P={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3036}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xca}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x306}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40000}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x138, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff31}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffe1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2bf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x2a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x228, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x26}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x228}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbd}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x398, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x174, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x389}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xf0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5e}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x4fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1a8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3db}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x265}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x2f4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xeeb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x29}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}]}, 0x1108}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d05c41bd34e677d99590e0c390439df0000000000000087cfec79b04c3e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715e05182ce9c2b1830262f4adaf1e8eab06db4ec53303739b6d1438b4b6a8fd8fbf026387e78777e2f392a956c5c6ba1cb34401e0b937fd387b5417a936a634cc044a48bb1e566b916f9900670f4036a2bbe86593ad66b0d195e51b7a214ec6de52cbb5fc102a2da113ed094a97753bcc1f97c18b16ac4ffb8c8e9df2d3e94cc000435a4", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc}}, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) open(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x10040, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 07:24:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x20, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0xa815) dup2(r0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:24:59 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f}) (fail_nth: 28) [ 98.234133][ C0] sd 0:0:1:0: tag#7804 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 98.243175][ C0] sd 0:0:1:0: tag#7804 CDB[20]: ba [ 98.264144][ C0] sd 0:0:1:0: tag#7757 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 98.269861][ T5217] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 98.273987][ C0] sd 0:0:1:0: tag#7757 CDB: opcode=0xe5 (vendor) [ 98.289697][ T5204] attempt to access beyond end of device [ 98.289697][ T5204] loop5: rw=0, want=90, limit=87 [ 98.291412][ C0] sd 0:0:1:0: tag#7757 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 98.291443][ C0] sd 0:0:1:0: tag#7757 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 98.310646][ T5217] FAULT_INJECTION: forcing a failure. [ 98.310646][ T5217] name fail_usercopy, interval 1, probability 0, space 0, times 0 07:24:59 executing program 1: write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0xff, 0x3, 0x1, 0x1, @tick=0x7f, {0x3f, 0x20}, {0x7a, 0x40}, @time=@time={0x20, 0xfff}}, {0x1, 0xd9, 0x6, 0x4, @tick=0xffffff81, {0x6, 0x5}, {0x1, 0x5}, @queue={0x25, {0xfa3, 0x7}}}, {0x7, 0x1, 0xf9, 0xfd, @tick=0x8, {0x1, 0x7}, {0x0, 0xb3}, @addr={0x81, 0x80}}, {0x5, 0x7, 0x30, 0x5, @tick=0x1, {}, {0x0, 0x4}, @addr={0x3f, 0x1}}, {0x1f, 0x4d, 0x6, 0x1, @time={0x4, 0x1f}, {0x1, 0x8}, {0x6d, 0x2}, @ext={0xe9, &(0x7f00000000c0)="7ee8045252a09957ec38b148c13ea050e05a6fc5adb9794cdda6c513c351d720d6f816adfd0408d091265435485daebc1dd0aa5b0729c3818d8684cdd28fcef8fc7a1ff79afa55eaa0137775ad354e716bfcd0812527efce8933f5062dadfd86ba377f2c387276d3b16ee77198516dba82a9511df1d046d5cfc17100f8d75d0b4f47b6d718ecf5578dabc306260a62b94bfa04169741438e947a6c3ad44fc7e30fb26310d4cf9cc39f87696a07ae470d42b57663293eb07cb8bed18784c8e7364c3871263d724ead9c92db2b46307e54fe910c614a168e97ce84862cea365ac022da35b0bbf8cb4b79"}}, {0x4, 0x55, 0x40, 0x6, @time={0x8, 0x4}, {0x1, 0x3f}, {0x3f, 0x4}, @addr={0x80, 0x2}}, {0x8, 0xff, 0x80, 0x8, @tick=0x400, {0x8, 0xd2}, {0x66, 0x4}, @ext={0x28, &(0x7f00000001c0)="45c95e8ed4e5c7e659fdc854bf553ecbab8f17e9732d22b8026263bc6bf79eddbce96e07042ffa87"}}], 0xc4) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/i2c_algo_bit', 0x100, 0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)={0x289, @time={0x4, 0x3}, 0x62, {0x81, 0x1}, 0xaa, 0x0, 0xb2}) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') [ 98.311077][ C0] sd 0:0:1:0: tag#7757 CDB[20]: ba [ 98.320216][ T5217] CPU: 1 PID: 5217 Comm: syz-executor.3 Not tainted 5.15.0-rc5-syzkaller #0 [ 98.347023][ T5217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.357208][ T5217] Call Trace: [ 98.360489][ T5217] dump_stack_lvl+0xd6/0x122 [ 98.365257][ T5217] dump_stack+0x11/0x1b [ 98.369453][ T5217] should_fail+0x23c/0x250 [ 98.372136][ C0] sd 0:0:1:0: tag#7790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 98.373863][ T5217] should_fail_usercopy+0x16/0x20 [ 98.383680][ C0] sd 0:0:1:0: tag#7790 CDB: opcode=0xe5 (vendor) [ 98.389002][ T5217] _copy_from_user+0x1c/0xd0 [ 98.389026][ T5217] kstrtouint_from_user+0x7e/0x170 [ 98.395361][ C0] sd 0:0:1:0: tag#7790 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 98.399910][ T5217] ? 0xffffffff81000000 [ 98.405009][ C0] sd 0:0:1:0: tag#7790 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 98.413995][ T5217] ? proc_fail_nth_read+0x150/0x150 07:24:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="74132bfa69cddd00327f2487f72a896311e1a5ff1d6f3aa1b83c0122d2f0d316ed1e2daced3a85866771339b17b874f5bb19b9b64d1a5fb54fdbbbe0fdc78edd32adc75b2beb3d071e773fb62334200bb3c4d7da4274fd40191025a897be610191aa3d879f8a2b9d201586610d1aca89603190c7fd5a70da7729811366576f89faf61941ab6d4c918fa031ce128188db6745bb8af4922de8e968ad58e86cec8332b99ea1cc8c84783fbd5e8d1e24747a98a337ccb74587f685c0a2c68b0bde8953fbcb74cef43801e36e"]) creat(0x0, 0x10) open(0x0, 0x0, 0x60) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001cc0)={{{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010100, 0x4e22, 0x1000, 0x4e24, 0x6, 0xa, 0x180, 0x20, 0x1, 0x0, 0xee00}, {0x137, 0x6, 0xffffffffffffff02, 0x6, 0x800, 0x9, 0x100, 0x3ff}, {0x0, 0x10000000000, 0x200, 0x8}, 0x800, 0x6e6bb2, 0x0, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x3c}, 0x2, @in6=@empty, 0x3504, 0x2, 0x0, 0x20, 0x9, 0x7, 0x8}}, 0xe8) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049cc0)={0x6, [], 0x7, "45146335e226df"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbmon(0x0, 0xffffffffffff0000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000cc0)={{}, 0x0, 0x0, @inherit={0x50, &(0x7f0000000240)={0x0, 0x1, 0x400, 0x8, {0x4, 0x6, 0x7fffffff, 0x7, 0x1}, [0x7cc7]}}, @name="07a3d9a23a57093cfdc43f974e766a5761a9a2f91fea4298ebabc3fd4c38a0213d547f574a95be1175dd6513d9faaf7f6d995be7cad3adbddbb5de614eeb4ac998054e37522976ad1c76f64fe08226318e895c00b7bd93a920ea16c433f7f9b814cd5e236946df8eec0e6022b516858de6b045a285f504129ce314a64daea0f379b5d9a0f01919e2d5df593e50504a7271be2c210c3edf567ba559663a9fbb1a86cc35af9a298986907d25a16a3378bb346f1a08610d704c48f9fc02b7844c2884df5ac6e3b684d2a9b1d9bd96d7a88487b559413230f9bd02c703c511e87433d34b4d2a06d779ca89fd1341b72fbc0faff36c304151b061e68770d5e2fa2e7ece59d2a1d502cacff740258fab0c3d23bc86c8619965e06d4edf6a3fb5beb00b109daac4cb10be598509d86feb86be2788af881a6f0209b3cd8f961c60f35a65cf49553ce591618af0897c398c392851e81044055a86498261e04ed191557f664a9fae0498761e953bcb289e64bd2397d82954bf30841168ef1e9e271f1086600410325808dc658e0c93fc5651bafa318319e7a8b371a2f4491a9be433e27d325cda6c8409782a63883543fb32c6243359432ac2cebe9d031f34b5f158afba6f41f511e1946cebf9a044c470d1abbc4e0cf3a95b6ac25ba4a4e1a7ad502b0b2c9fffaff6df6c51ba0434f992fe16ea7c7cead098acdfa5e8a301fda42936160c7360000ca56b5998d0b6736702ebae459cfc8ec5cf45f8eeb294da973503e241fa130b200ada0547d06a78a86b16325cf43b866ce76392dc53bd897825d5eeb3c5c7a17f4c552b0d78093f11de9b14f9792c45910bbd148f8485cbba99afc32ff5c2b27f5c64c34747a0779c47fbace00fec98ceeedb0e0a40ffc974d605df60ec58809f54ee96864555317822cf8ff4fa60f7fc2bb69a4043ebf44b419b849337d25139d12a1ebe6b406a7b665a140bbbb8db23429d224a4d9ffa76f32c7f3901b8669409ad4d8a117f566b08de3da11f869796d7997f88ddb4ea121e719f3603e694997583a43184fe1ff8fd9b9e7deacb20bb34bfc2cd5f5e9a3432ba317049b29a6ac135653666c8a267d7a1f24a7b8e69621916b7a291cdb82aeb4f133325f7c2717c5318a1a08c52706edd876af753553d510398070fd42f8a91e04a05a841668c43602d1bda67ff40a7e1e49da731f8e3d1fdb71195e9de220b0c1ae3524bcd1a94d68d0cd0a91577c7d7d280b6bd234ce43dd11127b1e02d5bf807bd7ebab164dfac349414196fb4fb942d68107473efa15ea16315dc71926b7c355f3d509cdc8d8d408acabf24818469ed6ca47cd7acc01bad7f9eb912fcd0e6c05eab6abc739a60325e16753d5e3416c45762567797191a163ca8b0a7767b8e3f41b252dea0723c278c1bda0a3bcc19a32350ea8e470b1878ee4c1fe253db7acdfa5757502a345f224b03a359ccfa57ee8ab3747568285f38856a1bbafb179210343f8d70fdcf051058e7563e8ad6a79d1f27cf522d34d8f8bc824839a39c79092669a64a34aaa2bd9c3c08672ea07b5cc7f079da126ce949d01dd70b2877beee58fea73d9e4e2a9588c70850e10dba52b6dfe0119d608cc540a1aa404a7aaa18cd94c1de2d27ea85a27b9f5a4b438e55fbf9052698c7718988519d919489ea48f22fb2f3bf45cc6b1a6d55ed502e8075ae8b82e1a89aa21cc510967abe304898e22e57fb33118362f42016565af77dc7d04b4439ab4ea86b735edfea13631377b0b0e3f5cc85afa15c91da28c9460b8239a2a94e09560c7d6b7710254bd650addaf5a22460712ad6e32fb79b49adef8689b3327b92c756aa6febfd1a4cf97990ef421a087e1675e94a05c186c2da543430bad72347974e8ded0cd1685cfb76dea105bb69c8b0d90a7cbba240373e3bf7f4f289617ff36d701dfad63c9ae8d2eba67a8ae39c47d21faf99c03fe3c96a086ae7670a57b506cd275580333b3121ee77ada2528df1782e65ccf31bae2701141020e9fe2f31bff29477ab29eb2c8e94fe3d5f926af9f58c63ef50de39766e88ef242895c4bdfdde00044c78f85c4963c8f9599d767f27aeec6e250d419502c94ea052a3e071e39589a60043b152ff3b458afca91858833c7f8ccd93e6a8907b872423d3972a2713b738036d93467b6ac0893f86dc979697472a9b92a9b4c4bd5157cc4ee47b1ea9759c41b36b2f6e4e32f470a615f3f9b5c0e5285c4f63bdd1f246bab122992cb291faad3802501996e68299779683bfdaa9c7170d34769e992e8c940374e028c8569b9df51bb20c354f4b42b395de16b974c154a337f1d65d9f1aeff30cfb80578acb53bb5676da9e48f75765d95cc55eb47e930a0ae3ce41154600cf8765e935b1ae0697b72830287db76b1ea8d2ef5c2e9cded9ca66895684771872fe5343c6aa3bfb7855f764c7869761c6e4ef5385a609542d85b3afff43a80bf6fe0244684f96af7088ecaed05d0f7e80cacaf6851128004c8740a8fa344bb1957189e10b8e1d1e611dd0f083ab3917e218639541800d25539b14bb29f6436be7207eb35ba7dea559c2f24da7eca852005f68de13ca8cf29cabe9f63f99772d1bf4bd5e6c13a0d03cbf63da6d81d53b8637d13b89446b22777e0dd3533890d1a2cda3002a52baed63e38523798ed0b0f5759eb70bf80d37e6a30b3996e982c6d57bec8886a471dba19cb181c5a0b9236e0a82e5ca5d4b521696abaa0a581f1b9ffc27eab36b86e6f00680c27047d1afc980607065f054ef3dd5f220251b0719ea1216420d5605d979c29c522fd00f5bb4bad073f35f6a7ade42bfffcfafeda1b97bebbc7ada263d905fa7a126ade5fb99e87631aa3443b25e978a00bef0470eadb189bc8afdbc52ec7816d4a63894dd1c8f661644fadffb57d88b58e0a7d3cfdc9f15429645cc851eafe578842350e0e166472ca0cacdece7efc5bb9b473e4b337243fd67bacad0a4eeaa243cc99620467378fadef9e134b6e450df6192a5a8d2b15fe5f2c147d9b6bdf97893dc7716ad3a643a4854ee4c9718a84374d05b1f957093482ca839c1a21611596b8a5928dcc874a2486bcccd2b045a83740b5a6b4507373476c50a835567b041918df196b223bb02937b83931b66a51af1fcdbd524a9a829c6018e4a0bf0e1286f705ebbaec828cfb7ceaba8116a98faf149c00267b03a28febeb326d0551d5d48c706537a15414971f86d3147742de8b76daeb582ffd1ace3583ada6987c8b27d765c66b680a0e5eb27dc961c53016d581e5006dc70d22cc07ff658514e3c53de78099ab3cbf29ae8a09afa0bd25ee4bb2c2e47dee4abaf7c377a3d74d39d9519abc6bf16fd68c80e90ba1757e497a559887b2c91cf548389fc17425187d5d48a9aa987c13647a06600e79a74ca79236fd6485f362cedc0e227fa480e89664f2f1c235c7ffd4ea712b99ad56c8c0c50f3e2b8741d9a27e1b5e93c098d8edec8044a47e1a31742c078e2e88102633a037a215f94645524e6544d68e677a18a1fa9c1acd04ac260b421d43875ed16297811f13733369b51af7328aa4c45c2ec5e9aab6c2f0de99505854911c9bc7bff27b667e3a650a200f4b5f7df5e38c8369d2f891c7735e36f379d374778af5ca7eece858f4679cdc3ae3cf0015558b9a5303e677905c1ace3c68c2af9d59a114e0c02cc19c2169e886d750fdd2b59b2738592a128c72f551555e4bfe9d8d4fed35c8660b97470a0baf3c6cbe3a68f6eb83edded6597bcf7e5997e68f76f1adddfb67b5e6a8527d778dde63385064a5943fd46bfb729c67e598e8aaf14e137d44402966e6857cec2fab661dd893ec416b1491a8a03fee8959406db971df2eede6d405aa9f3199202fc3581bfbb9e3efcdbcee0f2370dcec8906c3a4299ffff1fe4fff004e14241de0b8d5d5b96db8bff6f94026a1a13fcab3d9a1a40f6d5519f45606af516b236441e0ccb8fcd66316dbd90b5a8fe95c90ca4936f388afac5dde2279a0b5e4021de0c36392b8152689184175e2c403d0fa29c7a7ce89812bff0b3967afe6ae0b6fbd4e1853f50ca2ab76f97d3091f94d858e8fa66e340249f879b2bf24156aac60001f9ad1f9952609db151d2e2c770f41186a51ba26100fa91db105c2ef441078f24a61974c049bd5730be2e85f91d511a72607e812d91d8a93efe2a7506950e712ed5c504ec88b4d4695dad5c2d7f54368b08471cf4e1225bbb0ad196b694ce3c191d02f3d96e79c3b2f7db0331b54fd9a36335695a3069b71f4aa528516e39bc887294358aa888656e141c1361613f90861d46f7310268984f6377bbdf38ad248df3835749846330674aabb1d6bac9790496efb311d0c96b7037b1153d63ebedf2f9e1d71f019b4ffc8be947dba90382922d0b72a06e6991099609965f76d960510fa22635ddd4ac4f4e42e62d77ca4c015a2b96090d452adf25feb6af6f37d84c9ef1454179edd525cab40fb98b8e36389e30f59849af078b7fd66129403db7bfc3951cf8bab99fc21a78d533b5eeeb55b0d0134a5b5a0c64328a48470fbcd988e7705bac87434c2ed1a0523d35eb24c61394aeddc1878830f0be67d09e1f0f2a51d42ac3844fdb9a99f8372e738cb4d69786fa62f44c597a2d564589598cc7b78a96bb6fa48aacb4660a5c5217ec924a1321a816c27ccd670583846a2f233a46e7fad035f61819e16aed7ab9c7cd422a688aa0493862d070c2f49eca69bdc6af8556ab524fcca53a5129e9220c2b7b5a2d3c7ad71f21804eed90cb891d870e10ef89a14d2c6ed9260c0123aa5c2117fa6c4f99fb867d1a0db943599864bbe859cceaf9fd3a7a03ba95cefd4c797bdc6cbcd67c3f0756cffdbfd51350da699a6c71cab14801db331feaac169f38e2d9313cab2e2eb8ab6d363c18e2b6eab1c3cddaf021dd7512c9a3373caadd2067a5d3eecbb1804b0fde772112f6fd0436ec1d74322e013d5e38da03d285d8c5b0a6b445f4362abd152bebf6c7ec793602b05aef0c4643204c7c17a8b24f63da74fe28350bc44d474ec9abdfdc10f260891b680f170d31cb97e62a1562b004bf66af438e03efb15852d423b300a40e8704e6602d5b640ec3fc14c84cc526531a436129e5efb0dbbb07ebf0df797b575cc8b4edee62c7235f848f946a00f22cc8ad0d2c56e7baa3b5c4bd3c9ec7e05b5880af0b7ec3991d5fb7e564b86a1a1362dec07e487ffbc9c7a6eb3a6caa0b6037666dd54d94f67edb56535be706b1bc535cfcc877e36b20b193e5ca28810c8d789934e9d462e10b0364fabb7823465a8036b31ef971f92f239ff2efa2eeeb1a14f9b443c5340d2a6d2134a92c30cb828b3a6e8b4d6aca78b045eab8b064fbc6157c70694a61ecf0e45cd84564ccfba2672157612b0257a19d2cb0afa2f0fa5f1fb4fde69891b84b90947c9b4b311946dd844f2efcbef5ceb854c7d6e97c334f24cf910117b9c7740133ec6d1cea2e179b3bda7ee627be595b1c76421e914f80e0e2fbebbfa15e556668bc52fa3ccb9344ee13c70e9779899f2dec9518ef6b215003f4f527271db0bccea6282a1881a8299aab17961e0dd17f2f27a759573584d0288e46d5f3d14a966de13c6455cd178cb3c19b12c86b159f5ba540ecb290cf44626cec521831978e8ab9f1cb4c2b68af8f94a0396e5e67891e71b3ffd1bcab16688f7f08f26e34a9265987bda03b6596f065701a4174"}) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 98.418147][ C0] sd 0:0:1:0: tag#7790 CDB[20]: ba [ 98.427123][ T5217] proc_fail_nth_write+0x4b/0x150 [ 98.442393][ T5217] vfs_write+0x286/0x900 [ 98.446641][ T5217] ? vfs_read+0x4e3/0x750 [ 98.451021][ T5217] ? __fget_light+0x21b/0x260 [ 98.455731][ T5217] ? __cond_resched+0x11/0x40 [ 98.460408][ T5217] ksys_write+0xd9/0x190 [ 98.464662][ T5217] __x64_sys_write+0x3e/0x50 [ 98.469268][ T5217] do_syscall_64+0x44/0xa0 [ 98.473798][ T5217] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 98.479821][ T5217] RIP: 0033:0x7fc2e19fd54f 07:24:59 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) r0 = dup(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r3) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001740)='ns/cgroup\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback, 0x0, 0x0, 0xfffffffe}}) r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_mount_image$nfs(&(0x7f0000001780), &(0x7f00000017c0)='./file0\x00', 0x8, 0x9, &(0x7f0000001c40)=[{&(0x7f0000001800)="56c7a31fca4cbea273c91ffa904ac7e39b07fe1657483e7875202d2aa526fff76ab3bcae9a98edbf67f04984c333efa9c6b37ad5", 0x34}, {&(0x7f0000001840)="745e257bb2021cfea2b588e8335534", 0xf, 0x684}, {&(0x7f0000001880)="24c1fc34f45e913374", 0x9, 0x7}, {&(0x7f00000018c0)="7d978e187f7e15a07248dce143f77f24f17b546dd1cee1682e81b03fd93700b2cf1243d27d4993f8e8b760cd3581a6b6b3389fd1c0f17c29627471f9c6a1c42fed504fb91629fa62f969aedbe597b391d40cd1e59e0afdd0891dc4db8c948519cff23a8adcee5150cfe8096db17e82ef3e74ad91b9ba8f5f6fbcefb8cc88ad17bd89e0b447c53c690a8623441144a0213b72a006dd52f4df9902083b58b13db68d2077c856c31e7319c789ff466eff9c9216", 0xb2, 0x7ff}, {&(0x7f0000001980)="3ba830b965fdc1ae94146cb881428d6371b48f843d749766321949236f84c9de5f4873dc936847cb3ca724658b1cb02e16bbb7c6bb120c1014d71b8032a57febbdb040af06fe05a05456a5b058d13463e9c17655c98ab6bc302a422d954373645c6ba1350760539649413fdb0ed43981e8b9d63f85bfb66a26e9b3ff7455aea4f0f5905a48a8770b2f2aa7129b6cef", 0x8f, 0x2}, {&(0x7f0000001a40), 0x0, 0x40}, {&(0x7f0000001a80)="fddc40f004c6fb6e6462272d47d75943f08db294f282f1433852964d2aef715c7803b6862cead9f65e8535b94f9c668f2a11564afe3c56a283b83076362cef0294dd17dc162e05b56e08ce93b4336604472cba14ad1d248a2fc616c80a", 0x5d, 0x9e}, {&(0x7f0000001b00)="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", 0xfc, 0x9}, {&(0x7f0000001c00)="0cb46718d9cba6f0a84308c8b2715148484952ee", 0x14, 0x1}], 0x202010, &(0x7f0000001d40)={[{'%/*^'}, {'\x83'}], [{@appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@permit_directio}, {@appraise}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = open$dir(&(0x7f00000022c0)='./cgroup/cgroup.procs/../file0\x00', 0x111000, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002300)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)="64c4b1c927b7c0e8d53fb502fd7816cf2b4d90fa1bea836aae6e2e548c9413761431661b518ffd6738bf6b43cfb5076b334d914bd4261a982a25d4d9558e06bc58b5283f0bafa8d048c67c16a805a9adb15069693c3e4f2c393a1dce92e237150633de03cde72c7c93c6a35d7d9f982f0ea4b203025ea195342baa0916f5438e9cf44e96796d90fa92924a2244e3d65f35f211142636140239392ba99d680b7fa7b36c39ba73f37a2214c6252c08196f9273864a60142ed20576679e2a9b539b7dac2add36865d524e910c2a66", 0xcd}, {&(0x7f0000000280)="ae97c17f28202e0e91a283c1dccfecc175fb069a9a6c61e3102c4ffc8440eab49d789cecb2d4a7f3f2823cfcea638764bebc8d30b88c07d1522ce4ea65", 0x3d}], 0x2, &(0x7f0000000cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x138}}, {{&(0x7f0000000e00)=@file={0x1, './cgroup/cgroup.procs\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000e80)="42a6f8ec2137f9e72716d59a00b9560c3ff6e64a8b594f485c8c39bd752f5dd6603acb593c42fece1ab9b823190b893b12c78b829cf12d47fe34446a8fc663be106c36a511458266d15ab225140b432b3b44323a1cddab7d1a99b4f175f2bf7528e65b971e257317016b49b4ba942591e36ba32343d3c2f682688be081836ea8d1d9724e7cc5cbc9001b2b5aa07d21fbbddd0ea15786cc687628dc63a3beebfa60044f9064022cf05f7d8675f59e95cb2d8b7c2422505ff78873d31b00c5816022786ae31a23badde6bcddb2815bb90521dd", 0xd2}], 0x1, &(0x7f0000001280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x188}}, {{&(0x7f0000001440)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001640)=[{&(0x7f00000014c0)="cd4fcbf107cac2d178bb2a402badaebc72ae059946ab80c5272a969bd35d4f1f08d2cfe4f3a32dd3d2d3ac219aca086c55559ee3e7bd718919d2b1a141c45ee0c152b47b65348d4abf4bb01a2421f6a0f059fdea8e443c99d0399aeed5afde405a365976b51648ffecb85938ccf6921029befed8ed6ac7c9cb", 0x79}, {&(0x7f0000001540)="95bd44f11521aa24cc21783a2a3ed76bdcf320acf0b58b9f751ebbcf169e73d01b1008", 0x23}, {&(0x7f0000001580)="df10d6ac5e68cf6d6c550859b97f21a6c4ee7429dc960686983f28fb4e613a8e9f7c068ab616c8d1146a67d735645dd2e286c050cbd945c831c315c6ba2c6f7bfaf8c11b5e11b26b96b1df3140ac300fa017e8105e08b70e669ea7af53a439c239ccfe9e2a79c1f9f7ae79b729d95a283e58228000716831d292f1ed0afc39ec76b43998", 0x84}], 0x3, &(0x7f0000001dc0)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @rights={{0x30, 0x1, 0x1, [r4, r5, 0xffffffffffffffff, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8]}}], 0x98, 0x20048001}}, {{&(0x7f0000001e80)=@file={0x1, './cgroup/cgroup.procs\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000001f00)="4abba792649eed7adfdad361d6c1ffdcd0eb6266a83bcc738b021ebcc1dbdb1862227caf27d058229884a9f903a53e15acbbf7671614cc81ecb2acdd6ebb1c3eb1b39029abe309c77549d8981c740c176aafdaf13ca004380778ff5b00699b9e9bc04bc21f3ee0a6e5572ea7f2c7884d50a193e109a0317298178715f066ae0ec98e937b1e697a9169599e39c2395aa3bd8141b89269b4c21fc048b2aa59df578a3643a9a72e6ff3a1a9d0d77e0298ef548081ba58359057125bfd5c2d6d6a27670ed5e7a493f217bb444593bf11d0a1fae7e4823db38cdeb8f5dd206834739ca84d0e", 0xe3}, {&(0x7f0000002000)="69da9f20", 0x4}, {&(0x7f0000002040)="7e0f1877b9061616afb26ed89b776c90a183e8", 0x13}, {&(0x7f0000002080)="7a8b75b185a68327912443b7de329301d416427c7a5d68ef78fc6f714e6154d0e74407115d7b5cb1a19ab8f0ec95d0850374d7265e72d502bf6e867594947de7c5039439bce36528d0fee3820e07e4cfbb3a925a9cce9a7975326d28474bba9c5ef7f319fa46af63bfb6e6263e308d37db6b3cd85faf8a032e35aea210e2cdf53158c2022e62455b01", 0x89}, {&(0x7f0000002140)="ee3995cdd44fdd7e70d3b935d36acbced0fbc6040a7c44b0765754d7fd4ed49ff2fd5c60f12f056b4f161a71ef4d30e54a002b09736d72af7ce4b7b7973e57459bbc05ec4f5c6f01dd5292df51a78b750ef225c7b9447de109ee1809e9d4d04d4d674e3db61612cc1b4bf1687f15666cff6f1fbaf1a8316b6be97c986da08b19902af4e84156742a405c3074a4ae92d79a7b8816a0b3d6d6e628b7ba5be1b67c3a6570d8fbdc22027a04b9aca130197761d5a27990bbf1eb7a2671a794419b8c877878bfc8222450d243ab10b73d41c7cdc9af76", 0xd4}], 0x5, &(0x7f0000002340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r9, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee00}}}], 0x58, 0x40010}}], 0x4, 0x4004000) open(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x101002, 0x0) [ 98.484239][ T5217] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 98.503996][ T5217] RSP: 002b:00007fc2df7c1170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 98.512507][ T5217] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc2e19fd54f [ 98.520511][ T5217] RDX: 0000000000000001 RSI: 00007fc2df7c11e0 RDI: 0000000000000004 [ 98.528483][ T5217] RBP: 00007fc2df7c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 98.536459][ T5217] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 98.544426][ T5217] R13: 00007ffe5dce886f R14: 00007fc2df7c1300 R15: 0000000000022000 [ 98.554322][ T794] attempt to access beyond end of device [ 98.554322][ T794] loop5: rw=1, want=98, limit=87 [ 98.573853][ C0] sd 0:0:1:0: tag#7798 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 07:24:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:24:59 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='./cgroup/cgroup.procs\x00') 07:24:59 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f}) [ 98.583701][ C0] sd 0:0:1:0: tag#7798 CDB: opcode=0xe5 (vendor) [ 98.590587][ C0] sd 0:0:1:0: tag#7798 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 98.599703][ C0] sd 0:0:1:0: tag#7798 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 98.608738][ C0] sd 0:0:1:0: tag#7798 CDB[20]: ba 07:24:59 executing program 1: lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0x59, 0x0, 0x1f, "afbb7a87b9ee3a957c2c9992cf616f7c", "f78b8d8d562263f6b803ddfdd5eb3619945fe6ded1548b1c57d7bdb39d042d8c1be225cedb2069ee6c7ce449dbebf05d409494786e5e35026195b9f69d0b78369835ee06"}, 0x59, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r1, r0, 0x0, 0x100000002) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2033, r0, 0x10000000) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') 07:25:00 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x2, &(0x7f0000000140)={0xfeffff7f}) [ 98.656652][ C1] sd 0:0:1:0: tag#7775 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 98.666525][ C1] sd 0:0:1:0: tag#7775 CDB: opcode=0xe5 (vendor) [ 98.672858][ C1] sd 0:0:1:0: tag#7775 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 98.681908][ C1] sd 0:0:1:0: tag#7775 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 98.690971][ C1] sd 0:0:1:0: tag#7775 CDB[20]: ba [ 98.736013][ T5251] loop5: detected capacity change from 0 to 87 [ 98.750855][ C0] sd 0:0:1:0: tag#7782 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 98.761095][ C0] sd 0:0:1:0: tag#7782 CDB: opcode=0xe5 (vendor) [ 98.767461][ C0] sd 0:0:1:0: tag#7782 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 98.776470][ C0] sd 0:0:1:0: tag#7782 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 98.785496][ C0] sd 0:0:1:0: tag#7782 CDB[20]: ba [ 98.795053][ T5251] attempt to access beyond end of device [ 98.795053][ T5251] loop5: rw=0, want=90, limit=87 07:25:00 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x200) 07:25:00 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80) mount(&(0x7f0000000240)=@sg0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='omfs\x00', 0x100000, &(0x7f0000000300)='-\x00') lgetxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="6f73322e7d7b0021f330d09a404b90bcd4ca4c3e8b423f798028d69f06c680115b43db220ad6a74ac0b810789156e38dd0e7775d1e190a345b11b27ce042d19377551995fe5fafd488d7099720f98f54efbfe03f088efca1ac9a2f380000000000000000"], &(0x7f00000001c0)=""/69, 0x45) listxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=""/18, 0x12) 07:25:00 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4b47, &(0x7f0000000140)={0xfeffff7f}) 07:25:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x20, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0xa815) dup2(r0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x20, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0xa815) dup2(r0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:00 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4b49, &(0x7f0000000140)={0xfeffff7f}) 07:25:00 executing program 1: link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./cgroup/cgroup.procs\x00') 07:25:00 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x541b, &(0x7f0000000140)={0xfeffff7f}) [ 99.144330][ C0] sd 0:0:1:0: tag#7803 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 99.154381][ C0] sd 0:0:1:0: tag#7803 CDB: opcode=0xe5 (vendor) [ 99.160746][ C0] sd 0:0:1:0: tag#7803 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 99.169888][ C0] sd 0:0:1:0: tag#7803 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 99.178927][ C0] sd 0:0:1:0: tag#7803 CDB[20]: ba 07:25:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0xa815) dup2(r0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x1c, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0xa815) dup2(r0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:01 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5421, &(0x7f0000000140)={0xfeffff7f}) 07:25:01 executing program 1: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000001440)=ANY=[@ANYBLOB="ffffffff0025582060eae30000000100000005000000ffffffffe000000700000017ac1e011b00000000"], 0x24) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@private2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000001600)=0xe8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0xffffffe5}}, @XFRMA_IF_ID={0x8, 0x1f, r3}]}, 0x140}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0xffffffe5}}, @XFRMA_IF_ID={0x8, 0x1f, r5}]}, 0x140}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@local}, {@in6=@private0, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0xffffffe5}}, @XFRMA_IF_ID={0x8, 0x1f, r7}]}, 0x140}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)="06cdbad8e26e882042dc899dd88dc195a094388abf3b7408edb3", 0x1a}], 0x1, &(0x7f00000014c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x57}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x60}}], 0xe0}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast1, @broadcast, r1}, 0xc) sendmsg$inet(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000200)="21af39f3d9e8caa72ee78c479c43cc1565c9bf74e4f47a700e13abc363fe0e4d036f5869e75be660f14f46f915a366913735e8b10410186255462279212e822404ef1a943b77fcce84fae645fb2d14ef3b9360ae2e640051d8d877d2b1bbcd464162601ba67f90c5d9f269dae2fd237b70e0ac2fd6c1298e71cfdcfec8129a2124accbaf16796b7ead52eb10864d7e7375f6a37e55baa3e3dd3e88ee24edfffed29080742cd03d0781d2a9", 0xab}, {&(0x7f00000002c0)="4799d9b1147066157ae5a036750c190979f9bdc732de1720ce37c22f877ee170f3ba5c1d051cf6e76f70382d0fb1ccb0db50883ebc6088769e7c50cff3ea02ee81e741eeaceecf2e5291bbf5e9428eb5e9def69f03490024e4a824b67233ddb4db7267762952b0f2bca95b1bec581803ba8597ab69e207ea106251ef8bc55f9b4ae36c913be13130eca5ec74ab8437025b6201cb26163213310c9326e063c4b2eb57ef512da6d77bf07df75a99ed0b7c3f703217b6e5d2b50126090a389a5e", 0xbf}, {&(0x7f0000000380)="52b06d37c3f14049", 