665] CPU: 0 PID: 25665 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2752.943586][T25665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2752.953715][T25665] Call Trace: [ 2752.957252][T25665] dump_stack_lvl+0xb7/0x103 [ 2752.961877][T25665] dump_stack+0x11/0x1a [ 2752.966050][T25665] should_fail+0x23c/0x250 [ 2752.970468][T25665] should_fail_usercopy+0x16/0x20 [ 2752.975488][T25665] _copy_from_user+0x1c/0xd0 [ 2752.980091][T25665] get_timespec64+0x31/0xd0 [ 2752.984618][T25665] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2752.990257][T25665] ? exit_to_user_mode_prepare+0x65/0x190 [ 2752.995976][T25665] do_syscall_64+0x3d/0x90 [ 2753.000380][T25665] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2753.006276][T25665] RIP: 0033:0x4665f9 [ 2753.010220][T25665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2753.029984][T25665] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2753.038399][T25665] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2753.046363][T25665] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2753.054327][T25665] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2753.062357][T25665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2753.070319][T25665] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x8ee943, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030700}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffbf00) 02:08:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000380)={{}, {r2, r3+60000000}}, &(0x7f00000003c0)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x6e006f88cb8e5316, &(0x7f00000001c0)="16589f435e8f7be5116c1589f5083ebcad1b91cc96b3c1e947ca02ec9e694cf0c049e5adcfbd9a7a56063a819b3b2f119c5be92514f762bb78a401cc3838d3f539d2e45bf1204d2ad6045ef51be67a00a9ebf518efcb8d506ebe0c8ba99b384b082352ee170ff7f6931ba4be8ad3febaa7e0c2203e10a7ace2774e9377d9d03e376d11e349920f911d189b2016fe1b78fe7dac26", &(0x7f0000000080), &(0x7f00000002c0), &(0x7f0000000300)="c864b56d903ef770f48eb665c3b146425150144e5d59928543b9ff0e7d0fc18faa0d950167c5f66f64428a4d") clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 02:08:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8033902}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:25 executing program 5 (fault-call:13 fault-nth:13): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc002) 02:08:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x7ffffffff000) 02:08:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8034000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8034200}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8036000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8036002}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2753.804759][T25729] FAULT_INJECTION: forcing a failure. [ 2753.804759][T25729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2753.818352][T25729] CPU: 0 PID: 25729 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2753.828241][T25729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2753.838289][T25729] Call Trace: [ 2753.841565][T25729] dump_stack_lvl+0xb7/0x103 [ 2753.846155][T25729] dump_stack+0x11/0x1a [ 2753.850353][T25729] should_fail+0x23c/0x250 [ 2753.854762][T25729] should_fail_usercopy+0x16/0x20 [ 2753.859865][T25729] _copy_from_user+0x1c/0xd0 [ 2753.864550][T25729] get_timespec64+0x31/0xd0 [ 2753.869103][T25729] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2753.874824][T25729] ? exit_to_user_mode_prepare+0x65/0x190 [ 2753.880600][T25729] do_syscall_64+0x3d/0x90 [ 2753.885011][T25729] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2753.891227][T25729] RIP: 0033:0x4665f9 [ 2753.895113][T25729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2753.914710][T25729] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2753.923322][T25729] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2753.931365][T25729] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2753.939333][T25729] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2753.947446][T25729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2753.955416][T25729] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x90291e, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8036602}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc003) 02:08:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x1, &(0x7f0000000100)={0x0, 0x14, 0x1, @thr={&(0x7f00000001c0)="85123076976a87217d50a50c368540f22f5e0c24cca9a358aa5ddff4c62ea7d181e09f74d259184720bd808c733360c4eb975fb482d83b5ff0049a3c013381dd94b5c1a2e18948bd9d354b2cd621a48d30b5186899eb15fd849def6a2d53fa8077ca2924d3091e16b5dfdc1709dc3a4de0e36ab5f716e105af0cec89fa0a92a3668f4acfc8b6148036814b0f9d512ea6ba38f393d0df95dd66e744d54c4f40335a3b11040d12f377581e", &(0x7f00000002c0)="64dfbf54184fbf92c6a36a6ad8e16bbe830411512a47b5a174270e24ced8f615a32abb6f51d63fc4e805ab24a743a34215c5312e51553aee39644eede9687060269cb2f22d3c5d1697bbdbfda66af2ccd85bb142c0fb824835577a9a55ad06ed937f1caf9e159d36b87c9ef8ee9be29506c486309df03f6b930b5c5d9fd7c82d9e6ad8f1c81d036c3a6335cad8a56eba6ec6795b8f3ebcb49e027ff139189bc4659c139c9f734232cd4b8f070d446186116b71e676cea1072ce5aa13dd3c32c8bccfe092e3e0b31adc48dac3d170a8adbd9d2395aae557536062d1c5f9f29a59b7"}}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) exit_group(0x1) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:26 executing program 5 (fault-call:13 fault-nth:14): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8036c02}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x1000000000000) 02:08:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc004) 02:08:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8038fff}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8039301}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8039801}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2754.706859][T25779] FAULT_INJECTION: forcing a failure. [ 2754.706859][T25779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2754.720495][T25779] CPU: 1 PID: 25779 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2754.731037][T25779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2754.741156][T25779] Call Trace: [ 2754.744455][T25779] dump_stack_lvl+0xb7/0x103 [ 2754.749043][T25779] dump_stack+0x11/0x1a [ 2754.753186][T25779] should_fail+0x23c/0x250 [ 2754.758030][T25779] should_fail_usercopy+0x16/0x20 [ 2754.763039][T25779] _copy_from_user+0x1c/0xd0 [ 2754.767717][T25779] get_timespec64+0x31/0xd0 [ 2754.772216][T25779] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2754.777837][T25779] ? exit_to_user_mode_prepare+0x65/0x190 [ 2754.783662][T25779] do_syscall_64+0x3d/0x90 [ 2754.788179][T25779] ? irqentry_exit+0xe/0x30 [ 2754.792708][T25779] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2754.798608][T25779] RIP: 0033:0x4665f9 [ 2754.802498][T25779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2754.822273][T25779] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2754.830804][T25779] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2754.838770][T25779] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2754.846806][T25779] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2754.854772][T25779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2754.862745][T25779] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x912624, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8039e01}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc005) 02:08:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb803af00}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:29 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x44000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000080), &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) timer_create(0x4, &(0x7f0000000240)={0x0, 0x21, 0x1, @tid=r3}, &(0x7f00000002c0)) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000300)={{0x77359400}}, &(0x7f0000000340)) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r4+10000000}, 0x0) 02:08:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb803c601}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc006) 02:08:29 executing program 5 (fault-call:13 fault-nth:15): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000) 02:08:29 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x9249f6, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb803e704}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb803ff8f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="bd75ac0b8b63be65e89479c0", 