0x8}, {&(0x7f00000003c0)="bfbd70ce0bf3cdffc5390b1c3b40eeaf1fcf5b8af03bbaaa2a5fea0243882272e49fda3d3d54b5fe327bf6673d13167ee1999fae2960873abcf54f9d644b68efecc875cbeb82974839f92a4c512265e4608b2bc56b1f8446ad4b50ca037923f959749af7aec85e46252c0a633e7b240c04243df415ae9974d59ab3fb9b3ac9321ed2b5e961a625386a91f81beb029a82d7d862a4d4f06bc8b79b549d3844b13aa29203978b184e6aaf2c66354cad94b203fe7a865c646b053dc13d816ebaffc209662a70769b9fd924ef511d1edb668a3b6ccd1e915ca55b59c28f250ff7d3558dda8a5d0c062845078ea1231f6483a23630d792a539f28b9bda4d250f3ab5ce9c996d37e677ab1a5492a95131991c4c9a6223010540db7e04d6526d72816367d14e527f8fdf554fe6a25cb8863d6e676e12b3ca79d1b4632d967b483f158ae82f9c67e6f08cc1a3e13b86157757b442d2e9ecf13bcc2ec61ffa23b9be21ff63ac73264cea17ea345d26b6ce785664337fa6f20e6da46bdd9be0cfee407d031230f1233cc7a52f0ea1a6d7bb7c6ee479afde1a4ec312bb959f800bdebc2178a69be1515b619c2349dfd86a8b5f68cb2f1b1285bdf4a81d6a60979cd76d79bc457eb3daca0f9b20cc8db460b9d23daeeac4f8e811b165488ea85242e2d814c4a818f155ac14315fee5b7ea63849c56a073341b6fcc582307bf5fa4b4a7e3b51dbba3aeb5d2950a3d49385eaaf77fec67b2e37e450a377b38d4c847f4f3ea644a0839cbd8603d067f1b117085e019962c62c8339aa6fe00dfb266193d9b0e1d75b73eb5124fd90879a35e297a2524a4e24471a7f6f39a0f9f866d27bcfebcadb74ff42b8f7e409ccf4002a175ef9acd11e3308fd1687a4c115944728f9569ac949d25ae3306222a39e5892480d0156fce5abd09f4d9c4ee0eb03f0443c06e45dd04125a906d15a5af48fcacd5d002105d931c6a7bc7be6e2d0942fa36e05836125a4b60a348553ef43976bfadb539186c169bca8f078a90ff66640affbf39c70ccbc7ae249b8d79db31fa16d2de573969c817a962a9d7ff9178aaf1bdf7cfbff0d9936d9411513ede0a85c2f97f712ed54da34c047c29555e196d007586977c0d0e258a85aeb4350d77c9da29d2aa430800c50bb4fe2a82cc1b3403c1756d4eeefa1b6e146b19725148ac784b23e33830d8c4b7df65eef1c23748208a6dd0718eabeb45265e7e4bb4d8b0f23ad68071676d62344bd38bf87d0ca52988adf5d14a26d86888cf6ddf3a7b7f000af37c502375b86255c011685d034d4da87228b3f2c8113b690d95df1c2268906bb93bb272fba2d16e4d2ff2179efb2838c7e0085b24c581391d4661b3ff74bfe1bc46ab6e1cb97c477d8f1308b24675a3b5856a4b6b38df86f96a8b7b09c3dfb2c69d7151faad7c8a65c736d3d342b7f294f5d19327dd3d6f8c6c0c9d8f0f53b7b47482b1b1f1ff3cdea337e4e7744339c11b4586c08b4ffcfe3e361e295f789d996176185c9ca695ac034d2f92abf7f7bb1ee4d497162fdcf804297873f5a7886dcc1db223157b3a6c9e1131b0ed51203ed8f0f3d4877a8a64601c4afa85f317fa5a4834622a204f6dd9a7207d20a5e6253ada8991294a9488e9fb139e7d2b1992341234126a630f76d03d919084acab0900f217522acaa22ed89b1bbb2cb772cd171b086460182f030d2565795a158f1856f2f26727225faed9ef421a307107d384f1fb9ba4a6e9b35957baf87204555b68db3893cafc727997b8f891d6c745b92543c508753db94bd7693bba1e0790210c7a8574454dd9a00b667fc070288804b55364bf9249051dea9915d08936341fea96dcfd229537921da7616ba7220862e9775c228b0a47878f2d9c72345f27c7606e41effab1421315ee7f29a97ed64ee488bcfc3078c9a4f7a5921375a3af581dcce75590a99c9bab6c1bc773d6d0a16dbe3e97208bf6b3c9be25a7fb0b79bf66674659fcafdf0392e72efa474a88807842db5eacee48bf1ba60657924e9076d1231c4f807ece28f931863e18cfd08e3131dadc19fa3081109ac263ebb725534ea5b6e3b98676ad4ec20e166b94fc1f99ce50649b6305dba756fbf743b91f0da4df28c3f42d76478293d33a087cf7c1ab9c50e0f610cc93e1f4cc35ef8f397e7d180be633ee3b4f2af39ba45a79c0dbe37f662855b38b09a223056ae8a8e0680d10783a30db664b7fae988a907af28abb48a386797a02c6a52659b7e14ad78ddd34e294f21203a2030a376051e715c548b268ff5c85170959f9b1c1d1ac13cc2087b09a29aff525a18524a1673d5813dacf8ed944dd884fc39043901abda7fbe6e47eb9d71d8a24e9d7e785108894eb358ec3d2f0825bd240c289cae24ef5a7754cd9f17e79d64cd8842a0c0f2aac6c84935621cabaeb6c3a2ae2739f490eb97f25165246a46e90ad5b95585703a18f9b7307e113f8e440547f3f2ebc51ba26ea135f89bf2ffbefd6cae579125d5b531fd8e1832703a44685242457e6a37608c3c2fe8bbba83f953efdbff8fd525c5089758c7bfe62e14874806ce5c9e99227ced5e69d5aa56264f8e43d45ebe07c7569f8ac2cd12a8ebf933aa70a8ee5c66b55f3dc7e82ebe3aa7f9db8207f36f3fcd1923d67c2ab6ddb1b4ec45567f208224fce36be3d3635227fc9ba21ea59a0c91f953742e32ebdefbec765bde7ab4d32aaa7cca17e7c6fa5e734fbeab2132091634306f9c41ea51952764a1be448500549876ebe9442a561b0cfec2349b88dea2032391a7a481edde27aa7afafae82ca297be8e6db575696c855f2665a7fea6c67bdbc46ee4d58285ed3038053d0c317e6e1dd0490e30c87277369867934d22279c571fc67f7ef0795ed1287b7b2c42c763c286201f52c9d781b524d27c721a73a9e9f0885fc3940300161aba022a59af6406936026500300a7296d87ab5f92be61f4a8200507119bbe4db710efafe214482bca05a477211436674af7786b771f7b6e4d28f4f8fc5af4bd397afb8b57114ed886145fdfa88dea6e31edf38cdfba1b5f68c61c83fd7458534a2dacac1ade997cf782e496a3d9e5741f628da26088b5e3e362b813314cc40ecdd2589910dc655d8091bc7c0a82389d6abf30a1da8b7b286bb43ab5c0f6b6281bddf5d84be61e0cc62ba6f6dc053172c0edd07b25d99a8453db463a71a271be60d14026bc140d67793646862320036582418f8bbf896aac4dd96ecb55d49a14e4bc57eec477f43b6e0664e44c78bbfe921b2641f58bfcc6de32cfd6166c85a9ef1862670a0dc50f0e5ace48ce6abc559b8af41a2311e0e318d3ef6b554af4991532a24ece34f35a909b1fc3047d4a15dfdce5a4e0dfa2615e3b3fe9e073577ce6b52ed8f7b34e632a08aced4bec35f34d0f9fc093ef6915976d437366f093b9cacf861508cd198434121d42d28bb72db109357303ba685b4a0a2ad090d783551d0ebef358bfc57ccb1220f2bb2b274615c14298672a003bd9aa479a2dbe6e7ef4e9e0b2c5d76fe70b3e178ddcbc915946c1770269443a933bf91785f2c87c8c503ba2a3a6d055659c3aa24099e4f22f6981034a3df1447d03bb20971b4b85a523c7c78fe0570056959103c5e761d35d4880453590c89b85e2128851c3742236f98c0352e38c4a8b3494a738429bcbab0f9616092d85e98a7df22f51cebb9af45bd9972698922fb02c2603b8decd808d01a97fc5756a8b132010190f3c634f72915a09286c44a129817e8e08c061297b4f6227494ca19d3feb89cb40f04b024fad4f39f970f8f6fd76bebd46740d1a0141762e19d46ac1c1a4391a2ede91d96f3da1b817874ce63360ef814be5c73ecd4c957a3612d32d13a5c00a1c4cafe861c1104c99a9b502874f398af027182c9f6be775c06de036d7ae28c114013510dc87f36e92e003c132151f90ba5ed73c9cefddde022b5bb339c7544ed38c5df2c002c21b1426a24ec40ec0372a1954e8ef655368a21b5c806b0bd046c3bb9e8aee3b3e58911cafd461b189096457f5e6e323c907282b7e119d677ace19dbb45a2b7d4fbdd31d3aec62c0c3795271d2201c36eb6456b0033e7c899af2588d78e265495897443c6aa6fa1a84f46588f861e18eb79cffb4690a805b5154a574460b1894b2c9315711b0ac99bad29aaaaca09ddaa26a5d0b50dc0ed06529139168a73033e3c5fd4ec7c4525cc3fc1fab28a6b84c234699f72aad446f9fd861bf3d4424837b6d71e96137571b51ae550882a3367061d1e08813cb99f492adf0e1bbd2f76ef2fd7e8d86656aeacb6a94a0b962c2e6bd66714c495e0b3c3ff02092e22d5aaaadd136c2f1d87f4be7470affb4a40881455a823e27de286f565b65e988d2ddd946062e798a438baa235d23804df7d1b0b240c2d556420f5ac80ffc2cd382361fc66dadf981e3aed809bb68fdcee4c3ac8199fac462b8f01ee15b959ef67744e3fd7a45aeb059d30d8d60daba60d62be58f8e280cd7ef890da2d6b8d9ab2e5a6d9109808cfef43e14028997413ff21aafaabbf6b7419c2d9fc90ba05544a1fc7771c802ef3a010835d41d07e112f5a8d9b3a93a68dadbe56276d33982fb9b3713554bb3dd99532fc3fda899c3e8b99387aac5b91387a022e0e7929ea00bd25085aa5b41d87f104157b2d921fefbbc136e9d0bd1e94e4709a304f9482579299f649ed5edbd327dbffabd8bd6e8d0b07aef24e4e40af0057d3f550494b9e8156619cddf033840ae2d62fa46837e16273ec54f06730faf62f1b46c385f5891297fc41e4421c59788572fea836dd4696f7114fdc89909acbaaa0226dd47c6f08ee686c795c09d1327c6b1560c75e986e6dc984c9f96a12e1c65a353511b78454f11693d20aad7e138a01216072dadc08f522375ba35fe9d9c5bb9e31b654b9b6b6f6a6c7ed831a3a45df1181b7d727561d8e7dbc879062db68ba3282daa80c3773f0071f8e5a40ed4f56956dc5b32e3dc29eeaf54ff1ce719ae8017a21cdfcf004d4650dc1dcbc4333addb3813c4b41a9acf2ef086792b48de1a781c66b8aa52cf0f7339a5a99aea1a4cda023a471cc3275c3aa37cc186b77ec5ed31f4a132cf533f55d96cd46424720ceedaa0d165c1e86c8eaae681604daa2c010ea273e500d9630c2cd93f9741a4cbc1f00d819ba540f3c2a90916b23a3c497200b154f01c31a1fe6348b8ae12c05924a30dcfc6af9102ce04ad3e77b3c971d0cbbf5fdbc64bf229e7a1921e4bac6880177d2687016ffc4aafff6001af19368211234012ff7ae199023b3b6e24c7465744b19332f5f18f10467433be994c23e4caeb974eaba44d5622077296001c4190302e80a57ee5dcf8e9a05bc9497e1983f0fb607613e4abbf82fe1fe11262db10aafe45cd2e9aff80147935e67f2d203e853d681ed3d201ebbf2f8a194bdc2b5c489a77d804d06a3a06d03347493031ba1daa6a00c0345cb0e5e15666b9a3bea076ce332ccc07cddbb16aa55e6652808608c4b18e8ada430232c87e7274632559a32e923fb647c333c94b7e1417ebd50b5682652425ab8ae11184ec4e8e39d8223f6f3e5007bb33f03ca3e7b8f5e6b5a96deeac511d012de0be3831496a99f91638f3a0c25fa290e28128ac883d56f32c060cf6492efdb1e09ccc58d8972217deb8fe69d71a00babe12a2c60708c4e9b43bc110ac216e5e086c4055663b045184bc298405ac6529075f9c1a645c5a4186b1e7a2d5969589bef3972e6f434aaf89f6dbc7696b462bf762d2e7e9b6ddf10cd70fa7fc742531c76da783702c4e3eb", 0x1000}], 0x4}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002840)='/sys/module/processor', 0x101000, 0x66) sendmmsg$inet6(r8, &(0x7f0000003ac0)=[{{&(0x7f0000002880)={0xa, 0x4e20, 0x1, @local, 0x85}, 0x1c, &(0x7f0000003a80)=[{&(0x7f00000028c0)="caa337566540c8b4637dfe359355db5da4ced25fbbda0b2e7d75006c62b517339d8a5ab3ac085dfbc149b5531c5d9acafc81772b4c397ddbfffd807ab6817ee019ecc5f2cd5a7e5b80b7f9e65c634c0d2307", 0x52}, {&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000003940)="9f94ea15fe5ff559fe284d8a7f664288330b943d991eb31224dcf512a0bcb95b54961d95951d64f30f43505dd00e58816888217d0194f69b7327f7b237347770ffc6faf98d61ab65e3205a2f765049dbef5cbafc6846fa6b74093ade76c669ba53dc5844b5f940dc216450efb3dd533f88a12aff6ea90a3a59ad774c396a5cd1be8c7f706222185187696da4225b30488dcbf2dbea897887a0967063e75b162f9b9eb0d307b8671a1c4e9dd957c902ca78a3de13c9f1b65bca4e6491d83a1cc783a86bf004cc965e6448b9455854ad117e982bd41f8467697c60d3acf8326269a5af33b2", 0xe4}, {&(0x7f0000003a40)="f1f706c4b21cbebe0d9f654439397f5cab23f5b1abbc58f69f3f", 0x1a}], 0x4}}], 0x1, 0x4000) 07:25:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x1c, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0xa815) dup2(r0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:01 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x200) 07:25:01 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') 07:25:01 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5450, &(0x7f0000000140)={0xfeffff7f}) 07:25:01 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') syz_mount_image$nfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x6, 0x4, &(0x7f0000001300)=[{&(0x7f0000000100)="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", 0x1000, 0x80000000}, {&(0x7f0000001100)="50cb7d044cdb159ee24fe4c7427ffe92706a7ba0b5de0be49ce06faa4f34e1cceca9ba368144ad124d33cd502264c7ec7083d843336c36653b9e1f6fc8990b7b9f533264b2fb4d8bcaebb85f8d6931783a53da081101103cf4ec70755173da8e58b8ddf656c4542e0f4bf055177fca3af662abcfcb32f600ab25cacd57b0cd791071354347826db6bf0bfd687eb1765e0cafe4e0842802e9a8b505105687797ceb829c0156f16b5c88da456b0006ee7cfaa5d0fd84eec22ed1fcba7dd64cbef58a", 0xc1, 0x1}, {&(0x7f0000001200)="56f07120be761a4cfd9d183b1218137a9f5b381f4e9b1b6dede967884fa7b12fcdc18aef0a6b8469546305deb059b46d7522d01b92a120b91cd7fec3cc7b9f78b42dbe44492324256d2611328510dedd88117aef33874e4a928fa3c0d4cc3194cb2685bb2382a6", 0x67, 0x62}, {&(0x7f0000001280)="3197fd0938d0cb722e5d6735c68170405da74ac2f82e21c0cd8b168d111042ab337b169c2a3b454af8f630c612b2baa0581431929248c6746af73a3df9279ea32bb1f5d5f7acebf88b22f6f457b3769ba1f5456977a11777ee7257ddaaae45efe38fffc81bde2e2ffe48832e177f1d04a132d461b8", 0x75, 0x1}], 0x10, &(0x7f0000001380)={[{}], [{@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x10001}}, {@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) 07:25:01 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0xffffffe3) io_setup(0x83, &(0x7f00000002c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x58, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6f}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5ec38e86aa"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000001c0)={'dummy0\x00', 0x4}) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xffc7}]) fallocate(r0, 0x10, 0x0, 0x11000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) 07:25:01 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x42) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000040)) 07:25:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x1c, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0xa815) dup2(r0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:01 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5451, &(0x7f0000000140)={0xfeffff7f}) 07:25:01 executing program 1: socket$unix(0x1, 0x1, 0x0) 07:25:01 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5452, &(0x7f0000000140)={0xfeffff7f}) 07:25:01 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000200), 0x11003, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYBLOB=',privport,obj_user=com.apple.FinderInfo\x00,subj_role=]!.,subj_user=com.apple.FinderInfo\x00,\x00']) setxattr$security_evm(&(0x7f0000000440)='./cgroup/cgroup.procs\x00', &(0x7f0000000480), &(0x7f00000004c0)=@v1={0x2, 'ZBK'}, 0x4, 0x2) accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e, 0x80000) lgetxattr(&(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)=@known='com.apple.FinderInfo\x00', &(0x7f0000000580)=""/62, 0x3e) chdir(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') lgetxattr(&(0x7f0000000380)='./cgroup/cgroup.procs\x00', &(0x7f00000003c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/2, 0x2) futimesat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000540)={{0x0, 0xea60}, {0x77359400}}) 07:25:02 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 07:25:02 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5460, &(0x7f0000000140)={0xfeffff7f}) 07:25:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}}, 0xa815) dup2(r0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:02 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x800000) mq_notify(r0, &(0x7f0000000040)={0x0, 0xd, 0x4, @thr={&(0x7f00000000c0)="1727323fdf428d05883c0f772bb3fff4635cd84f57188852fb6afe8e85ef9e3f8c4f5beb9c83ba228c7a1591a72febdda4c8d7c1a8022277cc013bb8517eb4109c0f66fd2662899836cead97cdc820d8e6718f2340728260acae5b56323fb704c061cdddcfb8f11aa4a5f94a343b7a92840ed1f5f66a779050b5f5958bdec3ddd8f6b3dedec45d7c3e8f010036f04173f0e9a70866e8294beea26eb55a7742ade850b23993aeea48b706dc5a5c973c822bae34232db46ef5", &(0x7f0000000180)="7e64ad17da29ba3bb34bea4074da42cf51f4ff446d949db479ae34cbdf95c5aaf71b25cd9527065a8735f5b1bd9bfa673a7fbc8e6de363f19a8858d549c8c98761894c2c602f4fa7a8c45fccf5d1c3eb94b04e7c214b6e389a90a3b912b1bae5c49d5afeca0588e963f9b44f3a63172cbd47cb2690ac2c5bcee4941efe340153a0111e473c91da44f428e2df10429d"}}) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) renameat(r0, &(0x7f0000000240)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00') r2 = syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./cgroup/cgroup.procs\x00', 0x48a7dc30, 0x1, &(0x7f0000000440)=[{&(0x7f0000000380)="08a2675c7ae6a02afb151a7ee9d5759c04d79c656b9a3c3dc4936cea22dcff71a74307f8e13642dcc70033f855e922827244d16f0d4e2f9e640cf0a42dbb81676d1d9adb07fb9f0b740906d48375bbb97ed58ea226d5bd2f7f1d53b1e745a08362011c9018d28de922ffb1160b3b038761598ababcf1da24936af32a9d1223c02274c077a94b1a7c69ce2528b15bbb4566b8dc8bbc834b62dbae0633cb885c3c7e14c592a9d26cc9dafff2acff86b3fcc0dcaede2e313d2d8b033efdf3f3", 0xbe, 0x7ff}], 0x201004, &(0x7f0000000680)=ANY=[@ANYBLOB='huge=always,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"]) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000500)={0x40000008}) 07:25:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = inotify_init() setrlimit(0xa, &(0x7f0000000280)={0x0, 0x3f}) sched_setattr(0xffffffffffffffff, &(0x7f0000000240)={0x38, 0x0, 0x10000000, 0x1fc, 0x101, 0x44c, 0x6, 0x0, 0x0, 0x3b98}, 0x0) inotify_add_watch(r0, 0x0, 0x610008cf) r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') sched_setattr(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r2, 0x80000) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r2) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000100)='./file0\x00', 0x4000d02) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 07:25:02 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6609, &(0x7f0000000140)={0xfeffff7f}) 07:25:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}}, 0xa815) dup2(r0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:02 executing program 1: link(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='./cgroup/cgroup.procs\x00') 07:25:02 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x660c, &(0x7f0000000140)={0xfeffff7f}) 07:25:02 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6611, &(0x7f0000000140)={0xfeffff7f}) 07:25:02 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6612, &(0x7f0000000140)={0xfeffff7f}) 07:25:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x20, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) link(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='./cgroup/cgroup.procs\x00') 07:25:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}}, 0xa815) dup2(r0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:03 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6628, &(0x7f0000000140)={0xfeffff7f}) 07:25:03 executing program 5: set_mempolicy(0x2, &(0x7f0000000080)=0x7851, 0x44) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x4}, {0x6}]}) r1 = timerfd_create(0x1, 0xc00) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x1400}, {r0}, {r2, 0x200}, {}, {r3, 0x10}, {r0, 0x10}], 0x6, &(0x7f0000000140), &(0x7f0000000180)={[0x6]}, 0x8) 07:25:03 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 07:25:03 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40046629, &(0x7f0000000140)={0xfeffff7f}) 07:25:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x1, 0x4) socket$inet6(0xa, 0xa, 0xed) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x8007, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000002740)=""/7, &(0x7f00000002c0)=0x7) 07:25:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:03 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4004662b, &(0x7f0000000140)={0xfeffff7f}) 07:25:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(r0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:03 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40049409, &(0x7f0000000140)={0xfeffff7f}) 