0xc}, {&(0x7f0000000080)="a9e05815fbe03eb3dc0435fd2cf00472b552b487baac34f8225e6a795428a2e9b4f7afaf1bf0229449f00b1e244efbbccd161cc7be93762a40719dbe6d247050604a15261493b3956f80b6599e6f495884d1c4053e898d74700527700bdfb0824a791ef8f4be87614615d993f91fa7b0c281f3830f6b48ff3cf785fde14154fa2ff5051444f50aa8c3ea52f201dee23be83041f2cc342b8aa2d11b1130be50b96112673f33a248859693104ee8bf28e97c39f7d9f4006c58dd328f519bb8630827e91374c28bc0ade4f817ca9b", 0xcd}, {&(0x7f0000000180)="b6adec3a7210146ebe959af7b60c5e88d066667203a673e7a35231be678fd3bbdb91751c3c3a3d09106fa21380aa653c3c502db367a8ff00a2c029ac64c984f15d95e10ae0a82c2fe824185ba94dce978ea202337d2c82b4ca33be16d87fb428225b04050624b4a19e001fe815279f67bae489de1cd725f119633c0dcc2cc71b4fc91143ba590f911de8f909036abd30e4390681ec505cd2106b4506", 0x9c}, {&(0x7f0000000240)}, {&(0x7f0000000280)="ff81744806eeb5bf2e79c1041bf2bff07e4523c223c3423680762723c730263970cc2cc55d652d6280d94935614303dc5be1951c149a4bfd9f186853e3190a7d56541449f3ca02832c", 0x49}, {&(0x7f0000000300)="36adab24894e5c8ca2f59a1224d4113a5ec50f21c62b107cf079f357fbf01a8f93af7044853f0ad676c20e673a73131df83e7f37ebe5a3f28ecf23e4c6d7f0712d353103f06499005d09d800ab3d63cb876a44ebcc61e73170c6b423944abc785989f1c6f442954be729b8318e1b735d9b126bb4c33e61640c45c02a0e4ce9fdc48fbd964ee6c8", 0x87}, {&(0x7f00000004c0)="80c363775ebff1ac252f91946a80958bdaaedcfcf653fa70fba8df0d23f90dec9652e526fa08dd728298c1c12d21487f307be59a2eb5b652f95ff81b7197dd", 0x3f}], 0x7, 0x0) 02:08:29 executing program 4: listen(0xffffffffffffffff, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x1, 0xb8030000, 0x0, r1}, &(0x7f0000fed000/0x11000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000480)) 02:08:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x129082, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800000, 0x110, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a30051e8e0ee2c0d4cf1ada353bb4ca935eb3ea757ad3282c6f77796838837b1f02ffcb9d92516308beab2b761c3679597caa3990b2ba6069ad988bcd146c3f03262ac1ca09f1e001524399b00254b33e85c51bee43889c08c0f4e036f7b1c507e69a22bbfe4d23ab6351dca514099c0fa9ce7a29ccebb7fe901bb2ac13b7f7841102f400000000"], 0x88) syz_io_uring_setup(0x608e, &(0x7f00000003c0)={0x0, 0x19ec, 0x20, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000277000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) dup3(r1, r2, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 2757.588156][T25846] FAULT_INJECTION: forcing a failure. [ 2757.588156][T25846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2757.601276][T25846] CPU: 1 PID: 25846 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2757.611077][T25846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2757.621165][T25846] Call Trace: [ 2757.624443][T25846] dump_stack_lvl+0xb7/0x103 [ 2757.629041][T25846] dump_stack+0x11/0x1a [ 2757.633203][T25846] should_fail+0x23c/0x250 [ 2757.637656][T25846] should_fail_usercopy+0x16/0x20 [ 2757.642738][T25846] _copy_from_user+0x1c/0xd0 [ 2757.647327][T25846] get_timespec64+0x31/0xd0 [ 2757.651867][T25846] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2757.657848][T25846] ? exit_to_user_mode_prepare+0x65/0x190 [ 2757.663571][T25846] do_syscall_64+0x3d/0x90 [ 2757.667996][T25846] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2757.675915][T25846] RIP: 0033:0x4665f9 [ 2757.679801][T25846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.699399][T25846] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2757.707806][T25846] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2757.715875][T25846] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2757.723994][T25846] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2757.732064][T25846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2757.740208][T25846] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 [ 2758.811204][ T1773] ================================================================== [ 2758.819289][ T1773] BUG: KCSAN: data-race in do_epoll_wait / do_epoll_wait [ 2758.826306][ T1773] [ 2758.828608][ T1773] write to 0xffff8881047ae598 of 8 bytes by task 1777 on cpu 0: [ 2758.836215][ T1773] do_epoll_wait+0x4e7/0xf10 [ 2758.840802][ T1773] __se_sys_epoll_pwait+0xfb/0x210 [ 2758.845902][ T1773] __x64_sys_epoll_pwait+0x74/0x80 [ 2758.851012][ T1773] do_syscall_64+0x3d/0x90 [ 2758.855423][ T1773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2758.861393][ T1773] [ 2758.863715][ T1773] read to 0xffff8881047ae598 of 8 bytes by task 1773 on cpu 1: [ 2758.871244][ T1773] do_epoll_wait+0x292/0xf10 [ 2758.875850][ T1773] __se_sys_epoll_pwait+0xfb/0x210 [ 2758.880946][ T1773] __x64_sys_epoll_pwait+0x74/0x80 [ 2758.886062][ T1773] do_syscall_64+0x3d/0x90 [ 2758.890460][ T1773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2758.896337][ T1773] [ 2758.898642][ T1773] value changed: 0xffff8881047ae590 -> 0xffff888100e1ed98 [ 2758.905729][ T1773] [ 2758.908054][ T1773] Reported by Kernel Concurrency Sanitizer on: [ 2758.914182][ T1773] CPU: 1 PID: 1773 Comm: syz-fuzzer Tainted: G W 5.14.0-syzkaller #0 [ 2758.923547][ T1773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2758.933688][ T1773] ================================================================== 02:08:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc007) 02:08:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x93) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeaf, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:32 executing program 5 (fault-call:13 fault-nth:16): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x93789d, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000001380)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{r0, r1+60000000}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={&(0x7f00000001c0)="32001abce04d624558bc5e082a4cde6b5a16b889d0fd84bc9b284c258772af07", &(0x7f00000002c0)="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"}}, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r4, &(0x7f0000000080)) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r3+10000000}, 0x0) timer_create(0x7, &(0x7f0000000200)={0x0, 0x41, 0x1}, &(0x7f00000012c0)=0x0) timer_create(0x3, &(0x7f0000001640)={0x0, 0x15, 0x4, @thr={&(0x7f0000001440)="1957c4f569f0d03838828cc6421274e8b0174a3ed4b9764527a941259518a52f903f9f7f9c942b3092615be23e690c1f8f01e9d72072ca78059b038176f94da0e8414b18c32e95d692f6bc4fa0bbf9d388bb76110f38c4f834d5db32aa1143106990d16eb90805adc5e9c5e0456b17602718ecbde64f51b2d6a94c40e5ae5b9d95d8b943b9d9c71c1d875619e421eaa98a8f612d5e6f8ece6675b4483e3dcb5a41215fc35a4dc8e83fff47b304dfc95b3e0c861de8bd5d1d09abbdd4447adca9b462c65f0ed338fb3817f3ab6289ffeb11549da7c8b93a0a9a005b9cf9da1af37dd4326ba2cee8a0ef7188852765", &(0x7f0000001540)="764c9f8622f61e515cadf8f91c1ab7cf5680f4468f418d4689a93b25fac5e4b9d6ff905da1670d514996e1b575907b5b77f5b8352f0ebd4a25a6f99862a2f33ad0dccb8a13e51a0313b0ac7884f82eee976b1c64a3d25c5364f5203bb4cb6944fb9983a741eb2c255d28a42d2e24a781e734548340c064425da6bbe98738634682242b9d58dc9c5aab1ee68e5c0ff983cdc7ee07f9af6553e39cf6b34fc367ceddfc64ddada46cf503750e1628dd6d4cae73b47ecd9c814aa9124813bc27deea5b45e879517bd981d3d8bc"}}, &(0x7f0000001680)=0x0) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f0000001700)={{0x77359400}, {r7, r8+60000000}}, &(0x7f0000001740)) timer_create(0x5, &(0x7f00000013c0)={0x0, 0x9, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000001400)) timer_settime(r5, 0x1, &(0x7f0000001300)={{}, {0x77359400}}, &(0x7f0000001340)) exit_group(0x5) 02:08:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x700000000000000) 02:08:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f00)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0xd}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c0931a6f98"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='clear_refs\x00') r5 = syz_io_uring_setup(0x60fc, &(0x7f0000000040)={0x0, 0x7e53, 0x10, 0x3, 0x11a}, &(0x7f000045c000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) mmap(&(0x7f000077d000/0x1000)=nil, 0x1000, 0x6, 0x13, r5, 0x1695c000) 02:08:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x3, 0x20, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x143000, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x3b, 0x3f, 0x5, 0x7, 0x0, 0x6, 0x80820, 0x7, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x4, 0x1}, 0x5244, 0x1000, 0x0, 0x1, 0x2, 0x5, 0xf801, 0x0, 0x2, 0x0, 0x6}, 0x0, 0xe, r1, 0x8) exit_group(0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000240), 0x7fff, 0x6000) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r3+10000000}, 0x0) 02:08:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x39c8, 0x2, 0x0, 0xb8030000, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000040)) 02:08:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80010, r0, 0x2b9bd000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_setup(0x447, &(0x7f00000005c0)={0x0, 0xb4b, 0x0, 0x1, 0x264, 0x0, r1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat(r1, &(0x7f00000009c0)='./file0\x00', 0x20202, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) pipe2(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) io_submit(0x0, 0x8, &(0x7f0000000e40)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x1ff, 0xffffffffffffffff, &(0x7f0000000080)="18ba43f4a08e36d7e35832a5ad3e201f1bcb627aee182d3bd5fef8aa4a67c060856405aebd5f4503fe92c1f592b1265995bda6f27daf5191d5de005f3a6dbe4a3a04c16df7be0e2f4fb6d9c02db35ab1fb1e22b193409eea771a9c", 0x5b, 0x1, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x3d66, r2, &(0x7f0000000640)="72ccb01f44c96edf98f23041ef17260d7050426dcc020d5ec711dea484ae1ed5f03213a30238a2649af30265a72cac5af85505396ed16a5a2bf469f1671fc3e923b46d5b46f318e2b4ddc10a3d7b6ef88845b0ac0491ed358d3475699e74223d622713ec591e1f3ff982885365e8f286e7808fab1517b5b1ca1e82da25d79cc01ba03bd3830e306896e1749431bec4dd5be4", 0x92, 0x3, 0x0, 0x1, r3}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0xcf4, r4, &(0x7f0000000740)="b0d55f738d56b3f885be240592a32705f37c9f722ea396d52c3674828bc4f398df73c83c2d556478d742fda761d3f1edf0b85c78ddff655171dde8a908de6f06c2586d5fea4d50c40cde2af205d25f916818f1a411e75a5d741a88b2850525ebca7dfcea9a1f75a0545f86ce7a51cf20da9747e4474e892c041db0657ef68a70d04d61a4ec18bda99ef7579fe61ea285df2c1dc6b39a8822b28f4ac7acb863a47e5a2a617255b16e12635920dfecd008360dcb20bf7e4117d50f37ecde11de874375815a1f72af0129cde22683e690940077f69949038aa67cc645996c5786ede8", 0xe1, 0x7fa, 0x0, 0x3, r1}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000880)="7f7dc9d151aedbbabc43adab5850fabe196e82808490f26971b29c43b975924dc4886f20da935a80347413560cd12588d313fc6fe353a1c4eb605acd02e72165c46a7e50fd36dec3dc2d90b24267ac244adfbab4d473312783cc53eae6ad02c3aeb6278fe58ed80dc5286cf4530f7aa22d0108fdcfd34d84b03dca0a8ddc0d7cb987b96e1f18a960758fbd55ec607a5040d675a89373f4e6aead400f6fd885c77d9e3bb6e3a3ca857fbbae36691f8a6ccccbdc9b6b11fec75852d8e69ed932a9dd48877d43b5f3896634722c5b7e9fcd9f9bb0293bc7b49d4d7db19c853b0f7895e697", 0xe3, 0x38d2, 0x0, 0x2, r1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x2, 0x4, r5, &(0x7f0000000a00)="403a7173acb4580dfbbee26cd79d414ed04ccda4efb0351dfeb24a15f2f7de20b9b3155241135352c00c26f86892844379d550f280c366de78", 0x39, 0x9}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x3, 0xff, r0, &(0x7f0000000a80)="6630f723ab0c700fc02840ad6efd8d8e176b06ff818be64bd637094e725dea1aca06e82dd646fc60731170df81ce22e164ce5f5341ce6d5c907bebaecdce44db3b86cff0eac3564d6bb973a2b3710f82849531d28ffcea0c5d6fd2b93d01bd94dfebc8667a57fe55a895f11610a22e1faee8942f5881b7a08362fca1936c1679ace6fe89867396690240ab776b21631f57c19af77068ee30d8c84231375870febd081f813370202e164caf703c7d5438431dc66c3b6627f52278934d95", 0xbd, 0x2, 0x0, 0x1, r6}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000b80)="a165433527132d103c1b90b2b83d054cf8d823a399a5aaa8097fcbfbdb2bd77cc41c0dc031cd8c0bd215928cbf8ac45f3c51a6cacf94a3bf0909f9d75d2fb53d89d0b45f49becd96de188ff72096435ad6d306bbbe9ed8716624c52675628c6240642daff75d387f03349bf90b56197887105e1db3faa72898e562f6e5708dbcd204fb5ded5ccfab062158ae15911223f7095aeb6343", 0x96, 0x7}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x7, 0x7fff, r7, &(0x7f0000000cc0)="607b7c38c7eb0bd52ddd66b98241691719a856b488b8bd2948ac5f036b0f4c21cd2e63cb5719fe206f06fb1dcdda9b870dadeb2b630095c907dbf2fdf134b429c932f948c3db848a39c4a97d02be262e393b2404a56d0b2895795fc27d7f9da992475a1dbcce3866b579381892f368f21602d1405f4d2c37157058d805b5c3c4ba54316016c9e9a4a44200d08dba1d02f4a4e59ca82e023c636c256ea3aff48cb6d8eeb79b892acc1a1bf508eefda895e679617ed16aad3bf65c50f04bd97cb7823cbe88c1c7b94c781d2731d1222c9bb0d6fc6c38e1c89edf02079b6ea4f3b079bbf07defb382d4051bf54617", 0xed, 0x5, 0x0, 0x1, r8}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r1, 0x55b0, 0x7d88, 0x2, &(0x7f0000000040)={[0x7]}, 0x8) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x1cf, 0x2, 0x0, 0xb8030000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:32 executing program 4: fork() r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) fgetxattr(r0, &(0x7f0000000040)=@known='user.incfs.size\x00', &(0x7f0000000080)=""/135, 0x87) 02:08:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc008) 02:08:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) splice(0xffffffffffffffff, &(0x7f0000000040)=0x401, r1, &(0x7f0000000080)=0x20, 0x2000000000000000, 0x6) [ 2760.570341][T25901] FAULT_INJECTION: forcing a failure. [ 2760.570341][T25901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2760.583686][T25901] CPU: 1 PID: 25901 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2760.593557][T25901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2760.603607][T25901] Call Trace: [ 2760.606895][T25901] dump_stack_lvl+0xb7/0x103 [ 2760.611487][T25901] dump_stack+0x11/0x1a [ 2760.615642][T25901] should_fail+0x23c/0x250 [ 2760.620163][T25901] should_fail_usercopy+0x16/0x20 [ 2760.625213][T25901] _copy_from_user+0x1c/0xd0 [ 2760.629968][T25901] get_timespec64+0x31/0xd0 [ 2760.634463][T25901] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2760.640135][T25901] ? exit_to_user_mode_prepare+0x65/0x190 [ 2760.646009][T25901] do_syscall_64+0x3d/0x90 [ 2760.650437][T25901] ? irqentry_exit+0xe/0x30 [ 2760.654921][T25901] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2760.661013][T25901] RIP: 0033:0x4665f9 [ 2760.664937][T25901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2760.684683][T25901] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2760.693096][T25901] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2760.701258][T25901] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2760.709219][T25901] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2760.717178][T25901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2760.725144][T25901] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:33 executing program 5 (fault-call:13 fault-nth:17): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 2761.313728][T25958] FAULT_INJECTION: forcing a failure. [ 2761.313728][T25958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2761.326905][T25958] CPU: 1 PID: 25958 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2761.336894][T25958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2761.346956][T25958] Call Trace: [ 2761.350224][T25958] dump_stack_lvl+0xb7/0x103 [ 2761.354894][T25958] dump_stack+0x11/0x1a [ 2761.359138][T25958] should_fail+0x23c/0x250 [ 2761.363573][T25958] should_fail_usercopy+0x16/0x20 [ 2761.368580][T25958] _copy_from_user+0x1c/0xd0 [ 2761.373258][T25958] get_timespec64+0x31/0xd0 [ 2761.377797][T25958] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2761.384626][T25958] ? exit_to_user_mode_prepare+0x65/0x190 [ 2761.390444][T25958] do_syscall_64+0x3d/0x90 [ 2761.394923][T25958] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2761.400834][T25958] RIP: 0033:0x4665f9 [ 2761.404707][T25958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2761.424311][T25958] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2761.433320][T25958] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2761.441725][T25958] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2761.450113][T25958] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 02:08:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x960704, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200, 0x4, 0x4}, 0x18) dup(r1) r2 = epoll_create(0x80000001) epoll_create(0x7) signalfd4(r2, &(0x7f00000000c0)={[0x6]}, 0x8, 0x80000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000100)={0xe, 0x7, 0x2, {{0x1, '\x00'}, 0x3}}, 0xe) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x7) timer_create(0x3, &(0x7f0000066000)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$cont(0x1f, 0x0, 0x0, 0x7) rt_sigqueueinfo(0x0, 0x3e, &(0x7f0000000200)={0xf, 0xc5a1, 0x337}) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r3+10000000}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000001c0)) 02:08:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc009) 02:08:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xe00000000000000) [ 2761.458179][T25958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2761.466344][T25958] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:33 