07:25:03 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') 07:25:03 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086602, &(0x7f0000000140)={0xfeffff7f}) 07:25:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x126c, r3, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x75}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x119c, 0x3, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x88, 0x1, "a1038330a273c625c3be6d01d5a7289ec1e26a3154cb3a3f9f95dac900ac12dcf44dd923391aa68d250c9c83389b16b32d9fe3190375c05b9ed12e4f7f98c3054df295122545e634a2c64822a86cfe0ae63f3982a0fbf108a15d3778efbeecb5b87a3f0bcd20e2bfed9b5166c927867142c0199fdfe508fb2e941bb71d87686f8d580916"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}}, {0x104, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x100, 0x2, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb0, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x27, 0x2, "52e8a03566ec43fb3edfa0905f8df5ac30ef31e55703fc29d101493daa9cd221919448"}}, {0x80, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x7b, 0x2, "9d5574fe61454f6fda183df6ce0015ea44c6af6e9ac70054d3c7dd9f9a001cc5f255583f2c60479aa87496d3c28108e6e6305f09054b1f56a8e0502c1e612f640269a5ebcf34e1745fbd417e214921bd2e1a8e3b70bd2ee3260f98b3bf6891a6005acbecfc6cf033c4f49f16d60cb1e5d9f1139fcd3ad1"}}]}]}, 0x126c}, 0x1, 0x0, 0x0, 0x24040000}, 0xf49c4ab07621df5a) ioctl$sock_ifreq(r1, 0x8992, &(0x7f0000000040)={'ipvlan1\x00', @ifru_hwaddr=@dev}) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') 07:25:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x20, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) link(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='./cgroup/cgroup.procs\x00') 07:25:03 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086604, &(0x7f0000000140)={0xfeffff7f}) 07:25:03 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 07:25:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x20, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) link(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='./cgroup/cgroup.procs\x00') 07:25:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:03 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)='./cgroup/cgroup.procs\x00') 07:25:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(r0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:03 executing program 1: get_robust_list(0x0, &(0x7f0000001180)=&(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)}}, &(0x7f00000011c0)=0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000000c0)={{}, "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"}) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14) [ 102.652940][ T5413] EXT4-fs warning: 1 callbacks suppressed [ 102.652956][ T5413] EXT4-fs warning (device sda1): __ext4_ioctl:879: Setting inode version is not supported with metadata_csum enabled. [ 102.684194][ C1] scsi_io_completion_action: 19 callbacks suppressed [ 102.684239][ C1] sd 0:0:1:0: tag#7783 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 07:25:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x20, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) link(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='./cgroup/cgroup.procs\x00') 07:25:04 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000180)='./file1/file0\x00', 0x7, 0x9, &(0x7f0000000840)=[{&(0x7f00000001c0)="e2d4562d1211fae2ae26439f7d9083cabeb14259ab756613bc069f1973dd1f6d0cd454e37303ec416021247547f237287081db9d827b956149a91f5e53dcf53b20707cb72f2a4c497e4c6196f5850e66e634aab1258c9f185b4fdf9ec51e68c145f561040685d7a774279276f68681becd6c0169a9a2be53cc3d343e821f097660065837e25774bcdc0614fe7c79d2a2698adae397ce9d9a7612a82230823d7e49d1b5677b5d56ccfb5a3599d9738e4350336308a557e992f870658a768107580284f76e0c2d5213cd8c254dd9d4", 0xce, 0x2}, {&(0x7f00000002c0)="dea0cf42334e4881734bd4707c8e85d2cb138948ba1eba9d065955ba0ed338bd3e1d6e9386cb36b00f4fad52a2b6419630b5dc77370aa513fdd5c7af53f8a59a9218a85e9af8719fdb23ea3b87c5d5cae790ecb3007df3c54c1acdbc545eaffb39", 0x61}, {&(0x7f0000000940)="09cae22d303a287942544436907b1ae97174167532d7d29cc15f02a369229be438f8b02c631806260255d484b1409ca4858cb230a4da5c893cb4e50352a6573645c9b1a97578c6553ea8b10a2179e49219bf9f477cdf43a8d090e170eb9697", 0x5f, 0x7f}, {&(0x7f0000000380)="0c42675881c91c9aefe85961126c29cf3f8d7c9697ac44e0659298e11f42f723601383b6c411445ba3fc61b8337c6c432581f67fe48636c88ea8acef2fa171d6543dc8d519d90bfb23317c36e693878ecd84662fcbc782f8d5024d983b01d2f49b63aed87740d14116d5cccdd6e5688ddeb1e10e41947c98fd2aeae1e1cee4bb224034a71f994e0a14a13dd05710022009f5789f8d2616a0d8aa44085847116c7c2ed77689456973dd39cb2d4a301cc0b23695c31b4dec4ba3df8582e0a906a43481d140f618bf91cb26d0ebadf372", 0xcf, 0x3}, {&(0x7f0000000480)="7a081bd96fe3ba682ef6e7b2fbca4a26b853496da345e9cc7f6f864542e6b21faff6a9f3850f8e6c39be5c739d241ebc1291fc18ffe458abb47df131b8af4ab8f18d1ccb85dbdca8ce72795fecd0728ce76450e249c70c6b8c7570c2aa793cd3772b8f4eae8645d394c892051fbc9e4c477cbdefadb2750649e6fee7b3be5c9b98d868259a26d8a5e753cc01c2e84ed43de2fe2d3930efb0beaffbb0612a5149e33accf0b8649c737fdea086d312917e13c669b292653e379be016", 0xbb, 0x9}, {&(0x7f0000000540)="3d77aae22741a2fb916e7fee20957f1825d0195135ab5adff8a27bb14bb63bb4457e8f2c0bea005ef3017f173766225dc83264574ef4324e5f523c6e464f6d79a09e5f8e2aca610538dcf6b6c1e868ccaad11a06137044a62df2580ec720ee67a641123ed70175dd097eb7e2c2d509eb7e6fc84ff71f58ecbfd96762713989cee55bc8fa1d8e2bfa2fe37044e05382d4ba4c05ae551efc12a809db06bae4", 0xfffffffffffffdc4, 0x9}, {&(0x7f0000000600)="cdcb8f19d9e4455e74cb2757f366b4ac4729684c4345bc6023740b982e446b2591d6552965403487783587c0c286ad92017527e04998599592b4a275970f5873e6d31fc37f66263c96a486372da8ece009b6a5609706b898c847a16e15a1c106b00ef0", 0x63, 0x9}, {&(0x7f0000000680)="00cfbaad9176afd06f80f89e4bb5a28e541a72685453089ff642a67bf3f21cf8518a124c65127378de10d510c0acb3fe1f87b213462632af558e93fa5b089459811bdd6eb79e2ceb6bfbb17b84ddd7894176eeda734e25ddc1d40568e1533194cba1716e5d6ef4c127149f42d330ae21acca04f2a9f9fdc38c6e91195d7b30cb54f5b64775ee90403cba359409ff5a5b9ead2a2fc0168415e4c5a3d4262d73384a6b7ec8a2e8e33d51d5", 0xaa, 0x32bf}, {&(0x7f0000000740)="21e60685dcea67647872b5712397139c17da0ec786e1158aed79055152459e63556174ef86cd190ae67cf70584bf5e1bc4ff5c43e16df9a2f9b3c134d5e5b4edc075d248aa8053a404e04405911cc816c850960cd8d19c898e7ffe12256ae086365d029c7143e1ec1ff385ac8253a3570411b89ba6a4d1cc3cd557c4424376e9d991521864e4e7a13f237a68d11a17517dc202c5ac68a1150ae53397f8c6c096f941287dda7b9f9b1a5cefae118f3f101fa904d56450c1b3988fe5d94a319e7a486e53b52993b77939520ce9de2f5b409d2c4b23f7aa005facd5aa6bf35544714050967918b1cb56f16827066fc83043305b2b43d6", 0xf5, 0x1ff}], 0x82400, &(0x7f0000000b00)={[{@noload}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@jqfmt_vfsv1}], [{@obj_type={'obj_type', 0x3d, '/\'!!&^\x00'}}, {@subj_role={'subj_role', 0x3d, '}-'}}, {@uid_gt={'uid>', 0xee00}}, {@subj_role={'subj_role', 0x3d, '/\'!!&^\x00'}}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, '/\'!!&^\x00'}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) lgetxattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@random={'btrfs.', '/\'!!&^\x00'}, &(0x7f0000000100)=""/57, 0x39) mount(&(0x7f0000000a00)=@sr0, &(0x7f0000000a40)='./file1/file0\x00', &(0x7f0000000a80)='ocfs2_dlmfs\x00', 0x2052451, &(0x7f0000000ac0)='/+\x00') 07:25:04 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000140)={0xfeffff7f}) [ 102.701026][ C1] sd 0:0:1:0: tag#7783 CDB: opcode=0xe5 (vendor) [ 102.707388][ C1] sd 0:0:1:0: tag#7783 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 102.716534][ C1] sd 0:0:1:0: tag#7783 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 102.725640][ C1] sd 0:0:1:0: tag#7783 CDB[20]: ba [ 102.776567][ T5428] EXT4-fs warning (device sda1): ext4_group_extend:1813: need to use ext2online to resize further [ 102.784808][ C1] sd 0:0:1:0: tag#7785 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 102.796992][ C1] sd 0:0:1:0: tag#7785 CDB: opcode=0xe5 (vendor) [ 102.803309][ C1] sd 0:0:1:0: tag#7785 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 102.812355][ C1] sd 0:0:1:0: tag#7785 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 102.821429][ C1] sd 0:0:1:0: tag#7785 CDB[20]: ba 07:25:04 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6609, &(0x7f0000000140)={0xfeffff7f}) 07:25:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 102.912059][ C1] sd 0:0:1:0: tag#7788 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 102.915123][ C0] sd 0:0:1:0: tag#7789 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 102.921925][ C1] sd 0:0:1:0: tag#7788 CDB: opcode=0xe5 (vendor) [ 102.931718][ C0] sd 0:0:1:0: tag#7789 CDB: opcode=0xe5 (vendor) [ 102.938027][ C1] sd 0:0:1:0: tag#7788 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 102.944337][ C0] sd 0:0:1:0: tag#7789 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 102.953328][ C1] sd 0:0:1:0: tag#7788 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 102.962324][ C0] sd 0:0:1:0: tag#7789 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 102.971416][ C1] sd 0:0:1:0: tag#7788 CDB[20]: ba [ 102.980430][ C0] sd 0:0:1:0: tag#7789 CDB[20]: ba 07:25:04 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x141400, 0xe0) mount_setattr(r0, &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x8000, &(0x7f0000000100)={0x100001, 0x4, 0xa0000}, 0x20) 07:25:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x20, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:04 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40087602, &(0x7f0000000140)={0xfeffff7f}) 07:25:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(r0, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 103.524955][ T5449] EXT4-fs warning (device sda1): __ext4_ioctl:879: Setting inode version is not supported with metadata_csum enabled. [ 103.544130][ C1] sd 0:0:1:0: tag#7758 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 103.553981][ C1] sd 0:0:1:0: tag#7758 CDB: opcode=0xe5 (vendor) [ 103.560403][ C1] sd 0:0:1:0: tag#7758 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 103.569435][ C1] sd 0:0:1:0: tag#7758 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 103.578471][ C1] sd 0:0:1:0: tag#7758 CDB[20]: ba [ 103.613254][ C1] sd 0:0:1:0: tag#7759 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 07:25:04 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x400c6615, &(0x7f0000000140)={0xfeffff7f}) 07:25:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 103.623129][ C1] sd 0:0:1:0: tag#7759 CDB: opcode=0xe5 (vendor) [ 103.629504][ C1] sd 0:0:1:0: tag#7759 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 103.638584][ C1] sd 0:0:1:0: tag#7759 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 103.647651][ C1] sd 0:0:1:0: tag#7759 CDB[20]: ba [ 103.662854][ C1] sd 0:0:1:0: tag#7763 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 07:25:05 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x1ff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4c050) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r1, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x13c1}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x80) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x38, r4, 0xcbf6810249fbf57, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1b}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x38}}, 0x20011) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r5) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r6, 0x319}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x84) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r6, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8800}, 0x45) lgetxattr(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="009794e55b31adef752399e81aae689d8c9ac23d94f8f249162b5242fbe6eb58d74d6096f18d78407dc21b124965a4db0c577369ce1d2205bf640d"], &(0x7f0000000100)=""/132, 0x84) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106614, &(0x7f0000000140)={0xfeffff7f}) [ 103.672721][ C1] sd 0:0:1:0: tag#7763 CDB: opcode=0xe5 (vendor) [ 103.679087][ C1] sd 0:0:1:0: tag#7763 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 103.688154][ C1] sd 0:0:1:0: tag#7763 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 103.697380][ C1] sd 0:0:1:0: tag#7763 CDB[20]: ba 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x401c5820, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x20, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4020940d, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286609, &(0x7f0000000140)={0xfeffff7f}) [ 103.842325][ C0] sd 0:0:1:0: tag#7789 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 103.852199][ C0] sd 0:0:1:0: tag#7789 CDB: opcode=0xe5 (vendor) [ 103.858568][ C0] sd 0:0:1:0: tag#7789 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 103.867782][ C0] sd 0:0:1:0: tag#7789 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 103.876852][ C0] sd 0:0:1:0: tag#7789 CDB[20]: ba 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286610, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x20, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40305828, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 103.979021][ C0] sd 0:0:1:0: tag#7790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 103.988988][ C0] sd 0:0:1:0: tag#7790 CDB: opcode=0xe5 (vendor) [ 103.995341][ C0] sd 0:0:1:0: tag#7790 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 104.004353][ C0] sd 0:0:1:0: tag#7790 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 104.013394][ C0] sd 0:0:1:0: tag#7790 CDB[20]: ba 07:25:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40305829, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsa(&(0x7f0000000540), 0xfffffffffffffffb, 0x80000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x101000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xe9}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20880240}, 0xc, &(0x7f00000004c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="a0dcaf4f8deebc4fee98d41c1040df14719ac04de6e8e3048aea8cd3811895d50d1c3116632e6a84fac523eb04155c2336760993a5783407c6ff309f636c880d383bdb06a4a38f51d1e40749203985d76de93049bde39c0f61383714a3da577213b6eed8f47d3dd8b17c0e64847ee1f210b8b9394982dfec639e931527a61c5ed03dc25ce92a0635006f0ede0a649a2f8efd7d829b136d0a7e84d303935a5e992045fabfc95c1c0fc71b1397599f9b436fdb0000000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf258100000008000300fab8ce37ed29b80dbbed802d5a383df1e30634ddfcbe1f33135aab67424ee9739cfac63baaf0f370e45285f85501bed837ca7963c7283044acdd199bcb8f91887e99042ea786e8f52629764f671f3d28274847fc8c743dc2b5dfdc109d98fd7d34005d1534ac042cc09e6cd7d08fefd95cd23e", @ANYRES32=r3, @ANYBLOB="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"], 0x3e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') [ 104.061295][ C1] sd 0:0:1:0: tag#7754 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 104.071422][ C1] sd 0:0:1:0: tag#7754 CDB: opcode=0xe5 (vendor) [ 104.077762][ C1] sd 0:0:1:0: tag#7754 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 104.086816][ C1] sd 0:0:1:0: tag#7754 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 104.095948][ C1] sd 0:0:1:0: tag#7754 CDB[20]: ba 07:25:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4030582a, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x20, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4030582b, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') statx(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x3, 