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000001c0)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f00000002c0)="60f6b4e57de1fc8517b0afa3e32db27fdd3b4ac437f6b5428e5a91afd2ab945400991af19d38cb82232e07b250b87f28d63e8280d85aa0dcc356e815b3957ee682565ac30eeececbe20aeb549a21fc77def5a0ad9a1514ee72d67dfe72618183feb77b550297ab451efe06600d06858801213fc219441fc707b5e55c3b4f8319e97187ef924042175e285f28c0b52c63036e487d4451abaea20f9dfa5d1385bce7b56a65f85c331507c83386530ca832cee4c76a9a5018403aaa53e506d53c156548388e153bc3871e278c90cac39e3c1889c82caa0f91b119bd8fbbe447f088e3b3e685b436fc04599ffdaa04956fd621704ee18e7916b723cb00d6d311360e239864fa39f9bffdc4117ee9fcfb048616da30465567a3fbf692d4a06b2339a070d2dc323048a2a9448246f59f7c3d6c7d7505ca189e934502cd64b4f24c6f0f87b234a2c5b08af896618402a4c8d4f0f5a7f4899e1480a4ab43238846a912bc6dd283c334a804fa8e65afef775362081129eaaa36aa20c8e196d642e484bc38cb7c66c437bf5a9effecd5dc9801d89f3b223437047cfbbe3737b3cca1df93551b57879eaf88ae963cc72b3092eb01ad417ac721f123a2fc6e0d683dfa717fb3b1be22a6f4f5010827de1cd2f7b2bfe21fbde3efe963642fce1ac612884b279a1c342935be4b56d8942e9e6e256c7f5e8eda78004bc5168a5b265cad7faed2b14632fd7d9df2c0b14bbaaf22e3d4bc08706e31245f971eeff28a4b2b78ecae15150534b669844fc585e4ddd2e031112176a4db28ff3a871691892b7797d8bd467d6a5096211f3be2f4f41d6331c7aa70fe47c2731eb682d122b7712adbb83b35e7aa8c716a9a9998545be707b5f928eff7b896bab9eaea93541f15819b0ba763a12b1b87e3012d44f7e84926fa63ad93764dfd3f1ed79c1df4e702897217e75af596e64226d348ddc8228c4ded9d56714abc0421b4c476206cb9c69e92146f0064bdcfc9b99c69c0fb746e75437ffa81d5f1813ceb13bc09bd0d3b58217acba953a7ad75302c7bc2572e4286c8b4af2a0865b16e876af9f8e73128fc82aa296613f940705c7fda1e538eadb0ba27e0a1950e9d98ceb532fa5c9e9fb6f81fea2151a8fc4660231f3d167e1a16ee1628c79edd32dec6fb35688214a0c11ad0b9f4d55d2a8f5efb3fe0b58e342f0c06afdfb7cc4bde1038d75eaef5caf07568d6cd096241fc6ddeb446e3a1a16d26e03f521017f0e2d90e958f2a29fb522aee9998c2d4ebc7025c932f159a14b5fed87825d9a6f6342677472f115b9d3c7269733546aaf0c3efa9d0337f79e9a6524708dd02ea1f8456a778f421ecaad2f6ff59c444cd7f39c9b9be05861ca83ef1f51c802a4f680674d9654a57d1b652f900b7c5fe3bb5b8fc45b1bbf593ead45afa1a07cb87deb1f22beab2fa0bfae4655b0acb818f0461f7350035bf1362bae883586be0da1b3194ff7b482bbbcca72139db9160b8b4918dcfbe5ad979709668b80209de3498e6a9c452ee58dc91a36215b145fbc812f0291cd4ca962183c52e992e47cf4d5e755475869a06123bb3dddfb8f612b449e8d0d1e922185e18aec53171463b3a87a0948bcda6d12fcd195ad4f5545744ce5a6728d41b7407fcdb843c100f3c9dfcea018a7225b94011ac8ebc1ff58f293d175361593c232fbfcf041cda717c081e0f7a727af3eaf1a4c55f8d7cef888f5c8a1ef03fcd4f08f35fcb1eef517cdb883923b44c12249b9e44499958beab46d64c08a11d5c33a1f7b1b6a7932e13fb7bd3909963a6a3f71c5cec4255109eb2c904853b09b3d48658e781bccd548786b1b8266d556dee86b2f5ce5783bd29afa4d4cefdbf76bd99310f271bbbb182e1f59fa449d87c6714d19211346155b08caac8122586aa1c9b6259581140baaaad379a5b2215bcfcbe1e0570580042410fbebbf42f93d928b3c2f5dbbe804d04af4c189e03cb46c0b71410ceaf53c2ee3881e8c3b3c9e425ec45bb30829b9432892295569c91573014c916ac3d30e56d662d5be5416a28b3ed701eb33e9bd6c1db074d4f2bc00731ee1f3537dae9e3d4bd058bed2eb85d948c5ecaa59edf8c0779723599b48069f74b5b1d4e64b6b12567a28b95b7e462ac39519c1cc1be3164a27afcc34fd12fb8d1dd6a1b29dcd9d803bf6a7c60cce31f8d9e6ea4f41f58fabd3620abfd2f2a9f7f584fe7db81112206c07b71e472dc8997c4a3eaebd7ae0c91b618ad3347174874eb2b10dee1b9ec379af1e55605ce0f51e92b8d2b3c2ddd8e3d9cf3fdd780b5167fc8b562dcc24aae0f2ecf5b57d5cf5e790688c9c3e01d5c4152ba7078bf95f45be42fb64fe106b941dae75d5da5bf314e7cc9d0b832f6871e2bac16a121c0b68fa8d1e2c8975d457a4bb22a672878b3daf7b0db850033cbdc82d06bdb703befa04dfd6b34ad8b0bc4d81e394dd965499ce566a920251e5c5e9917bad4898d61a6b99f9bf337d1d6d4d95e6dd0f471f326df5a5f74f34f2251a41508dc9da3bee6df593cb74e5ba2b9ce5e1d8bf45e77a0e286f59b59e2f71239dcf753b7d4c352fdfc21e4a8e757485511eacb7e3393df236dd62cfdecab40e330bef6977828dc0e3d42a983f4e3debebaca907bb84026a2d2a40df4b5670b2a8b49fda8c62baed56de33bdadfa793c3d7fdb0ac060dfe008583b76349fb66359c25c9465b8254485d0c87ec90c130104f7ae73559c6048200ea67d2c3fb59e523c0d9c4ba90c45fb12a2669bea04f315033c0bdbc2310e7b9119c724594dfd56ec7e663e697b94b50b11ec610f186d0b164450424fde47b0b7eb9395dd82363dbea7f0d917a5a6b94b96b0f5ea044224ce09ff976d21dd73c3b2f25c1f36b2a76efc400093b0ad31d8a44e1597c7e37e580318f8a13dd991ef512782a62f009f91e25bde37eadd8bc70d97016e782ff689555e844338ef89cdbadeb21598de1099154c2c98eb12e87248752658f37d69a1421a3d1c9c5f9d0fb740d256fe0a10d8bf9484c96aa41cbaf7ee6f874d2888b572c1d35649a52ca8d3b369816c83ec10627502b5f5ce5dc0695d96a0976d81a0f0153de1f263e3335bb947e46dadd4497912faa45f21561e1a3540a5dec3e3c298fe816a3bc518aee5803f8fc3d432e28b475d43becc64a96d3e62055c2ae31c69cb6c2609d421413913c22524341412923dbf87fe214325b5fbff29eb20bc038903e3edff6233b4dec62967dcbf138ed0160b0057aeeb904d38d6a3b3f1d54dd173db4e333bbafa38b77ad35fe4ea3c1f06c7e2b61da0452a39e83ef3b0e4346f78b067f631381dd96f7cc758099ba3c1fe24aeaec2e938f127ec2f533eb4fd986c6b5f06d0b8dfc18d674b7334ddf76b2c462b7a91e35874acfb0de3d3fbe998057c0ec783137660860dd0aaeaf7fdf0f01e188629673ae36238de06bd9298c855ae30b82cabb08038185abeca69711a7797bba2e6381dcb8af775c0594a8d4124970d0e7c4b96ed659bc1588778739d25514c4792a35c6c838ab8bbf1540ded4bb83d33c714901fa1ce2878b5fd3fb0df83816a8fb4e9c0022fd536293bb285f7ca2fd01e2fe992d22ba4b84d6cb99fd4acf033ea84e61b7aa03e5ae1c25f9abbe83c1ed3400567618214a11aee53a40fed46d2f836ccd6a9b693406afb3e8c5156a63a76d59be8b0076a75217f9c254890560eaf8cdededf4971197cd7a5a3695b567c22969c3b5d3722d1fa9db14da8f01bfc48b96d1de7252f2ee19cd10063dd83f51c71348007432a0e8375ee35663d66dc535a110d61f485f0a1644d4c753346f80fe71219a587d1ac2756a7e4e4fe994390aef435a6911bd8186bbb8b5784341b3fe5ef5eadd1f58fe131fa11c5fdf1a12b2733754cece8f9d13cfb45607baae1743b870fc604e73ca811c672f001ae0b91877dedb64255960a56ed54eeb185e54db300a307f69d830a62b4d580ac1941262c3a2ee3880a78ac0ff5b8214ee8c55c996a665afa64129dc44d96f80fa708737cbd33d976ee4f8437481f1025e72af4496fd098deeac7548d9d6c3be944c77d9c9b97d7d9f28b2125089019368fc842646b95083726303d0bb7cbae79a2f567b2d3c50200fb14b7486f3528f73347a732e21498ba7514191dbbe7c8568391a5619b6e684636daf2b7e566e5de3398146133808a394c9f9c55363b7123e219d148e84a05c4eb005124ff045033f579fc607071acf20450a60fd6d7d1730ec5fe986a9c59abc5d97bdac9ff9dd4c584b49197c9832d97c3e1df3deb538901c448bf1ee948941ba4cf30da1c2120b9dab75217b6060101200f8b7154fcaa646c1d5b7e9baa7db6e6cd87b3e97c8daa858cbd099fbaa4d081f11fad1b096d967b78a8f5fde113a665669bb1894f25336e1d138c5f01f1ff943cc3f827a2918076dfee0972007e050403170385365bc962e7673f7dc38c923ff7eac4dd4d196a6a4d288fd645369207f28c9663a3ea8876456d1a355716a215f30afc6f126fca2b7e64199bdb2bfae00f47aa0d3e6e910a77314a5b75c2bb685a9eed2df74bece314e34002ca0b52c96731f8af86c7a004a07d7445812896d59e126298046c304e23598e5796cc10e5ed77004aa555782b47331861ef73ba594f5a10303cf4a118ded59f09be191e39382f2ba32eaa8101bb6ac8b4711a4042fb7725bf1aba744a89ab87be4711d9199bbb16c8e920b5a4420cba2c6d900da818c7a989d77e3ed5bcc032567c939eb1cefc551d96a44f0aa6ffb8cc02d8405e772d1eb19afd30d4f59af132a16787f9fb1a28d6d92886de39e08101689df10f76b7fc94215facef9f218622f5ce053e3fed92e62c25deb703b78eeac0a9492fdc40238e734ae2fbf2f2a0f3bc4566264d4b2a0c85099ace74ee44a26ab5f35f6d9cb3d5f683260ea702d92235685ddc9d533ef66477042f4780884839e03b8fc51efd971939cd07c7744286467c4d5e2dfd478b9f47b3e771157e17021bd03a03a96ed8a138f72d8ce2a170a8165ebd0134c0f60e609cb57a025619430aa8ba9e6e6a9cd700c4525aa3b4de795c1aa167ea8b75f3102460aafa2d24a05b728f296292e84be7f6b43caca903c833697972e2c7375e9cf2f3675489c57404578090fce7b896a87897c9c5e8f1602e7d1f9f51493fd244c7f8270d410743a28797757c7f15814d84a439b87c2b8f2f84ce972a916921dbd529ac98b130d7c65ff65ded089c53b291476009a57ffe771ebfbb9dc972b3a6b9000f7f41a2e5abd992fa4562ccae15807abc7e5055207fc9f6767121ea31bff61d75e6709caec79845b752207c0fcee14147c756cd7ecbf83e1c5b82917191b00274d1b999ace88240591a6c59fb5973325b8aa149430d0bef81ada69d3732437e6ec73e1743538ea94bee62b841eb43a1a8ba15201495c41fec870df164771564dfcee935f71031a8b3da829fe2335e57ca3941b3f0c131500639bd384dc4033de7451e8887829cb8d38312f43bffa5d1d9065e47de924d9fafbca0065317ba2402927a5a0ba0617886b51053fa569f41a3aebb98292cbc13428c35584636e1d6a0e3d4e9cb8cc7ad9630b478e760a191f9eeff3dd476881ee2b2faaf40a2cd484718c5a8483ed585dcda4f646ff47bae9b00b1e31a7d95d4bd131c4be524e3ba6b3d7fb8f3217f30be63155339deaf853efc09766aa405d8335a484c91ee85e508d6b22776c7fbd47e3fe9f5ec649da30515c565df031edf9b8316e1638627e810a03d1c0f466c698c3583ad206d40ea8137f9737fa", 0x1000}, {&(0x7f00000012c0)="c7ae4c73f461a9b3231024f105015993eea2e272b217edce912452fa2446e5fa5fb5611d7962acf6d384053dfd0fb44f965025e7134e1901088c5b69ee63f9deda4892164c8b52fe43f1f9142874cdbfe1a597717277a04d7b760f3b62641d963122b03641eb73a3bc0d36bf39babe585d57481403cfb1e8359f79d2d25064a806d780305ea5408e683a473423bf7190bda6b8157b93a870e301a25c6c54e64e7260a21a927ec92abec18059592051b412c38ad8979c91d62d7690ed877f01", 0xbf}, {&(0x7f0000001380)="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", 0xfd}, {&(0x7f0000000200)="47ee47b4079f137c1248ba01586472fb8c3a7d0a1023b1d3e0147c4c99d06bffb374ecc8b8d0eb4568edf741b6481a1ac028228440fadd439d338a79d533c314a34e9eaae6c11d629e87f0b09fb460ff159a3fc9ba9a2da783f4c40f02a41c67988d31c0580291", 0x67}, {&(0x7f0000001480)="916dcfc71dec76804568e290984188af52704205a80f3b8d7a322e916873a80d9cd454cb2664d2296c1af347850c22fba4a398be671178c012743ac9eec486f845cafe613812326df6cf9756c28e09fac823774f", 0x54}, {&(0x7f0000001500)="9a36181d3c9b3e154a52879f51711818ef726e39b6b395871555f57cb8e56d4c66cc7dba06c2ee61e0a527bb9b13f22e7e61306b4f48a8c404c281190e7450aee233f72b55124c377ccde373b2d2c07b4bbdf89d3c3f8d4ee5991eaa5e3cf22ceae0be99795df80803d4eedd567624142e0895389bd28e", 0x77}, {&(0x7f0000001580)="dd8f28a9bd3453a7ecaffebc5e9cf753dc2ee8f64ded3aea2f801438ad502606f11753b22472068ac48b9a9dfbbb4e9e694b566386278bc1901f43e7fb55efad0ce4", 0x42}, {&(0x7f0000001600)="c640d68f3b07fd23f2a439b30291e9a35faace887895a1bd4b64a16903ffac22baa49117860364ce90d379131a7a8dd65adac9889a6258d6d5378128ea4a79f20ec020350a8281", 0x47}, {&(0x7f0000001680)="43149a177464b82b47be7dbf24b57422065a55c95195b0243aa774aea1b42629ee4cad41beb11e17ee725c5a9bb632d34a18bdec5bcfd1114726cda75e1e290280b2db5868952419089b0e632d5f8f0acb890566e4ade5d0826b1fd659677f4a8377bb8594563357a6a38f8ec6152861ff8e5c3813830ea44ddc66d12574ec0658202f2fa04904b8db3ff1c5", 0x8c}, {&(0x7f0000001740)="c212a957a7503e3b34eff2cf94904bf60b285f56894f3e5eef119be73c6d7d10379a3839b65616fa145379610a894fe94c316354ff0e026fe9c4168a194b9b567d1e0fe6c6a68df1fe54b44995f840453c14401e63ffc1bcfa6d4cb2b4aae7c354e37cb836e225648c9a228b2bae602b66", 0x71}], 0xa, 0x8) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 02:08:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r1 = socket(0x23, 0xc96bb1ecf436227a, 0x8c2c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r2, 0xf, 0x4af000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x2000) 02:08:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r2, &(0x7f0000003c00)=[{{&(0x7f0000000180)=@nl, 0x80, &(0x7f0000001500)=[{&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/77, 0x4d}, {&(0x7f0000000380)=""/18, 0x12}], 0x7, &(0x7f0000001580)=""/75, 0x4b}, 0x4}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001600)=""/157, 0x9d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/39, 0x27}, {&(0x7f0000002700)=""/60, 0x3c}, {&(0x7f0000002740)=""/56, 0x38}, {&(0x7f0000002780)=""/97, 0x61}], 0x6, &(0x7f0000002880)=""/62, 0x3e}, 0x4}, {{&(0x7f00000028c0)=@alg, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002940)=""/74, 0x4a}, {&(0x7f00000029c0)=""/235, 0xeb}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/53, 0x35}, {&(0x7f0000003b00)=""/11, 0xb}], 0x5, &(0x7f0000003bc0)=""/27, 0x1b}, 0x7}], 0x3, 0x102, &(0x7f0000003cc0)={0x0, 0x989680}) openat(r1, &(0x7f0000000100)='./file0\x00', 0x20000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x10, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000140)) 02:08:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1800003, 0x12, r0, 0x6ca5a000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x40, 0xfb, 0x9, 0x81, 0x0, 0xe87, 0x48800, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x40004, 0x8, 0x4767, 0x0, 0x2, 0x829, 0xa122, 0x0, 0x3, 0x0, 0xb0b2}, r0, 0xc, r0, 0x8) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000580)="f8e4cbc2ad86121cb6b29310e9413cab3d63ff1bd5d117abd0d3b43e894e7eebfcec2eb946a9a7062bcca62b64503e2bc686ae544aedc62f181fd391adc8cb53fbed87f40f076fdb4fd483864442aa059425c9a462286d980552577d40a50ea313c8df7016b1e158bf27", 0x6a}, {&(0x7f00000000c0)="c906046ebd6dd05aa7addc5377947b075ae0d0492fe82bc88f97ce0cd6bd68e21095eb8c45f90129b0318ada1806f1fb1de65baeb434ae62223accfa3682e1630941a3190518973a8c7489b108b251f9bb627068c916458bd6b04ff0a23f5c8f", 0x60}, {&(0x7f0000000140)="493b850ca3ead1391983a55ffb55e007f6c0622a6d0cfc1e5b", 0x19}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="d25fbdc1e5a7668f308d4d0b084e6c8c4c99bedbb784e321b9db9b8509ae1e272603170bcd1252fc5451d4e28cd571255eb59e58d9db7c482091398a5330c8f264aa66be55a048ab61e4ce0f", 0x4c}, {&(0x7f0000000240)="5a51d66250dce7e78c794ab9df552c5de71b35f3a930a39c7bc7a3547a19995ac7ed67014db4943f5da69316e121be82982e34589d89e111267c5aaf6a0ccea35200"/81, 0x51}, {&(0x7f00000002c0)="33cf150cb10b9a453cdbb48131edb19d64aeef6d5ab934913a293016c7842e3e54da2c872adab9d16e783502cdc526a8de710396cdabf4e1c44e921848f2a6cd4cac3e8c763d49435d73513ea122da9afad4f37a46aad7603377548dd82be851096dbfef6af2b5a38b90f150b0beceed73836c159254c52564fc39292542f1afb2be9a25c4cc67a1f03449bd09e4a9d68166021162b92ccc638a561fecd217f50b45d6e48083fa7abb408d00a39dd0ebfe5dce1564d9d6daedd0cd58f96a1a82f4fc80e48f8ffb1825a71f30c8e00000b657b6b5b8317a1965645ad5060451661d2286abea2d7948556b6f3d6e951b6311e4", 0xf2}, {&(0x7f00000004c0)="524900db60686fb254449668f8d5ece0c21e123518d49af7", 0x18}], 0x8, 0x6, 0x4) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:33 executing program 5 (fault-call:13 fault-nth:18): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 2762.234172][T26015] FAULT_INJECTION: forcing a failure. [ 2762.234172][T26015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2762.247675][T26015] CPU: 0 PID: 26015 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2762.257661][T26015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2762.267816][T26015] Call Trace: [ 2762.271105][T26015] dump_stack_lvl+0xb7/0x103 [ 2762.275686][T26015] dump_stack+0x11/0x1a [ 2762.279917][T26015] should_fail+0x23c/0x250 [ 2762.284403][T26015] should_fail_usercopy+0x16/0x20 [ 2762.289579][T26015] _copy_from_user+0x1c/0xd0 [ 2762.294314][T26015] get_timespec64+0x31/0xd0 [ 2762.298911][T26015] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2762.304541][T26015] ? exit_to_user_mode_prepare+0x65/0x190 [ 2762.310293][T26015] do_syscall_64+0x3d/0x90 [ 2762.314936][T26015] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2762.320819][T26015] RIP: 0033:0x4665f9 [ 2762.324831][T26015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2762.344431][T26015] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2762.352826][T26015] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2762.361141][T26015] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2762.369159][T26015] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 02:08:34 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x983404, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) fsetxattr(r1, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)='/proc/self\x00', 0xb, 0x3) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="e992228ef9153bd65b831306ab4083e62a2d67d49b2485240520c2dd512f953be987e01c006b90fabb64283785ef9a33f4cac4e683ae0fe19f445d78775eb79c9a8e0c07f43d944a74b46fa7fe7f5ee8d753202fe32551d34b7b3cd22b5fe03727e3937a207851d303dcf9937a280cdad303", 0x72}, {&(0x7f00000004c0)="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", 0x1000}], 0x2, 0x3) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc00a) 02:08:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001300), 0x200, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001380)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, &(0x7f0000001340), 0x0, 0x0, 0x80000}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mq_notify(r5, &(0x7f00000012c0)={0x0, 0x11, 0x2, @thr={&(0x7f0000000200)="c09332cf0519ee4d01", &(0x7f00000002c0)="9ab6c775ec08639211bb18164bd1e84bc52e5f35be3e4e981987c650dfe580e234957ac90be8d9ff22d7885f1395a7cd5d48b775e6e906a861cf7e2a88a6867c1883077783348f01a90881944778c3a297e90a6a315e732a64d1d6fef5c954e444785fc9d024985ceb4e313bdb09e80a3be9ca2720ffdddaf21f461a4c38546e0d23f4b55268d92b083eb97a2b1eb6d8a14a4e28b8c1bc75dac664fe1f545b9a5e5a50d41a3964c7118687ba494ce020893533d48cb52292324a02d0b7934da86b7e5e07c88c586f7c1fafde089af618882a2adbc7dd25def88b55c4880cd43cf429e1eb757b624c73724be40ae8ff7e9f523f855007fc24eb748021f5ac15aa12fdd93b8e5054eeacf258628008e9a64a37b16c32dd59bb0bf49c401011c5c9afa2e2cb2bb33779ff87ff396746b9165f9e3d14befa1f1f498340398d584c56b2016b9a73d5d4d391c5684ca96f9c0f3ef20b09e2fe942156efe489afc5eae849a52687ee3e78534f2cbe804c28ad9f0b1765e7469fd7425be8f3ccf84aad1166442fdce48d89a5934215206201dc1222fb10c753ca98d50d0e020dafbd2cdc7a604978623cc9c48cb82299838fb7369891851f0bc6e3f7b26c5b814319f6f4427b9a9598e1e275fc47b4cdd6b9f75384b7b080faf87b8f43fb807aebe50c0c5acc8916283c8db570063b0b07648501b82308ebec7a502f97fb9ae8b573d520e9cb2bc8ae3b4c3108f8c3824625b7cb7e3c5242c1102b769424d6088bb1fb169c0fa8732272ba01315d0921db06aeffc73cf9e0e73b3c15ef320f6ef8f796c2a54763e92efc3d3d61f0bdb0b469c3332fff0a2c2da6a4daed7f1269f38b6136c60667f8114590a5dd6e05305a9810af17a9dbe4c53dd792db167c9d66cd0be23485e071d01f9ffa1ae3480762a0170a5a1db916c6ea35ea75116c9dc6e97df4952a7393fce3cc41dd8ea34986725fc3c684cb7ad6d5672e9562b61762d774fbaef75a5544a322ce45e4a7368b2c2431dd0da3bb9575bbd495436101052a270576796d02e9d42384cefd76ac98a2bead56a9f441d8e5b2687bd5045a6063ffe35b09f72325504161b61eb6e43