0x5, &(0x7f0000000480)=[{&(0x7f0000000100)="2d1141edcb009b806c36c39c9ad7a09799f19a8c763a317f08cd5746630022b74c7a7f31b5c620e464b540ac7fa3fd7ee93ea33f2f0d9fd08cdacaf15121f3b13140b266f6b3c0574c6fab18391d35af98c023f476f9d46426a90974e1ea9a45c8228e43415c6e8cdd6f5f2663691f9a5b44f1da13b9440fe580ef01a45b7ada84f26a5a0142f2eaeb0e49d48699c073ce8325a43c2cb0a25484bb9d1a370627360549706081d5f15b8c39c584ad2da6f8684e2d79", 0xb5, 0x4}, {&(0x7f00000001c0)="662fedefd0389a23c45995e4eb6b2f8a48d82c1277794a3142225cac803825b9c6c2dfe9ad33b60fb7c566099f186e0fee1c5c6154f362885eee8532c77941056706bc65517ba40e73c35c4bb835d899d7a762d3a032279e110177a41311aff7a360d7d136fd5d2399ae760c86ac70e69735e42a006db3050922af502d2298ddbbe1db35928d18fab1431c0a8fae1580df2a1570ef0af22e74d7a5d01005a9f59b180a984d2cd54b9b9257a4a1e805f39fe81f9bb4d60098a7dcb98b9c3ba5e4cd8115eb28ca1fe9a497fb03b99039f7ccc2ce1e33ad5180fc6a3e79ccc472ce53ffc094ab", 0xe5, 0x80}, {&(0x7f00000002c0)="ad74abd6258754913d866143880acf584b58f89707d80e3ab738a116c55e14118dd5f8d0225ed422bd9378c5186e1cb6e49252700871bf5492e6fdd2b4e42a193c54", 0x42, 0x8}, {&(0x7f0000000340)="0676d7038f31e8606b9c63591f1634cf7226f7ec0267c7d7563a130be925efe77cdf03b236a88a731399f1ee45b0c59cd6f28c63f70ce93795273d811ccbf6c68ab5653d4e9b842af282aba3efa88541b7986381f340a195f86c945fd5c10b2dcd3a4266edb4be01c11d8fdf438231f8be2f0f571107d3a244cd3bafa48ae8b94b85cc125f72f92e69f4c19f6b153408b65ec8c01e40dde72487caffff2acc0a4ff6436788dd83818a19", 0xaa, 0x8}, {&(0x7f0000000400)="33bdc28ae978ddabec89ae5954cfecd40bf89b0a27e3b78f5e451beda9e2d47fe3d0d0657a2f7eaec11832631c0015cbf1e526aade0413323072aaa6513e7dbed56baf037d668b6b", 0x48, 0x200}], 0x210070, &(0x7f0000000640)=ANY=[@ANYBLOB='\n^&},:[:,-$,defcontext=system_u,obj_role=,subj_type=^^\'{),pcr=00000000000000000039,fowner>', @ANYRESDEC=r0, @ANYBLOB="d981"]) 07:25:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 07:25:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:05 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x5, 0x2, 0x13, 0x7fff, 0xa3, "066200928d42c6bb92124ef637f20461b42e2f640b51148820d98dd290926e78c4f622fb852a1a8767629d3df32dd756777ee0d0c4aa7b7c5b9c5b6da11f134b2fd7035b2d3ce9b962ede9df3b17fbdff5ff90dd54a3bf7a2914e57cc8f035de6aeca78ecf54f71d06f72b4f4b1659622db0efc97217e0a94e105698b767c3a57c20a2188d3f9e035f041ce4642d50a40da887d7fedf538b70eee305548669682cf438"}, 0xac, 0x0) 07:25:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40305839, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:05 executing program 1: fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)={0x0, 0xfb, 0x43, 0x4, 0x4, "eaf605cc61d9451bba9c4b88439b162f", "27388bdffdc975c762bda2149f6900efc368ebf337eb9fcef5a69c21681846fc5dbb290316a202533202a5b8a749"}, 0x43, 0x2) link(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./cgroup/cgroup.procs\x00') mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/O0\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)='hostfs\x00', 0x2090080, &(0x7f0000000140)='T!\x00') 07:25:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40806685, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x6609, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:05 executing program 0: get_robust_list(0x0, &(0x7f0000001180)=&(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)}}, &(0x7f00000011c0)=0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000000c0)={{}, "3cf9a02e48105a9c5e9421253ecf865bcfd73327222cf302a1a194f1d7b94170262ec3f4c80cbd7defb8a055e4a5b6e9cc46205325527a5f24545c2fd39f0eac66ff77514b8d1933758414319ea1dc6ab1e2cb04032027bd18d2f8a78f6b38d58affd1af70ff92c267d6c33ed9e12d0d7c6fbc3cebfa0d1297c86c4da75405b1dc0da3b0eabe0f0b639de3534ac3dd7b5dd77109a11e8302d6a6082afd205708487686931aa10a2f1051a0d08228e8f4d75196d4e1186ca2302e4f3c4b2e36ca124348ba9b735e51745497821c65a4e5a5ee9091a13fa5ab7e866d1d5c45de646aec47a922f1dcaf9ed9d1553d6f9bba5f594f99c94fb68ea65578c4e9efa459cb4d6fe52aee4791a574e1bd08c780452aa7729b125c54046e8db39fc326ab9579a5bf59de588dffc91ead50de28579b1a2fbd43be90c85d6e4db50895f8321529393b5adf0d40a1dce867984f233ae3cada7ae87edfe0fb2b3168741b5b43b94e5aea1923f422e0f8aade93e2a97000cf119c81d4d7fe0283dd03ee9c08807c9f343234bc88e6729db5baa2813fb4908e4db66d06604145ed65160ac03606650e7044b6a53720eb3f2e9beed42bfd41518935d1b4f180db66ca7f5c9a2465cabde1b5df0c0c3415e8107e6aa8db906aba078a4f9ab6962bf757ad58155febb27292d88f9b67c18ac9fed27a82ba3f3f4fd50b00d196683a6052c72cc633617d2adb70bf34eb8baee0c848502f7b64143cb29d81c80749c3b2ef43b8e35519b089045fbf72fe568ead8e9778831cee675799d654a2b62786e3ec1cb84224adb42609120f575a8b258e73acb247a9a8eea05f67dea92edf904f09cf7c0bbd5976dc6b08c2f8d97b3f904c57a644a2b6129082820c4616f7c3828c9cb54c2319962e9305648d9254edba2333e89452f24dc2bf87588637e70ac6f9e58d428feb1a8f059f01fb2093b7c90197b5ac9ca1b747d97548d7ccf538be37d62b590c0087402339a6d146b3e8b22a08583ec832e2397a1ea0da1a1fccdd545e25bfae8d6c775eb7750daac1fac9dbaaf81cf3da488ae49c79ae1e699831d128d09bd9c288b6d56925a1dbc6798c01234955af2839cec0b051d8a18dbcdd3005937f66457758856d38f52658bd184971601e873abe9e1a9600ff18a9d4141babf3be618059539e43f9467e65c660b4415927dede0c0d75a2dc5f0de9327a063795a1eb03733b0f4491cdf0c0840431c6d7448c02841d4e061b1f4dddeacd43eb1bcdef372fb850dc6064d315c1e22fdd7bdea4bf34c6ecd6c3f456f0c33b702bc9e1c7671b86fe1a6765c7d9c4f32e9235b07c72b6f40aee1de0dc1bbfe93275b210ef56ef1231f2983cf9adede39ccab8d4ca0cd099dca40e7dcf4937c6b618a560bf45d1166caedb28c18cbd8298f7df64733e1bba2dccbed54ff0af60e0e56b2f2258e9b9ce9a41b1ce09a9c7cdc0fcfb981b1411eba71d1722b72c430b5ebe6ebb79e51b83a0bc5e0db675cc5b9bae6f0fd0007ee2d408ef8c525014c6a186bf093aad5176aa3168c0a372d3e7962eadfda1cf2e5e9e148faeb9c61928e1088d895b09e77e35d7c7eabcc9fbc356661106003f26d9910d9816b4727348e9a92d5d3c8c887d0e791975db8b7865bb6e37bc578ec98ea47e168c5af8adfee81f9f8b58e63dd9fb2d1e807b7e36e722727389b5077beddcc496445828cdc2aa9df20af24f21fdcde7f65b1cab0b40d9ba54c702e772943e39ae34bd2f7a7f5217dcee613b639f4032a1d1bd035af99eadf8520c08919ec4341310cc52b76725396e508dce21592fc8de6906bab1f7959208d0daa0c22e16720da606c8e09df81a09fb205b374b917864ca0a69564c639c87a09db35f3a247bd67eda94c92b805a5cfc7c485f3658e2b3b1861c2bbfbebe799a51c591eef0584fd159d444fcb73108708657a5988440ef552745c83c7237b7b5c22aca97d00e7855a799f90057d6cc567d58c594118734f1d4ccbbe5a80731671cdaa61f7e0d92c24af0a724587ad0b715aa2d0c87eafc7c52bbacef5810fe7e98665be0b65a3b07b3f6846e7dc45e76fdf117c07eaab456c95d59939aef29f58e109e2818ec35d445eaeef75ba6a98cf7ba374ef5a20dc3f59f5e57fa30bb9c2227273a6335899195f87486c380755f6e9206ac0629fbecd4bf81499dd6b5e10682d80f770fa4fa28f0ec27a9a6825ebfecd2b5c7536cba94e964ab56cce415ccb938dc590f47ad02d01f6ff1c45bcc72b41f0e154c3d623b5c2cc10ae4cd9b1736762cf42d31a360e6fc112bede0d2830b932c2fa127597b20a204f8b2ca238498434cb59c62a6826b5026fae0f2309bddad6a542f1c2eca74f494aec6e59d57fc3b999c01138642e9925d6c68106c156d515050e6ce35341dd73d53067771864409cb211799b5426be38ef7e6995a8780e591b77e45f7d1aeb9dbd48eca5fb524caa9cd16c169c93da5423dc74c6681178daca23162115fbe4faa659263011bc049dccc0c2f67bca29d47779abc14826001236781b6040fcce096f936092b67ea80e3709c6e5314a1812be78fe0a731287fa5f76e6bc1a53330c5e1fe6d8446328110ee758729ea0f69b7c232bb45513059780efae104b15ccabd1dea1767d40352e342285c09b5f2c452fa79345b693990a6f4d397385d11de92a433bdbb72453aaa9f3d482e215bbe9a1e02aeeb7fbce3d5c419676d0fd8b7b4c282808fe3fb17d1e62badf6c2949f75ee0bc261e6b732937b50b29aa36da8511be6026231a75b41a99fb8270a79198f6f5b76fdc82bdc8e0c106dc1fa0ba855c5af9b5c845118b5a02fd3ec91caaf10b1a1e547b77ab8dc300108953584224e4a6f2f684027360bba34f4ad0107e3a724364a78ab48cdd1c7c98882236992f6577619557ade40b77ea38969fb933a5d5a58ac071c7faafe8d25f337b06e351c1b11846fb8cf5097922c42b0ab942a8c6c8b8b643f7e8077b3fb397cc8496764e77ecedd6d796abcae978b76fd25e38d3d924985fadaaf580d3e1531c8363b6228af5a3bdd414808b599cdbf284a39883826927da844fb01fe0bf8dc178606146603187aa5b7983de40bc7693e2e47a9791e4ef24403092d1e238de853ef55a959bca6da985de327c1adf412819f7fd43efbb8866ec4d38be2d0f93348ac7d12413a7ffb950c77912a6fb7ef2c4b31a335b7df373932bc6ce5bc5e9d60865f5ed7973f3c44f21455dd43884a7fc8e18fb65bdb44d6927786f1886929cbd94436ad9ca7d0bcb514efe8607fcbee06f78adcf0d0a0d65f6ff835c39a5a17b56f0feb25b7622be72878154e8ebc7556b172e467770686467cf2c9f53da26ffa3f901fcf8ca625885a4d83e263f51f6690defea492503e6e9cd23d659c9b43ddbcdcc347bdb1707abd20f57b922ad24a6223f108578b635ce74076215a73f3590f1a86a6abd8af2954e9768534e2ec813dc946214969abfe30a737c51078c608ec6493908623f696e64c567b2c43db18414f238e170f132903d7fb58e551245f322307fcb72bcca86f73c82bfe1b8e06469c15ef26feb779e13bab91dcc6c8e3fff425b647c3325103a39792b3213100fb4e699af925f476868fa590de2cb82819fc75b9be0ceb31d32026a9b074a2e568b492249a70fc984420ff562179d6965cbc39774c54f2ee150f2808b02c25c6c620b1d16c6edde3c4597a1de4c34097a4fbe113d0b82dbd523626bda33fa952a264c6694738eef35921160c64865fb25ce75517fa0c2e7f261a75c7ce982f7e3a17346f4ed9311a794b45e8b3439807667d347677105bb3f47a6cb9d206071ee67ca5120aeb5630a108e5b002fc2b53e5254715ffb7e215bade3ec33c0d9da99529f7dd1680fea6eff38b6bacf57a167a69ff7dc9f5515c31b971c8170e9c5de76a4a9a7a5f6fc7a96d7ec00816a1951aada02d6acbb550b6c54772fb1af50f8d781274a98bc73c7e22c7257b071086a9550a10749283d79e473c99a25fcc37fc58f82e3f2cd1bfbcb6f120ddf82020f8aaef111f307c732a6e8fb7454ec50839917419ae8687af5bfacc87a611b285249db8f00db161f139a29c0367638c22275a56bc58a64aa54344be90e76e19ee8950016e3a04ee02e2428295d8528c573c38d825b8d06c9e775cde1022e64e9e8e263cecd179c15a938e9ad3a5289a497a4ae5ab7cfe56d7a6bd6faa5b410147ae054b32b83073b17d24ea48a62263bb32e4cad9653d267fe8f843db5f7feb5a865871b48f86fbbcc6e56e1e957f3fdc3a6c7256092d51399ca8dacc3c0b67ab786e10f6722a89c4b11ff3b2a3f498df5e60cfea9615c9e5f7ee8a58eac122e174210998979f22ad88d49ef468561f51d6cce4222088bb86af999f22ebc7befe5b0455b0590bd4403285e1f03b6bfe67bd0d9a150fd7a95eafd5006c7d0d32c4fc5f48bbdde1d88b53f38d7fa8d711add38e38b1160228e781de327a2f1f8ba61f9d1314c944d71ec66aee6e04895482a31b749bdf369c3223e299a40faee9e81375b0257aabbe82aea0648f3c48ad14bf3ff7a95bae5d85b30dac7e97e6c03e445b5eb563aabba80dcc7b12e90594a3ab756f936ba724cdd394314fce05d4bfa387fbc4e694bc4c9a5dbf12748efe2571bac8bf8ec0a175070bce21612d87a65a6ee2e96665e045b30961acd244294e271e801be1c95a2acc96cff5afcf477d04a575cea1792b84c436b2c666886ab80b6cfe1f19964512a114404ae9e36d9abbd54aae1771e5ed402062b7308725a668a69ed00fc9d37daeb146e906dd0018145e3a04e1c4276023f748fc86731dbf3d0ed3f147a41d56ad1a180986b85ebb03de9eac4399d9c62fbd78d5dafb5788ff18cb53409a0494d4b78bcb6625aa4c2c922c94cc5caac6a1b299dff2d4b7237a888e5fac015a1a7d7a270ba0eecdd2b27730055abc9f9727501014e22308e7999b18b75bad4fffeccc5d628103f31df4ace4a99759a90710562909a15b5c10f87bacb494533334a9786de1f9c22d8c4bada799394f1b3403a2df734afc7701f03f195fe7bd3c860322b3bdedd38bd8537350394c557bd84fb7df7617128a7961ce7fdb0cc7f8137c0811114651e3f1117d208ea614530cf71032d5ca29bfa7062d2c54db69ab82951aec9ec398339d14799c11fa988d849da163e9de9ebc5e78e348d11aaaa91e4eae4f33bda95592e046a66b906951a62b4b0e8160a60a3588e701be35ff208860cee0649c98f9b28c55c8255f14db371ab6a7c736648d675ac6a83c6b76ba599ca11e17ed2499b382c3446b41848cad0d0afacfe2b29ca160ea29460782a420765aca3f346dca2884adb0e2fb33cc156ada3b62ecd58597396848c3df338bcce9aafa39b88b447085a9a1275f53d5e1d40d07aa2aa6d6eccc4356024797d5ce41b02076590a3abb5d4ff57d09a3654a537e359dc28277374ec206bbe070234e6c8006ae7bebd22e005d936670c91492713c1a85a0447654abd93cae4f47895a18c532940351cf1a15e91693babcae5e8bf7c6bfe2ece65bbb95957edb55c25a1b6c9613b8251cc104eeb2e94a452f6d540175b5bc286260fedf66bf01d67bf3ba6c96f864cd40c50ad39518301bec60a9c38610ecc13f62582a25d7ee329289e860a0aea4377da1c694cb890093d6de50e49ea58a0be4d7c155b48b0f5eda3ac826148088416d9f80ff976de0e049d3deee2fa43a8bf5c9405000f17c00c8a0cdf5a5a2879622b22966fd141f89fa2c7f8389ed0e6faebf"}) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14) 07:25:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80086601, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:05 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 1) 07:25:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80086603, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80087601, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x800c6613, &(0x7f0000000140)={0xfeffff7f}) 07:25:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8010661b, &(0x7f0000000140)={0xfeffff7f}) [ 104.619609][ T5578] FAULT_INJECTION: forcing a failure. [ 104.619609][ T5578] name failslab, interval 1, probability 0, space 0, times 0 [ 104.632350][ T5578] CPU: 0 PID: 5578 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 104.641021][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.651146][ T5578] Call Trace: [ 104.654495][ T5578] dump_stack_lvl+0xd6/0x122 [ 104.659184][ T5578] dump_stack+0x11/0x1b [ 104.663340][ T5578] should_fail+0x23c/0x250 07:25:06 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x801c581f, &(0x7f0000000140)={0xfeffff7f}) [ 104.668579][ T5578] __should_failslab+0x81/0x90 [ 104.673378][ T5578] ? alloc_pipe_info+0xac/0x350 [ 104.678329][ T5578] should_failslab+0x5/0x20 [ 104.682889][ T5578] kmem_cache_alloc_trace+0x52/0x320 [ 104.688178][ T5578] alloc_pipe_info+0xac/0x350 [ 104.692909][ T5578] splice_direct_to_actor+0x5f7/0x650 [ 104.698352][ T5578] ? security_file_permission+0x7c/0xa0 [ 104.703921][ T5578] ? do_splice_direct+0x190/0x190 [ 104.709012][ T5578] ? security_file_permission+0x87/0xa0 [ 104.714602][ T5578] do_splice_direct+0x106/0x190 [ 104.719453][ T5578] do_sendfile+0x63e/0xbb0 [ 104.723873][ T5578] __x64_sys_sendfile64+0x102/0x140 [ 104.729087][ T5578] do_syscall_64+0x44/0xa0 [ 104.733671][ T5578] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 104.739585][ T5578] RIP: 0033:0x7f6acfff5a39 [ 104.744048][ T5578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 104.763660][ T5578] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 104.772682][ T5578] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 104.780732][ T5578] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 104.788708][ T5578] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 104.796744][ T5578] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 104.804734][ T5578] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:06 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 2) 07:25:06 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0045878, &(0x7f0000000140)={0xfeffff7f}) 07:25:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:06 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0045878, &(0x7f0000000140)={0xfeffff7f}) 07:25:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:06 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0046686, &(0x7f0000000140)={0xfeffff7f}) [ 105.492532][ T5609] FAULT_INJECTION: forcing a failure. [ 105.492532][ T5609] name failslab, interval 1, probability 0, space 0, times 0 [ 105.505197][ T5609] CPU: 1 PID: 5609 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 105.514017][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.524083][ T5609] Call Trace: [ 105.527366][ T5609] dump_stack_lvl+0xd6/0x122 [ 105.531984][ T5609] dump_stack+0x11/0x1b [ 105.536166][ T5609] should_fail+0x23c/0x250 [ 105.540590][ T5609] ? kcalloc+0x32/0x40 [ 105.544734][ T5609] __should_failslab+0x81/0x90 [ 105.549547][ T5609] should_failslab+0x5/0x20 [ 105.554123][ T5609] __kmalloc+0x6f/0x350 [ 105.558277][ T5609] ? alloc_pipe_info+0xac/0x350 [ 105.563132][ T5609] kcalloc+0x32/0x40 [ 105.567039][ T5609] alloc_pipe_info+0x1be/0x350 [ 105.571809][ T5609] splice_direct_to_actor+0x5f7/0x650 [ 105.577187][ T5609] ? security_file_permission+0x7c/0xa0 [ 105.582788][ T5609] ? do_splice_direct+0x190/0x190 [ 105.587819][ T5609] ? security_file_permission+0x87/0xa0 [ 105.593374][ T5609] do_splice_direct+0x106/0x190 [ 105.598288][ T5609] do_sendfile+0x63e/0xbb0 [ 105.602716][ T5609] __x64_sys_sendfile64+0x102/0x140 [ 105.608094][ T5609] do_syscall_64+0x44/0xa0 [ 105.612523][ T5609] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 105.618434][ T5609] RIP: 0033:0x7f6acfff5a39 [ 105.622850][ T5609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:25:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 105.642509][ T5609] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 105.651015][ T5609] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 105.659014][ T5609] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 105.667062][ T5609] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 105.675155][ T5609] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 105.683167][ T5609] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:07 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0096616, &(0x7f0000000140)={0xfeffff7f}) 07:25:07 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 3) 07:25:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x48040) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x1c243911) r4 = accept4(r1, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000500)=0x80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xe9}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xbf844d5d2cd281c9}, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xe9}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000d40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000580)={0x778, r2, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1b8, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcc}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3981}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x18, 0x5, 0x2, 0x1c, 0x36, 0x9, 0x1b, 0x1, 0xb, 0x1, 0xb, 0x4, 0x48, 0xb, 0x3, 0x16, 0x2, 0x1b, 0x53]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x3}, {0x4, 0x2}, {0x6, 0x7}, {0x1, 0x6}, {0x6, 0xa}, {0x2, 0x1}, {0x4, 0x4}, {0x1, 0xa}, {0x5, 0x6}, {}, {0x7, 0xa}, {0x7, 0x4}, {0x0, 0x4}, {0x3, 0x2}, {0x4, 0x7}, {0x7, 0x4}, {}, {0x6, 0x5}, {0x6}, {0x2, 0x5}, {0x3, 0x9}, {0x7, 0x2}, {0x5, 0x2}, {0x6, 0xa}, {0x7, 0x7}, {0x5, 0x4}, {0x0, 0x1}, {0x4, 0x2}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x5}, {0x4}, {0x4, 0x8}, {0x1, 0xa}, {0x6, 0x2}, {0x1, 0x5}, {0x4, 0x5}, {0x5, 0x1}, {0x5, 0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x4, 0x3}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {0x6}, {0x3, 0x9}, {0x5, 0xa}, {0x7, 0x5}, {0x6, 0x6}, {0x4, 0x6}, {0x0, 0x9}, {0x4}, {0x2, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x8}, {0x3, 0x1}, {0x6}, {0x1, 0x1}, {0x2, 0xa}, {0x2, 0x1}, {0x4, 0x8}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x9}, {0x6, 0xa}, {0x4, 0x3}, {0x2, 0x9}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0x8}, {0x4, 0x6}, {0x2, 0x3}, {0x3, 0x3}, {0x1, 0x7}, {0x5, 0x5}, {0x3, 0x1}, {0x5, 0xa}, {0x5, 0x4}, {0x1}, {0x2, 0x7}, {0x7, 0x9}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x7, 0x7}, {0x2, 0x7}, {0x0, 0x5}, {0x3, 0x4}, {0x4, 0x3}, {0x1, 0x1}, {0x0, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x5}, {0x1, 0x3}, {0x3, 0x5}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0xa}, {0x0, 0x6}, {0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x8}, {0x6, 0x2}, {0x4, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x3}, {0x5}, {0x5, 0x8}, {0x6}, {}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x4}, {0x4, 0xa}, {0x6, 0x7}, {0x6, 0x7}, {0x6}, {0x0, 0x8}, {0x1, 0x4}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x7}, {0x5, 0x1}, {0x5, 0x7}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc2c, 0x7, 0xfffd, 0x5, 0x100, 0x8000, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{}, {0x1, 0xa}, {0x4, 0x2}, {0x6}, {0x1, 0x5}, {0x1}, {0x2, 0x3}, {0x7, 0x5}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x6}, {0x4, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x6, 0x1}, {0x6, 0x6}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x5}, {0x4, 0x5}, {0x4, 0x2}, {0x5, 0x7}, {0x5, 0xa}, {0x7, 0x8}, {0x1, 0x6}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x6}, {0x3, 0xa}, {0x1, 0xa}, {0x4, 0x9}, {0x2}, {0x1, 0x9}, {0x1, 0x4}, {0x4, 0x1}, {0x2, 0x9}, {0x5, 0x3}, {0x5, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x8, 0x9, 0x3f, 0x3, 0x6, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfbff, 0x8, 0x7, 0x5, 0x3f, 0xecba, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x73}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xf8, 0x11d, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x63}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x15}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x38f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x7}, {0x7, 0xa}, {0x4, 0x2}, {0x1, 0x1}, {0x6, 0x6}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0x4}, {0x0, 0x6}, {0x2}, {0x1, 0x5}, {0x5, 0x9}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x3}, {0x4, 0x7}, {0x0, 0x6}, {0x1, 0x3}, {0x2, 0x4}, {0x3, 0x3}, {0x2, 0x2}, {0x7, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x2, 0xa}, {0x6, 0x7}, {0x7, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x6, 0x7}, {0x2, 0x8}, {0x2, 0x4}, {0x7, 0x5}, {0x1}, {0x5, 0x4}, {0x6, 0xa}, {0x0, 0x6}, {0x6, 0x7}, {0x1}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x5}, {0x2, 0x6}, {0x3, 0x8}, {0x5, 0x8}, {0x3}, {0x7, 0x8}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x9}, {0x0, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {}, {0x3, 0x9}, {0x3, 0x8}, {0x2, 0x8}, {0x7, 0x8}, {0x3, 0x7}, {0x6, 0x6}, {0x1}, {0x4, 0x5}, {0x2, 0x8}, {0x3, 0x6}, {0x0, 0x3}, {0x1, 0x7}, {0x4}, {0x4, 0x7}, {0x4, 0x6}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x8}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x3}, {0x4, 0xa}, {0x5}, {0x6, 0x2}, {0x5, 0x8}, {0x5, 0x2}, {0x3, 0x4}, {0x6, 0x6}, {0x0, 0x4}, {0x2, 0xa}, {0x2, 0x9}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0xa}, {0x3, 0x2}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x0, 0x1, 0x5, 0x24, 0x9, 0x6b, 0x3, 0xb]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x8}, {0x5, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x0, 0x2}, {0x6}, {0x3}, {0x6, 0xa}, {}, {0x1, 0x9}, {0x4, 0x6}, {0x6, 0x2}, {0x4, 0x6}, {0x6, 0x1}, {0x6, 0x8}, {0x3, 0x7}, {0x1, 0x3}, {0x7, 0x6}, {0x4, 0x3}]}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}]}]}, @NL80211_ATTR_TID_CONFIG={0x4ac, 0x11d, 0x0, 0x1, [{0x430, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3fc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x9, 0x0, 0x6, 0x8, 0x0, 0xb784]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5d, 0x5, 0x3, 0x3, 0x3, 0x2, 0x400, 0x6]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0xa}, {0x4}, {0x2, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0x3}, {0x3, 0x9}, {0x0, 0x9}, {0x4, 0x3}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x9}, {0x3, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x8}, {}, {0x5, 0x3}, {0x4, 0x8}, {0x0, 0x1}, {0x4}, {0x3, 0x6}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x2, 0x5}, {0x1, 0xc}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x6}, {0x2}, {0x4, 0x1}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x4, 0xa}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x5}, {0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x0, 0x5, 0x5, 0x1, 0x6c, 0x60, 0x60, 0x1b, 0xb, 0x1b, 0x16, 0x9, 0x5, 0x16, 0x6]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x6}, {0x0, 0x8}, {0x7, 0x6}, {0x7, 0x7}, {0x3}, {0x2, 0x9}, {0x5}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x3}, {0x6, 0x7}, {0x2, 0x6}, {0x5, 0x1}, {0x7, 0x8}, {0x6, 0x7}, {0x2, 0x8}, {0x2, 0x2}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x5}, {0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x9, 0x61, 0x12, 0x24, 0x6c, 0x5, 0xb, 0x30]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0xc, 0x0, 0xb, 0xb, 0x1, 0x6c, 0x4, 0xc, 0xb, 0x6c, 0x6c, 0x6c, 0x9, 0x36, 0x1b, 0x1b, 0x6, 0x12, 0x2, 0xb, 0x6, 0x24, 0x16, 0x18, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7bc, 0xb62b, 0x3ff0, 0x4431, 0x5, 0x1ff, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x5, 0x100, 0x6, 0x64f, 0x6, 0x4]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x30, 0x48, 0x36, 0x3, 0x18, 0x16, 0x36, 0x18, 0x2, 0x0, 0x4, 0x48, 0x2, 0x2, 0x12, 0x4]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x7c, 0x5, 0x6, 0x36, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x57, 0x30, 0x9, 0x2, 0x5, 0x16, 0x18, 0x5, 0x30, 0x16, 0xc, 0x9, 0x48, 0xb, 0xd, 0x2, 0x6c, 0x1, 0x1, 0x6c, 0x4e]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x9}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x3, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x5}, {0x4, 0x4}, {0x6, 0x2}, {0x1, 0x2}, {0x2, 0x1}, {0x2, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x7e, 0x60, 0x9, 0x1b, 0x60, 0x5, 0x16, 0x2, 0x3a, 0xb, 0x36, 0x4, 0x6c, 0x48, 0x24, 0x1b, 0x36, 0x3, 0x36, 0x1b, 0x48, 0x2, 0xb, 0x5, 0x5]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0xfff, 0x5, 0xfe, 0x0, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xfff, 0x9, 0x4, 0x595, 0x1ff, 0x100, 0x400]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x30, 0x1, 0x6c, 0x3, 0x18]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1000, 0x6, 0x6, 0x2, 0x0, 0x40, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x55c0, 0x6, 0x6, 0x3, 0x80, 0x2b1, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x80, 0x91f, 0x6, 0x7f, 0x7, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0xb, 0xc, 0x4, 0x1b, 0x3, 0x18, 0x48, 0x9, 0x36, 0x36, 0x16, 0x5, 0xb, 0x16, 0x60]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x1}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x3}, {0x6, 0xa}, {0x2, 0xa}, {0x3}, {0x4, 0x2}, {0x6, 0x8}, {0x6, 0x4}, {0x5, 0xa}, {0x3, 0x2}, {0x4, 0x1}, {0x3}, {}, {0x6, 0x8}, {0x6, 0x1}, {0x5, 0x9}, {0x6, 0xa}, {0x5, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x4, 0xa}, {0x1}, {0x6, 0x2}, {0x2, 0x7}, {0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0xa}, {0x2, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x4, 0x6}, {0x3, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x3}, {0x4, 0x9}, {0x7, 0x8}, {0x3, 0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0x8}, {0x7, 0x8}, {0x7, 0x6}, {0x5, 0x9}, {0x1}, {0x5, 0x4}, {0x6, 0x2}, {0x6, 0x6}, {0x7, 0x3}, {0x4}, {0x4, 0x5}, {0x7, 0x5}, {0x3}, {0x5, 0x9}, {0x6, 0xa}, {0x2, 0x5}, {0x4, 0x2}, {0x6, 0x3}, {0x5}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x0, 0x24, 0xc, 0x36, 0x2, 0xc, 0x4, 0x5, 0xb, 0x24, 0x48, 0x6c, 0x48, 0x4, 0x16, 0xb, 0x6]}]}, @NL80211_BAND_6GHZ={0x150, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x5, 0x8, 0xfffa, 0x6, 0x8, 0x27]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1b, 0x5, 0x60, 0x6, 0x2, 0x12, 0x6, 0x0, 0x12, 0x60, 0x60, 0x5, 0x18, 0x68, 0xb, 0x5, 0x70, 0x6c, 0x30, 0x60, 0x1, 0x1d, 0x48, 0x8, 0x8, 0x16, 0x30, 0x5, 0x18, 0x7f, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff, 0x3, 0x40, 0x4a5, 0x7, 0x5]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x9}, {0x2}, {0x2, 0x1}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x2}, {0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x4, 0x7}, {0x3, 0x1d}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x4}, {0x1}, {0x2, 0x1}, {0x0, 0xa}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x0, 0x5}, {0x4, 0x2}, {0x6, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x4, 0x3}, {0x4, 0x8}, {0x3, 0x8}, {0x0, 0xa}, {0x6, 0xa}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x4}, {0x2, 0x6}, {0x7, 0x6}, {0x7, 0xa}, {0x7, 0x1}, {0x7, 0xa}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x6}, {}, {0x7, 0x2}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x3}, {0x6, 0x8}, {0x4, 0x1}, {0x0, 0x9}, {0x6, 0x6}, {0x4, 0x7}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x7}, {0x5, 0x6}, {0x7, 0x3}, {0x1}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x2, 0x9}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x1, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x20, 0x1d0, 0x8, 0x1, 0x1, 0x0, 0x1f]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0xc, 0xc, 0x3, 0x6c, 0x1b, 0x2, 0x31, 0x48, 0x9, 0x16, 0x5, 0x2, 0x16, 0x36, 0x14, 0x4, 0x12, 0x60, 0x6c, 0x6c, 0x6, 0xb, 0x12, 0x1, 0x18, 0x8, 0x2, 0x30, 0x1e, 0x6c, 0xc]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x1}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x5}, {}, {0x6, 0x2}, {0x1, 0x2}, {0x2, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x7}, {0x5, 0x4}, {0x5, 0x5}, {0x4}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x3}, {0x2, 0x2}, {0x3, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x6}, {0x4, 0x7}, {0x4, 0x9}, {0x2}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x6, 0x1}, {0x0, 0x2}, {0x1, 0x4}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x1}, {0x5, 0x1}, {0x5, 0xa}, {0x2, 0x1}, {0x7, 0x3}, {0x3, 0xa}, {0x0, 0x1}, {0x5}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x2, 0x2}, {0x7, 0x1}, {0x2}, {0x0, 0x1b}, {0x4, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x6, 0x4}, {0x3, 0x4}, {0x3, 0x8}, {0x2, 0x8}, {0x2, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x3}, {0x6, 0x9}, {}, {0x1, 0x4}, {0x1, 0x5}, {0x6}, {0x1, 0x4}, {0x7, 0x7}, {0x7, 0x4}, {0x7, 0x4}, {0x1}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x4, 0x3}, {0x7, 0x6}, {0x2, 0x2}, {0x2}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {}, {0x4, 0x3}, {0x7}, {0x3, 0x8}, {0x2, 0xa}, {0x5, 0x1}, {0x5, 0x2}, {0x6, 0xa}, {0x0, 0x8}, {0x5, 0x3}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x9}, {0x4, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x2, 0x3}, {0x3, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaa}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x22}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x57}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x8c0}, 0xc0) keyctl$chown(0x4, r3, 0xee00, 0xee01) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES64=r0, @ANYBLOB="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"], 0x68}}, 0x48081) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') 07:25:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:07 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000140)={0xfeffff7f}) 07:25:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:07 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0189436, &(0x7f0000000140)={0xfeffff7f}) 07:25:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 106.354608][ T5641] FAULT_INJECTION: forcing a failure. [ 106.354608][ T5641] name failslab, interval 1, probability 0, space 0, times 0 [ 106.367254][ T5641] CPU: 0 PID: 5641 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 106.376026][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 106.386175][ T5641] Call Trace: [ 106.389498][ T5641] dump_stack_lvl+0xd6/0x122 [ 106.394102][ T5641] dump_stack+0x11/0x1b [ 106.398261][ T5641] should_fail+0x23c/0x250 07:25:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 106.402757][ T5641] __should_failslab+0x81/0x90 [ 106.407526][ T5641] should_failslab+0x5/0x20 [ 106.412096][ T5641] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 106.417897][ T5641] ? __kmalloc_node+0x30/0x40 [ 106.422584][ T5641] __kmalloc_node+0x30/0x40 [ 106.427106][ T5641] kvmalloc_node+0x81/0x110 [ 106.431717][ T5641] seq_read_iter+0x145/0x930 [ 106.436325][ T5641] ? mod_objcg_state+0x3ff/0x650 [ 106.441271][ T5641] proc_reg_read_iter+0xfc/0x170 [ 106.446293][ T5641] generic_file_splice_read+0x24f/0x330 07:25:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 106.451909][ T5641] ? splice_shrink_spd+0x60/0x60 [ 106.456960][ T5641] splice_direct_to_actor+0x2aa/0x650 [ 106.462328][ T5641] ? do_splice_direct+0x190/0x190 [ 106.467445][ T5641] do_splice_direct+0x106/0x190 [ 106.472298][ T5641] do_sendfile+0x63e/0xbb0 [ 106.476779][ T5641] __x64_sys_sendfile64+0x102/0x140 [ 106.482083][ T5641] do_syscall_64+0x44/0xa0 [ 106.486511][ T5641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 106.492423][ T5641] RIP: 0033:0x7f6acfff5a39 [ 106.496865][ T5641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 106.516482][ T5641] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 106.524896][ T5641] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 106.532871][ T5641] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 106.540842][ T5641] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 106.548824][ T5641] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 106.556798][ T5641] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:08 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 4) 07:25:08 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc020660b, &(0x7f0000000140)={0xfeffff7f}) 07:25:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 07:25:08 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') setxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x503, 0x1}]}, 0xc, 0x3) 07:25:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, 0x0, 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:08 executing program 1: modify_ldt$write2(0x11, &(0x7f0000000240)={0x9, 0x20000800, 0x1000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) chdir(&(0x7f0000000200)='./file0\x00') link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', &(0x7f0000000100)=""/254, 0xfe) mount$9p_xen(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x10840, &(0x7f0000000340)={'trans=xen,', {[{@access_user}, {@msize={'msize', 0x3d, 0x5}}, {@access_client}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x8001}}]}}) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0)=@v3={0x3000000, [{0x2, 0x8000}, {0x8, 0x7}], r0}, 0x18, 0x0) 07:25:08 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc020662a, &(0x7f0000000140)={0xfeffff7f}) 07:25:08 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc028660f, &(0x7f0000000140)={0xfeffff7f}) 07:25:08 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x5, 0x2}]}) r1 = openat(0xffffffffffffffff, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100001ef, 0xd9f, 0x0) r2 = syz_io_uring_complete(0x0) preadv(r2, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000200)=""/119, 0x77}, {&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000300)=""/112, 0x70}], 0x5, 0x5, 0x6a6) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x20, 0x1, 0x8, 0x0, 0x10}}) 07:25:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, 0x0, 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 107.221651][ T5681] FAULT_INJECTION: forcing a failure. [ 107.221651][ T5681] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 107.234943][ T5681] CPU: 0 PID: 5681 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 107.243702][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.253756][ T5681] Call Trace: [ 107.257077][ T5681] dump_stack_lvl+0xd6/0x122 [ 107.261681][ T5681] dump_stack+0x11/0x1b [ 107.265913][ T5681] should_fail+0x23c/0x250 07:25:08 executing program 1: link(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f0000000000)='./cgroup/cgroup.procs\x00') [ 107.270339][ T5681] __alloc_pages+0x102/0x320 [ 107.275010][ T5681] alloc_pages+0x382/0x3d0 [ 107.279497][ T5681] push_pipe+0x267/0x370 [ 107.283856][ T5681] _copy_to_iter+0x315/0xbe0 [ 107.288453][ T5681] ? __virt_addr_valid+0x15a/0x1a0 [ 107.293573][ T5681] seq_read_iter+0x7f2/0x930 [ 107.298244][ T5681] proc_reg_read_iter+0xfc/0x170 [ 107.303187][ T5681] generic_file_splice_read+0x24f/0x330 [ 107.309084][ T5681] ? splice_shrink_spd+0x60/0x60 [ 107.314051][ T5681] splice_direct_to_actor+0x2aa/0x650 [ 107.319409][ T5681] ? do_splice_direct+0x190/0x190 [ 107.324411][ T5681] do_splice_direct+0x106/0x190 [ 107.329253][ T5681] do_sendfile+0x63e/0xbb0 [ 107.333685][ T5681] __x64_sys_sendfile64+0x102/0x140 [ 107.338869][ T5681] do_syscall_64+0x44/0xa0 [ 107.343365][ T5681] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 107.349359][ T5681] RIP: 0033:0x7f6acfff5a39 [ 107.353758][ T5681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 107.373484][ T5681] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 107.381875][ T5681] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 107.389976][ T5681] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 107.397952][ T5681] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 107.406170][ T5681] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 107.414121][ T5681] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:09 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 5) 07:25:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:09 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0286687, &(0x7f0000000140)={0xfeffff7f}) 07:25:09 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./cgroup/cgroup.procs\x00') unlink(&(0x7f0000000040)='./cgroup/cgroup.procs\x00') creat(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0xc5) open$dir(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x200001, 0x10) 07:25:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, 0x0, 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) [ 107.991649][ C1] scsi_io_completion_action: 21 callbacks suppressed [ 107.991674][ C1] sd 0:0:1:0: tag#7781 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 108.008305][ C1] sd 0:0:1:0: tag#7781 CDB: opcode=0xe5 (vendor) [ 108.014658][ C1] sd 0:0:1:0: tag#7781 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 108.022866][ C0] sd 0:0:1:0: tag#7783 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 07:25:09 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0406618, &(0x7f0000000140)={0xfeffff7f}) 07:25:09 executing program 1: link(&(0x7f0000000000)='\x00', &(0x7f0000000080)='./file0\x00') lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000100)=""/9, 0x9) 07:25:09 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0406619, &(0x7f0000000140)={0xfeffff7f}) 07:25:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:09 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0), &(0x7f0000000100)="7017eddb255b95157135c6ae90d65e96f6a35ab239f92f61746f2b9de3db5b60d927d515c36b47ac3edfdbc903d7a5d46136a14091c7a1a821f0679e725da5f73cb9cf37cca521fe4b9e3cd7355d807c", 0x50, 0x0) [ 108.023689][ C1] sd 0:0:1:0: tag#7781 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 108.033486][ C0] sd 0:0:1:0: tag#7783 CDB: opcode=0xe5 (vendor) [ 108.042486][ C1] sd 0:0:1:0: tag#7781 CDB[20]: ba [ 108.048795][ C0] sd 0:0:1:0: tag#7783 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 108.062941][ C0] sd 0:0:1:0: tag#7783 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 108.071990][ C0] sd 0:0:1:0: tag#7783 CDB[20]: ba 07:25:09 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0506617, &(0x7f0000000140)={0xfeffff7f}) [ 108.172081][ C1] sd 0:0:1:0: tag#7806 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 108.181931][ C1] sd 0:0:1:0: tag#7806 CDB: opcode=0xe5 (vendor) [ 108.188291][ C1] sd 0:0:1:0: tag#7806 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 108.197412][ C1] sd 0:0:1:0: tag#7806 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 108.206434][ C1] sd 0:0:1:0: tag#7806 CDB[20]: ba [ 108.211620][ T5719] FAULT_INJECTION: forcing a failure. [ 108.211620][ T5719] name failslab, interval 1, probability 0, space 0, times 0 [ 108.224271][ T5719] CPU: 0 PID: 5719 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 108.232931][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 108.242980][ T5719] Call Trace: [ 108.246267][ T5719] dump_stack_lvl+0xd6/0x122 [ 108.250945][ T5719] dump_stack+0x11/0x1b [ 108.255109][ T5719] should_fail+0x23c/0x250 [ 108.259511][ T5719] ? kmalloc_array+0x2d/0x40 [ 108.264135][ T5719] __should_failslab+0x81/0x90 [ 108.268881][ T5719] should_failslab+0x5/0x20 [ 108.273530][ T5719] __kmalloc+0x6f/0x350 [ 108.277674][ T5719] kmalloc_array+0x2d/0x40 [ 108.282083][ T5719] iter_file_splice_write+0xd5/0x790 [ 108.287508][ T5719] ? atime_needs_update+0x2ba/0x390 [ 108.292691][ T5719] ? touch_atime+0xe0/0x250 [ 108.297198][ T5719] ? generic_file_splice_read+0x2a9/0x330 [ 108.302994][ T5719] ? splice_from_pipe+0xd0/0xd0 [ 108.307821][ T5719] direct_splice_actor+0x80/0xa0 [ 108.312776][ T5719] splice_direct_to_actor+0x345/0x650 [ 108.318218][ T5719] ? do_splice_direct+0x190/0x190 [ 108.323226][ T5719] do_splice_direct+0x106/0x190 [ 108.328054][ T5719] do_sendfile+0x63e/0xbb0 [ 108.332462][ T5719] __x64_sys_sendfile64+0x102/0x140 [ 108.337751][ T5719] do_syscall_64+0x44/0xa0 [ 108.342198][ T5719] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 108.348271][ T5719] RIP: 0033:0x7f6acfff5a39 [ 108.352746][ T5719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 108.372332][ T5719] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 108.380789][ T5719] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 108.388748][ T5719] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 108.396707][ T5719] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 108.404743][ T5719] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 108.412696][ T5719] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:10 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 6) 07:25:10 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000040)='./file0/file0\x00') 07:25:10 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc080661a, &(0x7f0000000140)={0xfeffff7f}) 07:25:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 07:25:10 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x90400, 0xb7) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'osx.', '\x00'}) [ 108.941616][ C0] sd 0:0:1:0: tag#7767 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 108.951550][ C0] sd 0:0:1:0: tag#7767 CDB: opcode=0xe5 (vendor) [ 108.957900][ C0] sd 0:0:1:0: tag#7767 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 108.966937][ C0] sd 0:0:1:0: tag#7767 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 108.975978][ C0] sd 0:0:1:0: tag#7767 CDB[20]: ba [ 108.981372][ C1] sd 0:0:1:0: tag#7768 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 07:25:10 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000140)={0xfeffff7f}) 07:25:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:10 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x2}) [ 108.991237][ C1] sd 0:0:1:0: tag#7768 CDB: opcode=0xe5 (vendor) [ 108.997590][ C1] sd 0:0:1:0: tag#7768 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 109.006625][ C1] sd 0:0:1:0: tag#7768 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 109.015662][ C1] sd 0:0:1:0: tag#7768 CDB[20]: ba 07:25:10 executing program 1: link(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./cgroup/cgroup.procs\x00') unlink(&(0x7f0000000000)='./cgroup/cgroup.procs\x00') [ 109.044315][ T5741] FAULT_INJECTION: forcing a failure. [ 109.044315][ T5741] name failslab, interval 1, probability 0, space 0, times 0 [ 109.057005][ T5741] CPU: 1 PID: 5741 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 109.058029][ T5743] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2 (only 8 groups) [ 109.065673][ T5741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.065688][ T5741] Call Trace: [ 109.065695][ T5741] dump_stack_lvl+0xd6/0x122 [ 109.065719][ T5741] dump_stack+0x11/0x1b [ 109.065734][ T5741] should_fail+0x23c/0x250 [ 109.065749][ T5741] ? jbd2__journal_start+0xf7/0x3b0 [ 109.065772][ T5741] __should_failslab+0x81/0x90 [ 109.112492][ T5741] should_failslab+0x5/0x20 [ 109.116981][ T5741] kmem_cache_alloc+0x4f/0x300 [ 109.121736][ T5741] jbd2__journal_start+0xf7/0x3b0 [ 109.126836][ T5741] __ext4_journal_start_sb+0x159/0x2d0 [ 109.132315][ T5741] ? ext4_expand_extra_isize+0x560/0x560 [ 109.137934][ T5741] ext4_dirty_inode+0x58/0xa0 [ 109.142666][ T5741] __mark_inode_dirty+0x77/0x6a0 [ 109.144788][ C0] sd 0:0:1:0: tag#7774 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 109.147589][ T5741] ? current_time+0xed/0x1a0 [ 109.147609][ T5741] file_update_time+0x3b5/0x3f0 [ 109.147625][ T5741] file_modified+0x62/0x80 [ 109.147639][ T5741] ext4_buffered_write_iter+0x1f9/0x400 [ 109.157459][ C0] sd 0:0:1:0: tag#7774 CDB: opcode=0xe5 (vendor) [ 109.161994][ T5741] ext4_file_write_iter+0x2e7/0x11f0 [ 109.166839][ C0] sd 0:0:1:0: tag#7774 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 109.171203][ T5741] ? __alloc_pages+0x194/0x320 [ 109.176758][ C0] sd 0:0:1:0: tag#7774 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 109.183034][ T5741] ? alloc_pages+0x382/0x3d0 [ 109.188309][ C0] sd 0:0:1:0: tag#7774 CDB[20]: ba [ 109.220780][ T5741] do_iter_readv_writev+0x2de/0x380 [ 109.226016][ T5741] do_iter_write+0x192/0x5c0 [ 109.230590][ T5741] ? splice_from_pipe_next+0x34f/0x3b0 [ 109.236028][ T5741] ? kmalloc_array+0x2d/0x40 [ 109.240672][ T5741] vfs_iter_write+0x4c/0x70 [ 109.245177][ T5741] iter_file_splice_write+0x43a/0x790 [ 109.250550][ T5741] ? splice_from_pipe+0xd0/0xd0 [ 109.255412][ T5741] direct_splice_actor+0x80/0xa0 [ 109.260331][ T5741] splice_direct_to_actor+0x345/0x650 [ 109.265771][ T5741] ? do_splice_direct+0x190/0x190 [ 109.270775][ T5741] do_splice_direct+0x106/0x190 [ 109.275633][ T5741] do_sendfile+0x63e/0xbb0 [ 109.280030][ T5741] __x64_sys_sendfile64+0x102/0x140 [ 109.285247][ T5741] do_syscall_64+0x44/0xa0 [ 109.289644][ T5741] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 109.295556][ T5741] RIP: 0033:0x7f6acfff5a39 [ 109.300059][ T5741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 109.319668][ T5741] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 109.328093][ T5741] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 109.336054][ T5741] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 07:25:10 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x42800, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000100)={0x7, 'vlan0\x00', {0x81}, 0x1}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000180)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}}}, &(0x7f00000002c0)=0xe8) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x0, @can={0x1d, r1}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x1}}, @nl=@kern={0x10, 0x0, 0x0, 0x41072060}, 0x1, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)='ipvlan1\x00', 0x2, 0x2, 0x20}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1b, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) io_uring_enter(r0, 0x5182, 0x64a4, 0x2, &(0x7f0000000140)={[0x80]}, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r4 = accept$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl0\x00', r2, 0x29, 0x0, 0x4, 0xf7, 0xc, @empty, @mcast1, 0x701, 0x80, 0x0, 0x1}}) sendto$packet(r3, &(0x7f0000000980)="61119e547d3cbcd5c9988ee48bc5ebecff3a42e17923571cbc20223f856170ab54a304", 0x23, 0x8800, &(0x7f0000000a80)={0x11, 0x18, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @empty}, 0x0, 