595935e561da0b87ed1cd7f7b0bc87b1593ce2349dc431ace1980a7964403dea282ca8441c6eb70514751b38d8721912daf43a229a9286f5b4a87af883a161957f8763614e4cdb3f12b2028b1e212b25cc913d531083a997d829550cc45e29372dc32ab6e77729ad56a019b9a79af16411f61c051f9750798fdb6d61ada4fe4e41fe36a80729a9f6cf03ee97d5a1cd55faef6ca0cc6b82deb9bbec7afdd5e150d62f9bce7a033559191052230c217520e705ba969ec0cb9b94f29b65a54e3034010767f1214dfa0f51be67eb639b1a081383e8a760dea87481e1b4e16ab63c302e23d4a008640c1cd81a93192d00b2569c47e380e9f21577ea1a93e209d6e88ea17999774e12902e90948f4cd11a0fafd2b89d6daf0b238996047cac630d89f340de652daf95d3e134aa9c3a317beeec4af8e2451cadd14addefdc1b9c99229f6b2b0fbc5329415e9ac7a1fab2323cb8c2c185f023fad7cee3e5c2921746458d814959212834afbaaa9f92975a34d6e456ef3cfbb17eb940d906c33f8a39a8a1cf01f29fd4bd95d43d413a509294948dc7be288b2e45bc99ba92da0d93a0ad13f22e225c917f3e6d39076ab46c24751a16e99bfc24e99449b2136e29036f272eb1f20725344d1d1f791e104ccd7f149d04cf2ab05f385b0c094150061ff401340994399a83023b1717e08906083492aac80d6d274731a3da499c287bf351a9298c98845bdd91af72ce6d03fa0d7b5d15f5e12488ecf376da60cd78ed875482c27225d67e47dab47ae5535dd0d2731deca5b125dcb47fc461237ce77c11ac35691825de5ce460cb6f95f477896be23f38cf5960c05bc55ba662b0d303d62075861208b6e7ca2f82c4ebcbdd734e9ef7aeba638df6f569d19152a508f6d7881f0f00ff23495a7873cdc5e43faba1a35c739609248d225bb35a8cb849ce01f42a14052b1f66d80984df4bcd1de82ebed679b53f8132e04b0716969e142f02956ba2ed31a073735e96eaf9cbdd15c3f4c34914ce0716bc84c69ceae67fbdf1cbbd669b4b7731e9f92f1a0ff7e935a7ed5a0c236634f5f605d0f4c3045b86ebe98568da63cbd73a8c9acceaabbf349d7882903f372f132c993d447569c2a9383dbf5e2d6de255c6e6f2c898c8a8ec78916ca6466add475ce04f465c9a44c8871eb34c007a512e30c08cac8bc686048cd3f2d1b0fbb6b85f09d8b58a39d671505460e0a258d0bed2ebf3fc3ae1fdb42de5c0584ebf7655f2fdb928d958683080d892387d1f912d8cc94b063bfeef4a72b6745a07f3444ff73bb341ad920fcc34c432c7ae95c577a663ba5e122ea2fbf03ebcfcd59b1b3361bfc868b50e5f252e644c57c30e50a9778005b1a629256e63e979c2822a2d61f22caf6fe1bd0b675f7c96924b075ddbd45258f3ee2537024296597514b3d6a587a692e9bcd9f57ce655014c3a55b2d675346319fc2db8c7ab61039c52765ff0c0cec64cd058c4c2a3c4973492366c636039b8a65285a690185ccac42d582e418e21e2fc19e8dec8d089d5663a8ff5504987f76726e5a04cfd19c98b497da1a86fe49ad638a432896625fd8f6a3557945a0e8ca7128e23d3fcad7a66d1d6d1cda259b664b9a3cf8518b0a8427e252dbe30a768ae7c27293aa39ec547f9a2ec55ad513a7e73137b00e6a82f8c8fd64038b0c29b5936152b7bbe740d02110f66114d020a1d0ef532891c65c4cf059c82e562e474a4348281adc42612f6cb40f5560349216866bf200ce672f87ac1b56387da65ea75441158ad0abbe03c9b6f94703787bce5ac27e349067caa6e90341aaeaf0c75dea6cab2243bbcceb67bcb9893218c4af9a8105ccb6d1703e0de02e9c35f57a9b018bd7e98c7671dbbf2995d18e826d6a38cd233a86bd5b3660f949a084abd3be2f3f32e76a63a85f8cc7f85eb661a8cca6b827c8c36828293ef1554dc24faa18571f7e8dff1e8b62cc69958743d8742f210e5276c11bc0ba7d4b42ca8a495125f3d629048267556fead5b6c8aae7fedc538c0ffb05966dad5c25ad12d1639fdb6450927f7d4e989d088368eaf32897815831c968bc02f54af5af1be48fd40fe350f0ca9506eecce137e7bf275d32c0d4dfc9cc30286666e80165c7e822f5e5f5d5755f992c35adcf06e05f56ab39db7981753ed8d714d739ed250e74ae3e1e5df044f13d387b3798ff9bb777c5e67753aed05ffe088881491c4dc750023273df122dd7eb0b4d6d9960b0b64ebfffec79b7d1414ce056df958b35065217b412ab4c8c3e4863eb54ac819e63a11aedda6e8cce97004cba776c04e8f45fb2fc93488e8244a27fd3a1ee50a3f0625aafb4781de46ba8c94992d486322fcb8bde63da577b7854fb8ec7028fff305baca87913c380c2b70c1fbdb817e92bba602a5d714bae91decca12e2144363f33111b110366a87828e1dc278e415dfdae8adbf308a93b6e093394a9626763cbf5092b3a5b7e8ce81c211073f4c38ac3a231d4bca897525d766a14bae583302a22be359dcd270c256e04ae2d75cd6be4eb62d4ee6fdbd32cfabf17e4f949e3872344cedfee4c436d830494c827f1c7ca0da50d30ba9bd7ea3c4169b7edfe2ba227849549f94a042da5533bd519b4b7e833f41ea740bacd5b11f89f59a94c857c09cb93826d6ecac1ceb02d913eb0c2484d91e14bc4db37f0dbbc19a6df28be72277776ac2ec9944ffa73ef12afce7f402557d54bb503f4cef71f3a2452fe1b03be4ef8489ca77bb6fe1157c428fcd89fb4078067a852f6672c1ab57e4a7f0f48e11c09f6042972765446f5cb6c139a840183bb336922e53578476d3ff3f8d6e54086ff0b1417fcb13024f34e26aeaa2e553f5a502d31a8916a8376805dc979526d8930b11034a64e620dd7c1160b3043fb855e11011db98ba2bd9d4c35f93655d713f95646a0a53be9fcb561daa865c716f754b22fde17d97372d075ff0eb0ee284066e21083670712a3a752b952c514c41d6a8b1e6eaa9e5adb000adbfa140d946cd09728b5f8a53326d0d846cf5bf92a48e9f073b26008f94ae7c691da673a0e330834f9943b36f9633d63c22cef0e7559eb55bf5ca07f5a48e088725f84cd0025434e02874441ae4dfed0b087046e1b7260a49428e5c419ea660445c65f7abaa1e1eff377eaf6b4e792218333746ffbdeb05185866e14f528e8e31b1003fcdeb03734504e8e8dffc1d941c62527a2701ee9d963908f50acbeecf6de25df06dafeb86e14adf35f9e89402f9747f434b397e7a1fcbec5851b043bf9064d4a635417976178aa96e26d7fe42c8e93f6e4e0b30702ff810faf6e7da518c93d745bd04232af31bcc633fa84e5c5398ad25220fcfc0f7963e0de72275d8dd5e97de7d2fabb38b22b9419a3080976d747deff70695a3f73fce2f3654a0aca2229567e3ef927d83db61fe30c8e120fb758a474df1b64c2d0d07f7778631a2b61eecf17930aa2e5a0c38a46d2951dfa3d2a48b8c21ecc8409cfe356394ea7a81d35030e39aff5ce135fe9b475477ba4b4080fad0b9ceca6cb2b67c5b3ce8e714a41a59be6718ade1a19d56888e53a98b19b512954b3fbed37451c85ac3ae62c40e129e5f069678581df468e61038314f2b6c5930d5b6561c00a15207a53088baea790d550bc8eebca6f351acc10cfa70ca0d14be7104a00845ddf0e29dabfd8246478366ae0be1c1afc323fd362ccccc7746cc99a2b9360e1d94d31b67004428eb3dd3fdc50ad0d4320b143eb49e97498062c786d300cbc556cb636d640553e6f0e9db61369bfa1df1838cbef1bace47388f06d7692ac57b6558f9255dd03121e6847cdb546fe744638d8921a1fb6d37d27029435fd95c1544a62e422d3a0f9f55238dc2592b6f53a0275167d0927ed77782f2e56239f68807367e3fe5d0d0d7f1b421de114d1e63b06616128f131519e39501bf5d1c7493abb9930b1696eadf73668514f9802fe747c86cbd3ab0b97b344504558510efcae67a36078c707c8db52307f35ef4a59d8aa01ca080c758cbe23178bb4010d137138832b42b5f3ebb8109db0fc1e449b4e12ebdfd0031c85fd4c06e95554ba22ada94cdffdc059aaf1a67a46c75399a80ed538ecbaf7a09c8a83e790d7c3f2aacb09a6cc472743efc1e369818f04928467eb4e24b6bb6de3d266f27e6a1b6cbf22eec7a74895337522e7e3c1afa842dd147d898a173aa33d9cf0bb68c9b15577d826174ab978ad8cbdfb0fd58ff03548ece86306ec2b497840d351a84580d229f11df5db6087d34917cdf76d277efbdd1f9f567471116cc5652490223945d7a2b6bb7ed9c4431c933f6d50e32598b6670dc5026cc6ce63acd740ee2b6f1c1d0bcd57d3c01a7a5328cdb7538af44e1f215b981b19a8f46cbcd0eaff3c1c229615844070b598967dc0ce63bffdfd3fdf282d47a10b107d4da586093af164f80c7ce06b98971ab62f5c672632f752bcda3b01f337aee380d44b61b73988a22db45ab223f5b23fc3824e441a59384d66aebc19002472dd16cf5090932f5091da0416e146fa77fe759391484a9c5d5e293787bb552e9b091561faea8eb07dec430824b662ae40fa1b7d32f07a3097b977bf9998896a0394a3ed4692ea737c069bad8bb5a31f3a47416ab986de8a65120521b14229e8e4f60c6c47d2073b6effd4d6b233af32ac5275238b2eadf14568"}}) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r6+10000000}, 0x0) 02:08:34 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x1e00000000000000) [ 2762.377128][T26015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2762.385272][T26015] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) r1 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000100)={0x2}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x110) write$evdev(r2, &(0x7f0000000180)=[{{0x0, 0xea60}, 0x1f, 0x4, 0x7ff}], 0x18) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000000) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000480)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r2}, "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"}) 02:08:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x420001, 0x21) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) mmap(&(0x7f00003a1000/0xd000)=nil, 0xd000, 0x2000000, 0x30, r1, 0x59cbb000) 02:08:34 executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/188, 0xbc}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000000200)=""/42, 0x2a}], 0x3, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) sync_file_range(r0, 0xb, 0x15d, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$addseals(r1, 0x409, 0xc) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7c3f, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x200004, 0x169, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) mremap(&(0x7f00005fe000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 02:08:34 executing program 5 (fault-call:13 fault-nth:19): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 2763.053161][T26082] FAULT_INJECTION: forcing a failure. [ 2763.053161][T26082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2763.066586][T26082] CPU: 1 PID: 26082 Comm: syz-executor.5 Tainted: G W 5.14.0-syzkaller #0 [ 2763.076999][T26082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2763.087722][T26082] Call Trace: [ 2763.091007][T26082] dump_stack_lvl+0xb7/0x103 [ 2763.096209][T26082] dump_stack+0x11/0x1a [ 2763.100422][T26082] should_fail+0x23c/0x250 [ 2763.104886][T26082] should_fail_usercopy+0x16/0x20 [ 2763.109910][T26082] _copy_from_user+0x1c/0xd0 [ 2763.114665][T26082] get_timespec64+0x31/0xd0 [ 2763.119155][T26082] __x64_sys_clock_nanosleep+0x10c/0x220 [ 2763.124962][T26082] ? exit_to_user_mode_prepare+0x65/0x190 [ 2763.130875][T26082] do_syscall_64+0x3d/0x90 [ 2763.135340][T26082] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2763.141418][T26082] RIP: 0033:0x4665f9 [ 2763.145324][T26082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2763.165057][T26082] RSP: 002b:00007f09793ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 2763.173451][T26082] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2763.181400][T26082] RDX: 0000000020000280 RSI: 0000000001c58461 RDI: 0000000000000002 [ 2763.189351][T26082] RBP: 00007f09793ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2763.197399][T26082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2763.205351][T26082] R13: 00007ffd70d4e70f R14: 00007f09793ef300 R15: 0000000000022000 02:08:35 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x9a11db, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:35 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc00b) 02:08:35 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x6, 0x0, 0x1, 0x0, 0x81, 0x10000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xd25, 0x2, @perf_config_ext={0x7, 0x1527}, 0x800, 0xfff, 0x3f, 0x9, 0x254, 0x988, 0x7, 0x0, 0xfffffffd, 0x0, 0x400}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) 02:08:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000) 02:08:35 executing program 4: r0 = shmget(0x0, 0x1000, 0x20, &(0x7f000023d000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000001300)={0x4, 0x80, 0x80, 0x78, 0x2, 0x7, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x7, 0xffffffff80000000}, 0x51, 0x3, 0x6, 0x3, 0x5, 0x5e, 0x92b2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001280)={0x0, r3, 0xffffffff, 0x0, 0x3f, 0x63d}) shmat(r0, &(0x7f000069a000/0x400000)=nil, 0x2000) getsockopt$inet_opts(r2, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) preadv(r2, &(0x7f0000001600), 0x0, 0x1f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f00000012c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/163, 0xa3}, {&(0x7f0000001200)=""/120, 0x78}], 0x3, 0xd9f, 0x0) syz_io_uring_setup(0x7c8f, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) 02:08:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x89, 0x7f, @buffer={0x0, 0xa5, &(0x7f0000000040)=""/165}, &(0x7f0000000100)="c1440e7faa6d2dce97076613865e807ed2b9b8a1faafcac1da671d3dda3eebbf33ae76ac9db2ca5da0e822931d144c820653ee75eeb18812a4f0bc100d082b732a35aefad61ba7032b381930eb49342ec2a9fef416b71164d8d8a0b62435dc316d6be73f75c82d92d15c7520fba1c06d7e8e3bb39a550911994898c42f56ff1ff8b7a46a50945342a9", &(0x7f00000001c0)=""/16, 0x0, 0x10010, 0x2, &(0x7f0000000200)}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:35 executing program 5 (fault-call:13 fault-nth:20): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x124) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = epoll_create1(0x80000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r1, 0x9537d000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:35 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r0 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffa, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000100)="26b552ccb49c906b89e2c61635374f47ecf5807d99f18deaa49edfb0a9d26495db3e5666e4bfbf890fe95cf3a80a9457343e9f3764178383ca979d60c81631570e78611d977cfa259e11a724bbffa09ecf1bf2007af9482d931a284aaea58316835bcb014e9b8f5f679af7c83039d90d06148cece69af484d8b103d20a5c2c24ad9cd80ff21799482c251bcca5847927603dc80056644ec06edbe4670cbe562e772ef6511382203d", 0xa8, 0x9}, {&(0x7f00000001c0)="59a84b8f436a42404868883cb3db3975f49802c880f2f231b87511a39999fda6202cddee3360f41726896364fd81f27769d14ccfc61c90bed259c588cd9b9296b8180a95921395a8ad079841f0633a710b078ceb5c971ec8c87a3c32aa22f8fcff3941fe31f48067dc4f9f969b229bd10f9e4c4d2673ca7b4f2eb31e8a1ed6a1fb9c4152dcc4653e9242c88b57a373cc6fbf527c79764fd7b63241443a139274d140310b7f", 0xa5, 0x7}, {&(0x7f0000000280), 0x0, 0x7}], 0x100000, &(0x7f00000004c0)={[{@nodots}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@nodots}, {@nodots}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x30, 0x34, 0xfcedbf791023b4ba, 0x30, 0x30, 0x37], 0x2d, [0x33, 0x37, 0x36, 0x34], 0x2d, [0x33, 0x38, 0x66, 0x65], 0x2d, [0x32, 0x34, 0x65, 0x63], 0x2d, [0x31, 0x33, 0x61, 0x36, 0x33, 0x36, 0x30, 0x35]}}}, {@seclabel}, {@subj_type={'subj_type', 0x3d, '+'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@dont_appraise}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@audit}]}) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x412002, 0x140) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x4956, &(0x7f00000005c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f000054f000/0x2000)=nil, 0x2000, 0x200000d, 0x20010, r0, 0x10000000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r2, r5, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000080)={r6, r7+60000000}, 0x1, 0x1}, 0xfffffffe) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x9b794e, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) 02:08:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) fcntl$setlease(r0, 0x400, 0x1) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x6) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0x0, 0xb8030000}, &(0x7f0000624000/0x2000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 02:08:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc00c) 02:08:36 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) gettid() 02:08:36 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffff00000000) 02:08:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f00002f2000/0x4000)=nil, 0x4000, 0x3000001, 0x40010, r0, 0x8000000) r2 = syz_io_uring_setup(0x4956, &(0x7f00000005c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) recvmmsg$unix(r0, &(0x7f0000002e00)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/109, 0x6d}], 0x4, &(0x7f00000001c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000240), 0x6e, &(0x7f0000002700)=[{&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000024c0)=""/128, 0x80}, {&(0x7f0000002540)=""/252, 0xfc}, {&(0x7f0000002640)=""/132, 0x84}], 0x6, &(0x7f0000002780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/99, 0x63}, {&(0x7f0000002940)=""/151, 0x97}, {&(0x7f0000002a00)=""/167, 0xa7}, {&(0x7f0000002ac0)=""/175, 0xaf}, {&(0x7f0000002b80)=""/92, 0x5c}, {&(0x7f0000002c00)=""/97, 0x61}], 0x7, &(0x7f0000002d00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}], 0x3, 0x40000120, &(0x7f0000002ec0)={0x77359400}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) preadv(r6, &(0x7f0000003280)=[{&(0x7f0000002f40)=""/8, 0x8}, {&(0x7f0000002f80)=""/171, 0xab}, {&(0x7f0000003040)=""/215, 0xd7}, {&(0x7f0000003140)}, {&(0x7f0000003180)=""/220, 0xdc}], 0x5, 0x1, 0x1f) syz_io_uring_submit(r1, r5, &(0x7f0000002f00)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r8}}, 0xffff) 02:08:36 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x2, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x1c58461, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 02:08:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000001c40)) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x84080, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0xb8030000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x4956, &(0x7f00000005c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x10001) openat(0xffffffffffffffff, &(0x7f0000001d40)='./file0\x00', 0x20c2, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000001c00)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001bc0)={&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000140)="007f56f6c62955e4ed54bea22b85847b67eb41228ee9167f3ed9a97e59428b29ceefce5b03cbc7669cd45e9023ac38c0f241dd0f05bc8c6ba720866e59ba7c7c44f67560aa0454d8738e8117785465ca59c81d0eaf70696b987e25fb210319744c", 0x61}, {&(0x7f00000001c0)="ad8337b67dd676a09460784ec4abdd2437935ad4afd733550be8e348796d89838e40572efba45e02deb161945c82685c90a045d4be5198a0b752b005338f6e2886a1db2cf19ce3e31b6f811813d16c739a6cd37d75f4b2c63065db645cddb2a80e78f8ef5f5bfa1cdd6f04f780a308b804e584b6dcd05722eab203c1daaf37fa864ffbdcbf66c3c521", 0x89}, {&(0x7f0000000280)="ead559731f7e004f5d3fd68e055585f4bc33de8e9526bfc8e3f72e1e72eaa648974e8b8381509e8a2bfdcaf7ccdf9803cd3b3d8501f2651f85c17195888400ebf8bef0aa6b185c1368d727ea41497df8718e9a335d3f49142576957c3e8384d8e32041481dea631d079ba49e842ba7a0af8f614f46f204e89ded944eb13e5368b4f709bfd899db24f1", 0x89}, {&(0x7f0000000340)="ca7c0b5772aa8ae220473a6cd51a6412cbb6f40a2f87e89cd57102af7466de9b3cc2c54f0b79e516847ec932d67be456835efdcf45cc8fb966f9829dba731d", 0x3f}, {&(0x7f0000000380)="3afdb54f", 0x4}, {&(0x7f00000008c0)="351545f676253e8b749fba97401b5be2f60e38be1bb034bb5dd4ba894ce37d090518e06d028ea3654d5c8b92d4a8cf8a1647f213b65b5b298242e7cb055c2f6068bac2f312a653739247016f0f2b4084a3c2f8494e3043c7429e9a91885d8a8b2f863141", 0x64}, {&(0x7f0000000940)="725e87a034da369fed55816c8e8428d939ac91f6b25d8638935ef0bfd97491d52c757087b0307541822a1e81890924acfa7de585573a17087272cf5172c63ed02408a70f8cf1b2f0385d7142c1466bed903c67225783530d8b9fff77f94feb2eeb023dfe994fba909fadb3e28d5c89bdcd47323900a4e793a02949763df67e56efa18d1e1729879587eee962b0fc76065a9cd24ab00e553d3c9eb0ff743013b29a8252ffa89274646cbe0ac41c2a", 0xae}, {&(0x7f0000000a00)="6ebc182720c3aa9b3a240add1d1e8fe51cf1313cf1a8741d4edad73106a246f515538f1a00fd2f", 0x27}], 0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32], 0x10d8}, 0x0, 0x1, 0x1}, 0x1f) getsockopt$inet_opts(r3, 0x0, 0xb, &(0x7f0000937fed)=""/1, &(0x7f0000000000)=0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000004c0)={0x0, 0x3ff, 0x4000000000008001, 0x1}) r8 = signalfd(r1, &(0x7f0000001c80)={[0x9]}, 0x8) ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000001d00)=@add_del={0x2, &(0x7f0000001cc0)='veth1_macvtap\x00'}) 02:08:36 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x17, 0x0, @thr={&(0x7f0000000300)="033ff6cb5462155df50fc7f8277a74afffd355ed1c0ada6dd1c1d3ccf931b1f614726296775e67be2fd05303534c6ea7430188c328e776de872e1555033fe1bf492311b923b3461715c711ef181730c694e8435a1ebbded873aa264f8b8de02a87213440bd4b60328c62a5114668ce1a472fd91cff3f0386e8911d11864a56b9c30f8d1dcd5bb17baa63a19d664083f764153ce0489d53e93557c25b91801e6720a5aa78d6604752df53b13c73ab0047e2353d6e4b5e215177606241b42775072e11", &(0x7f0000000400)="b36741cc1ec63f2e7863a61e54c04a6026eb8e777e443b3c30efe2ddd17c136afecfc1af44f3de4a6529809af2b5aa4b1b9c3f845c989015f7b3da2a9d1802ce45ab8c70ec492460c478c6e410c8f02f34666602f96c48d36c8ba597f7cf23fd56e232469b69ca9742f00787f3a84c42dd2b416682ff3111b430518360dad2addcc8b2e650da4fe7b68150881adffacd06f0739b1975e8ad1554f6ca6905178a1dbb34e6f52aace658a5181cf8be886db9bb563d80f97b4c5501c1a387bd41e710c69adaa9bac6ba4cfb47e63292e1"}}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) timer_create(0x5, &(0x7f0000000240)={0x0, 0x3c, 0x5, @thr={&(0x7f0000000080)="fe6927", &(0x7f00000001c0)="01a37e2bbcad28941b6c3295fded470e6171818333a3326c839229e5bba33839920680fbd16ac02464e849df54ddcadc7ce209ef3751d2525169760ae67a88b076fd752b8422b93c6568767d2a4ce87e5e434ebffdc4399f2112547f17e8893a81c387235c80fe1db715096cbd41"}}, &(0x7f00000002c0)) 02:08:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x8800000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x401ffc00d) 02:08:36 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000002580)={0x18f0, 0x0, 0x8, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x77}, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x0, 0x3e}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x79c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x78c, 0x4, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_MASK={0xdc, 0x1, "092441750f2fb7a1f23177a225c703d873c015404ad6eb3b3ea1ff5d147cdfee1ff70b85420b4494a125e707c53a8e2343f0a4e851de3bca0ead10123d92fb747f63bba97f8c28915670e064e8ce5ed7912cd1985137bbe88bc70dce69374ce9a264be8d2eef669562ca6325c17fdccf01c9edd82d3aa5da7bcfd1fb371857359c8cb4557552309937a2223c6458383536abe542542965cdc9461418e3f6f2d08ee73894dd58aab03a9b86ba772db646df50ba1cd779fe48627853372a182e8e996bfed861d303541f2ed1e44e9983283594382ef726724f"}]}, {0x2b0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x6f, 0x2, "c7a2abb51c9245e4722b1f3a08302b58084880ae2f777bb5ed73093ed1895db6a122847653bbd231a19372f7b29dff2d3d4a9a851a2948c7389fe195abbf457199ee435e23b05fe36a65ffeda90d74f810e7df5343f042e53256b3596169f537d14fe71d43514ae6fe282c"}, @NL80211_PKTPAT_PATTERN={0x50, 0x2, "39099b82c139d4c50f4558863e413ba813c8a9612e62116dbae288a3f4d3b21a3b1223426e968bb9c78d834a905c4693c972124377e53d502448dc748c0fcf9ad2fb8db5b94a1cf7f9db5fbe"}, @NL80211_PKTPAT_MASK={0x90, 0x1, "bd6f8658262cf192ea00908a66c2bfc4c7cb25912a8d482cb646f73223c3b3c6c38659c805d9b97fc7725ad5dcafba4166116083df208218711a20c79349ed350a00307ca8595776a9602a2d11a0baf1282dbaf2589f85fea378cbf6b5587e1a4d25377b90ccf0cc8e5fd13fae05224eb6857fa36b667cb57fb264e61c066984c09fe5837661b47f72c6741b"}, @NL80211_PKTPAT_PATTERN={0x5f, 0x2, "4b68950614b33a49ed1669eff1229c063b6b57883e6acc1417bd89a6b36caa8627c1ee7102c3cefb027606946e328f1ec0ea36ddf6844da88510cb51699e211caa6561029a647516a7e7fb7270740aa683cc99350a83ab8a868e5e"}, @NL80211_PKTPAT_MASK={0xfa, 0x1, "0c349720562815cf37e6469bbb3a029c70dadfef1392cb20de21788865d7d3acf5d3aefe5a8a489c72281014f71dac86b61eefb19729ff0716cb4f95160eacfb5f5b86cb97389ca2a608404fde984395ed6f1b72629c8cd3d16a2ef26446fe1569e9086a5425c2f3ab74cefb59ac75038518d929ba16e968fd456b8c258c70509f477b356986e5454e1b5e02ca97cb06ea7d9d96678a979e6d82a21216dd62f6fcd0cd737397910562e23686541954f0d606b0b00023e1f2b894a3f98da45d40103167ce97f00a5552659c6e5dced8e8382fa8548a66c2cfb49041a79174feb54ba4fe6a7acfde04cba394c37be19901e7b6864a76d8"}]}, {0x118, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0x71, 0x2, "cc8eba41288b7384646fa1fa0cc197cdc8e73ab091c275e8c6e72cf67ce5c9f928e5733b4b74de6fa458cfb58c33dfdc4ae143822a90917d8e0f59ded9d28d8ae9cef74e7e94d5caccf416a21f9c5df349d5f1290fe6a9ad1ae934cb575f98480a8b83c540e2ba3fbebc3164ad"}, @NL80211_PKTPAT_MASK={0x27, 0x1, "7d4eba2a43f7e700340cffb03b0374dc1d17bc03817a498e62f5e968de1c87c560cc63"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_PATTERN={0x5a, 0x2, "0d5c9ced18925ca7931960b0a2e53efc5c519f1e9fef86a85e9ad70e9753f07de109f67fe275743ccbd4d4465558c5215513483863d62c0197eecb3a85c0c6188e6672f00a04652f492802fede7d58a097039b6db667"}, @NL80211_PKTPAT_MASK={0x4}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1dcec85d}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0x7a, 0x2, "227b19dce69c79e9c17988e3fcee0f4ec937872a8d17ba546ab56bf57025fc303e992ff15eff831c0c5d456b710c984847dee65d27038c999c51b7c70308489fcb5e67b27eac3260ff9568447661b0f699eee8d2ab063472f93c8f5004c0ccfa01f61f84f82fd2ae850bfd75059bf5e03d1c13e70146"}, @NL80211_PKTPAT_PATTERN={0x45, 0x2, "8999ce160b655cae5ab43ebfdd432768d81d6026510e70db66a1efc7ebc7e744095ad3b365812098903bdf8b07813bd9d65c3f251d0df97fc0d5ce0862753ded41"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_PATTERN={0x18, 0x2, "34fef65a49d2c23d79baa16abc368224454e87d4"}]}, {0x1dc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_MASK={0xe1, 0x1, "213c9554517e5bae3a4b734ee24f53767ad7be6d15451ad7f39fc22611fc1e945abd4512da2e4fd8b6514b54f4cf196a207e034ae0f3f2bd3e2973736b5bb9dd5b9afe043dc32f7d884c017b748a4e26d87eed9e16d4f3198eeb1ded7f63300b5e303fecd7d39cb0df1e0d725ef4948c50b1a9ae23c11eeaa800e396d86707ffd4d052af3f0aa8a7a74ba3416d7b5ad6c40c16bbee1bedb5858be92fb478e35e8f435d985f0df06bb27dfce6d11dd46bf241659785c277e517ea928b9f27d4d521e0ceafeaadfbfffad0b1ee22a305a8c1f682fb36bc7667d25e9206f3"}, @NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_PATTERN={0x8, 0x2, "e5141c65"}, @NL80211_PKTPAT_PATTERN={0x93, 0x2, "38ce83c3407489d5777f6e8e74903bbe0dd7c24656da03e629635d7d3a473dc6804e6ac4d4a7215fe87335e128e207547745fcfa2a3ead392a422130bd8d5dbdb8e3da2a68f4ec9973c43a94aea084a207b18206a2d13f075acd50a90d9bf9aaed8c520f2035ec097de86bc79ea0008b230698634ab11506368cc4762c1fda7253dfd832c7a8af4d3703be3e8faa76"}, @NL80211_PKTPAT_PATTERN={0x4a, 0x2, "501ae10cf7d3a8656378af52cb634bf15a7bd8313d65972867af8f39197bd77b1c739baf95872786efc506e17eaa9943f5e8b41a200407d1ab6c6ae8eaa691c795d1f2fa7a81"}]}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xf74, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xf64, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x0, 0x20}}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xdd, 0xa, "e891934a7d38c5dd8134fd9602e4fbf671eaf401142e93dcb1ea39b9c1210d6c965a4e2df60d501c84779c8af3b7c69ecfdc95f2004cc05ed80136bdb5a44340c75a6bbf73ed0b6743edd910d94b130df4c8a630a51d2fd0638ad5d03c4f374daf4bb001eee060cb38668adc9e035f42b3dd2bb08ff965df16e17d0d2a8b30986209bfc693d340aa8383ccb0f16e058be94ded16ba78ce465c04b26eeaee695f1f29857767854d836fb49ceee26944baef0aaa04a8f279d7b1f2400be17085bcd4df91de9a6e6826251b6d375afed9cc46c53d1f346ed627bd"}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x14, 0x6, "6cc07ae7c46ec0290fb96c53f827f376"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x1}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xdbc, 0x6, "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