0x3}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)="98ea4d0c7b15a23324505f7aefd6861221e91f56de217241fe4494148963283bf59c5da4dff48e9d61208b35901c0c6bedb9896f705c3dff1ec4b29a426ad5c4f03f2f5b727e72a98be196c8b2e7abac4c998c79dd6681d33609067f467b09454bd8aee1f1e8d56a55fcc488", 0x6c}, {&(0x7f0000000580)="f3f5932cbd977e36ea5a63994c098432cc6e89cf4812b04c3da22354f398f37d0d23c37acfd1b00816d85b37cbac1ac7eb45f61633dbc6a8d1265b58ae91cfdf81ee84f165e1de0ed934", 0x4a}, {&(0x7f0000000600)="52e5ef6d24a1297d0b598d3d7bd93ffa9b9bb22b261ae4fc302c847aae3b1d636f5c2093fb7ce002c17c4fa62f2eeba69567ce9f37f1d278df65bfcd081e3e520075f14707289b4af4336af0a04117408ec608c44aa177dc39739b3ce5029f290dc9b32aba6f", 0x66}], 0x3, &(0x7f00000006c0)=[{0xe8, 0x6, 0xffffffff, "5702fea180f2e5eaf22bd38a0e34de8d0a2fbd6ad88f21e5efe60bb16f67a3edff0c50fe3f977298eee391286a737f5a6db1ff5b48062f71a738b76f8841452e7f8b058bb2ed951b64b8cbd1272a573e8628bff6bff6273abf04c39006d3c9dad894af485e973697b00604d19f1e184ffe640a1b476695e93065b390f1d28de0853a54d54a81e58667972c572f6dbe9d969390125666d0cc7dd805435c825d8cdaf51fb513f911b85b709c6ba09f66bd1ba5562ea00873f72516d346d57dba00f2d56f3593106a6de0446b71278f9987fc3ce800e2"}, {0x18, 0x104, 0x6000000, "e43c37"}, {0xe8, 0x1, 0x9, "5b988e03ea624008f53733227dff617771189856b15f83d2a612168fd0619811b374e5889ead84a8203732df5513daa054764b065c0debf8bf0ec252f8abacdcff8d3b0b8765a072bcc3f868d367af7c94687ac39020ce89047305bbc21a97c337e18c236af91a504fb6a69948e8de921810c8f6981b33be14ecec5a462e66cac3080a34062eba0723182e79b9ec7d4b6ab1db7741709c1a9d9ef0b0ab2f9a361d668e662b3daab4d7e24befbeb1a2236351ca532b0f4940c03465c9e28a7528f0e75c2307d001519c350c4e0990e8aec2"}, {0x40, 0x1, 0x8, "f0c2ed0ec1c2b01625b135de6437c5c58fd53b51a87e1e79621ec60ebb0c40235d7c5fa3e4357a4080ef96c46fc5"}, {0x48, 0x3a, 0x10000, "16e7bab731549791d91ff473edf89a182eae2a01d5febd25382f3848a4465e68046d52b13f7684e0cb0521a77d1195fa8f77db99"}], 0x270}, 0x8005) chdir(0x0) [ 109.344067][ T5741] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 109.352076][ T5741] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 109.360059][ T5741] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:11 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 7) 07:25:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:11 executing program 1: link(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') 07:25:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, 0x0, 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:11 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x3}) 07:25:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:11 executing program 1: link(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='./cgroup/cgroup.procs\x00') [ 109.775418][ T5756] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 3 (only 8 groups) [ 109.815244][ C0] sd 0:0:1:0: tag#7807 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 109.815493][ C1] sd 0:0:1:0: tag#7744 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 109.825648][ C0] sd 0:0:1:0: tag#7807 CDB: opcode=0xe5 (vendor) [ 109.835442][ C1] sd 0:0:1:0: tag#7744 CDB: opcode=0xe5 (vendor) [ 109.841768][ C0] sd 0:0:1:0: tag#7807 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 109.848063][ C1] sd 0:0:1:0: tag#7744 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 109.857074][ C0] sd 0:0:1:0: tag#7807 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 07:25:11 executing program 1: link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 07:25:11 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x5}) 07:25:11 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x14080, 0x8d) [ 109.866077][ C1] sd 0:0:1:0: tag#7744 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 109.866093][ C1] sd 0:0:1:0: tag#7744 CDB[20]: ba [ 109.889258][ C0] sd 0:0:1:0: tag#7807 CDB[20]: ba [ 109.910096][ T5773] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 5 (only 8 groups) [ 109.923484][ C1] sd 0:0:1:0: tag#7746 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 109.933326][ C1] sd 0:0:1:0: tag#7746 CDB: opcode=0xe5 (vendor) [ 109.939665][ C1] sd 0:0:1:0: tag#7746 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 109.948691][ C1] sd 0:0:1:0: tag#7746 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 109.957732][ C1] sd 0:0:1:0: tag#7746 CDB[20]: ba [ 109.969137][ T5774] FAULT_INJECTION: forcing a failure. 07:25:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:11 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x7}) [ 109.969137][ T5774] name failslab, interval 1, probability 0, space 0, times 0 [ 109.981833][ T5774] CPU: 0 PID: 5774 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 109.990569][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.000642][ T5774] Call Trace: [ 110.003937][ T5774] dump_stack_lvl+0xd6/0x122 [ 110.008520][ T5774] dump_stack+0x11/0x1b [ 110.012682][ T5774] should_fail+0x23c/0x250 [ 110.017150][ T5774] ? jbd2_journal_add_journal_head+0x6c/0x310 [ 110.023214][ T5774] __should_failslab+0x81/0x90 [ 110.027985][ T5774] should_failslab+0x5/0x20 [ 110.032547][ T5774] kmem_cache_alloc+0x4f/0x300 [ 110.037362][ T5774] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 110.043153][ T5774] ? __list_del_entry_valid+0x54/0xc0 [ 110.048517][ T5774] jbd2_journal_add_journal_head+0x6c/0x310 [ 110.054412][ T5774] jbd2_journal_get_write_access+0x14d/0x1b0 [ 110.060425][ T5774] __ext4_journal_get_write_access+0x1c2/0x490 [ 110.066582][ T5774] ext4_reserve_inode_write+0x176/0x220 [ 110.072165][ T5774] ? ext4_dirty_inode+0x86/0xa0 [ 110.077072][ T5774] __ext4_mark_inode_dirty+0x85/0x5c0 [ 110.082454][ T5774] ? jbd2__journal_start+0x28f/0x3b0 [ 110.087727][ T5774] ? ext4_expand_extra_isize+0x560/0x560 [ 110.093359][ T5774] ext4_dirty_inode+0x86/0xa0 [ 110.098071][ T5774] __mark_inode_dirty+0x77/0x6a0 [ 110.102991][ T5774] ? current_time+0xed/0x1a0 [ 110.107568][ T5774] file_update_time+0x3b5/0x3f0 [ 110.112396][ T5774] file_modified+0x62/0x80 [ 110.116832][ T5774] ext4_buffered_write_iter+0x1f9/0x400 [ 110.122370][ T5774] ext4_file_write_iter+0x2e7/0x11f0 [ 110.127641][ T5774] ? __alloc_pages+0x194/0x320 [ 110.132445][ T5774] ? alloc_pages+0x382/0x3d0 [ 110.137104][ T5774] do_iter_readv_writev+0x2de/0x380 [ 110.142295][ T5774] do_iter_write+0x192/0x5c0 [ 110.146874][ T5774] ? splice_from_pipe_next+0x34f/0x3b0 [ 110.152311][ T5774] ? kmalloc_array+0x2d/0x40 [ 110.156936][ T5774] vfs_iter_write+0x4c/0x70 [ 110.161420][ T5774] iter_file_splice_write+0x43a/0x790 [ 110.166855][ T5774] ? splice_from_pipe+0xd0/0xd0 [ 110.171682][ T5774] direct_splice_actor+0x80/0xa0 [ 110.176668][ T5774] splice_direct_to_actor+0x345/0x650 [ 110.182042][ T5774] ? do_splice_direct+0x190/0x190 [ 110.187077][ T5774] do_splice_direct+0x106/0x190 [ 110.191906][ T5774] do_sendfile+0x63e/0xbb0 [ 110.196304][ T5774] __x64_sys_sendfile64+0x102/0x140 [ 110.201581][ T5774] do_syscall_64+0x44/0xa0 [ 110.206037][ T5774] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 110.211993][ T5774] RIP: 0033:0x7f6acfff5a39 [ 110.216385][ T5774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 110.235979][ T5774] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 110.244451][ T5774] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 110.252411][ T5774] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 110.260648][ T5774] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 110.268706][ T5774] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 110.276654][ T5774] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 [ 110.284699][ T5774] ENOMEM in journal_alloc_journal_head, retrying. [ 110.319399][ C1] sd 0:0:1:0: tag#7798 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 110.323020][ T5780] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 7 (only 8 groups) [ 110.329250][ C1] sd 0:0:1:0: tag#7798 CDB: opcode=0xe5 (vendor) [ 110.329268][ C1] sd 0:0:1:0: tag#7798 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 110.355112][ C1] sd 0:0:1:0: tag#7798 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 110.364142][ C1] sd 0:0:1:0: tag#7798 CDB[20]: ba 07:25:11 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 8) 07:25:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:11 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x130, r1, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3b}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf8}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x63}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffff}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd0, 0x3, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xaa, 0x2, "751484cd964e552f17e42feef12026a40bb895181a36c15c4f15377727fddbd9b069962354d21cf3e485586574e420c03f05be42fcfd2c8d0d815e6abbe7c5ba82c8a2d4569b2df2953fe3b5a6eb7162edaeda14339553216fc231dcafc8bc5fd3dc73c7a2b8aca6838fda55a234d3c33c0d2dcad159dc44ba7b1af83666938f8bd73e99b4f1bd8e6fef32d7003fea676bc402e7bc1e57e831b4961846a74576b863d6982d8b"}}, {0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x9, 0x2, "6e5b66b1da"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000000}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x4008010) sendmsg(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="d89149782c771a35323da723b0734b4987a44ab3384076b9c2d47238ddded50516164a1af116b3131a3db34377c322f03244d00863b79918064636a266613f02b134cf7e77392bf781ea2a2babc6f594191552ba7653e47ba36456abcd4759af01c2a6e1f0a743525cd39fcb1065bf9b36da68c608edefb0765d86e77480f1e59e08c9eda44710457ee8132b000da64664017faa21f02a6c7fa28c8c36bb50c1528e998552b606496d0557c1cb86b31aec84ecaa241a60875bfbdd4d51b31856ede3ba8d62d694381370cddffa78f45a391c618c3c83a4488c44c6", 0xdb}, {&(0x7f0000000240)="8d2c8ba8d97c67ab6ec3cb9f4bc08dd665adcd3b0c77783007975419995ce5a83592022327763d143c311c0e8485a2e0dad5d236618f98704cda3d0ae28bc90274dfe38abf5b6993934d7984610585d136a93908519d9fa24c7a216b9e80198bf922dfa098493759b287d047a4d51e22cef5025c187602f58abd88d45d66acbfd58cf0999753f6278613a64163d12f", 0x8f}, {&(0x7f0000000300)="b3ffbbc3a8aaf334c0a139f39b1fa024a5bac722090e4edc6c574ec1723a9d45d2dabdbc2cbcb617f1973de088e34c5cd24e50b75b37189518cdaa0615e18b507a2dc9225ffb79791c791c1b4ff40a6407dbcf72ca803386e66d51ed09bf41cf6b6d75c8f4ba41194eb53e48374e5d9069b5530f6f7a16180a31c04e36474733835606b824255fd9336455f3b5738602d0a23fe1078257d9d9b4a8a03158db67dacdf91fc9a0352cc39a20c09e90e3ac82e8cebea722261babcc0ce6814b1c7cfa6cf45322c4b7d07b", 0xc9}], 0x3, &(0x7f0000000400)=[{0xc0, 0x11, 0x800, "2960705677c6c636da2fe4e773b9118d1bafa9af404afea7864bd444ed1c2abdfa2ff80ed9f7085d303b4dcf946de048e8187941af05a171e0fe1aacda5cbe0d7173e4b1b6be10d26875c32ad9a3275522a2fab522b23d4f7aa25835f657b338021cc2e9a77d7865712408c60a3fb3bbf96f79774e6f908c13210fb9c9a34dd54dbb452c810e8f403f70a1d75fb930a9e36c54c56efaa4e0d7355a190f05ffbf0162e13e55de94c292e860750099e6"}, {0x80, 0x10a, 0x2, "ccde8a252079698e7286bd4c63fb680ab3d5b701f95449aec94b945a5bf65ed8489c91791b3993eb1dc9e3740b424c6ab35f7208be760e78a725d4e95bfe91878270c6cd541cd186f8ee118dbc8cdbcd37c9c2bc55fead58c85a01a622fcafeb2d9b9f354c8f1a20d0dde7db6db43a"}], 0x140}, 0x80) 07:25:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, 0x0, 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:11 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x8}) 07:25:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:12 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) r2 = getegid() r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x3ff, 0x7fffffff, 0xef}) r5 = epoll_create(0x3) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r7 = socket$inet6(0xa, 0x80000, 0x5) r8 = syz_open_dev$sg(&(0x7f0000000300), 0x7, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000140)="d3296eddddeb426921eba3d74409dda3bdf2478b272784a4c50c06ef2d8fd114d8d15d75ec12055d75f04f91db6c5415f77989de192e8ffd59b63d3291f37d6cee200ba217cac60e580519d986fb39f12b49450de534eb56155a14e891eefd", 0x5f}, {&(0x7f00000001c0)="5ded6ab6375ca460c7efaf17ce9b79794041d79966c79091862db7e8cffa8db5153d913a4a85d5f0a64238434b039d69fc33e8ac5c5d3788c57f791a4bbc6aa0c2fb3f66181dca41bec579e5e19fc3b4e6dc9206d383a6761567ee8b406fbc05ec25c77fa93d9ec12a3b033a352727a5859074b1d65d90934bde5fcae7eb01445a76597416814b679c68", 0x8a}], 0x2, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, r2}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r4]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, r8]}}], 0x98, 0x40010010}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="a23d09c4638ef04c65a86327e1b38a8ea2c6ce3d75a5997c22d75748378c04dcef1ca996a18cbd3d7d24aef5a721e274013b0499cdcb22f7d11cd69d512872acf5a446bc3cc36898610585f9ca9abce856e482381d20c1e52667d511e12ee54324f454e550129e01829fd942b3f88593c050dd8284a6cffd4a2de8cae9e964c36c9dc63d83c4853d215faf50af6edf71c4ae2fa8b89bf6c0052b9c9b68271e53201cdd092369b3761b8f62ca5494fe1b0aabade1880c59b54747f52d", 0xbc}, {&(0x7f00000004c0)="e95a50a3fdd1760acc035a90e1b84f3a77ef6fa08e8dc02f92857114d90f2f0150ad23cb62e545942a971d89668b6e3aecbf2f54a0952f8538a972f5d434007950ec0aa3cda27fcdcd4d6efc8f44ba4d2501deda23c1b820b1df18082c2fcbcbf745083805bfc93f493d1b43e40c7ca6f6175ed94c223f48edf905266fa6361aba65ef306b02f0c77049c3d0", 0x8c}, {&(0x7f0000000580)="8d353b585b86d837c4c785e5f6d13750a692758bba056ed500cf3ef2772a6ea5736785fe6c81baa1faf0f1f9cd30b3971cbd4bec45b0f3458f3ed2c00d03dedf0aeeb96306ee2d8a469b9ad0ce5ee9635fb57b159904d2ea4333b3b65d70d9c1090d4bff8e3a72a2da1ecab13305e3ce1a48a2ff83ee184c9ba6a5c679e1ed25b8cc22081e982c4657bcd952e641500545e6a932bc978d388fd5330b494937a3ae4100042d7cc36f017826f40764fe53a2b019c09e1ed6ea21c7bde7e8e49bca78b90a7e", 0xc4}, {&(0x7f0000000680)="66ffd45690e22f1b2a42ac4911734680436cb8cb65cd925bc430c9b6e3083ac36f2749d732f2c27dcd84aab9df7e6f95e9505c0fa32b452890fc8753a57dc464ee922512f4ef6ec516813072441cbf15c8842a70e90dd885c1de485944c92faa085222a6953aafb6738262842e940d0d77df77149fee7452950b1ef85085137c163c615aa95d5e2c518c0093001f42b19522a8a120ca98f8a54bb699fe4eb62494d06a9b88c83f9ebe052d01a0e5de4d10a35dbea3f3e7fe6862db", 0xbb}, {&(0x7f0000000740)="0795e84ae6d48d9163cb51e9246ae945a15db283791b89a395b02f760995d9db753283f89501cfa7b17056f6ce5ddd0d51e577e61d0788bf5bf9fc6eac5cc7a1262a2fa0680fb214ac9f28b4d309ad7b0ad4c533022ee7719b7e55a1321ceaa00106b0d5f12adf3fddc25d15deec8146ed80579abe6660997d30b8ba43d90e7f14", 0x81}, {&(0x7f0000000800)="f9ce05785f45a1e1e992f7731f4331bce0930e843329123c820e4d68de78367a63", 0x21}, {&(0x7f0000000840)="3da350b92351914988f8ea528f3eea79462c5c6999", 0x15}, {&(0x7f0000000880)="b64d5665d87d3b0f95aa6c50700d28bb8803438686242b141823ba86c758ef86f87a765da88d97f201e89e38c0415303bc8c25630f5c13b336e411258a2b6e219f7f470095568bd3a67e1a25adc8de30754c25261da6e2916f42d63fa38770d7722ca34d1e49eae78df80fe5f21f2edeae6076b7ab4b5f408072", 0x7a}], 0x8, 0x0, 0x0, 0x4000044}}, {{&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000a00)="db2846a8512b820c551429c2a1c33c4b64d9812d39968509fd73297781709e15e21afd0a5d82cfc0b36ec598d1d368d404782c56ffc0e2dee0b6e9132abe5beb67cb552e8642061270763d9f5d6bbf86948294e921e4ef46c9110c7101d4196f0759cc0cf81f3329c231acf714b00723793fcd109f9db2747ca8803725a7f4a4168bec1f779669987a1499d92fa4eaf90c75ae9cc1fea1ce919a6f77c3c7e791040a83aec5de480aa497c369aa6674a9b9c07c2f165ebe15344400253c89381efd4df2ac8b898681c60440bdc0cfd6d3a3a7b389084e", 0xd6}, {&(0x7f0000000b00)="1382df3344c67ef16de5034230e05234149ede3e78a865e3b3c96591971d5454c1228c0b8defdd912ee64ba2bdacabd3c0ec5e53bc7c5fc021caa45ad4a5", 0x3e}, {&(0x7f0000000b40)="aad9f118cdd124404fb3b0322c86d9a4249acd773ffcf3f06be382449fd74873cabe944080c49ba69e56859f29f291f563883cde916599e3d529f4b94534fae212bcf5ff9ddc7034839a99f7d5192609efcece17b206f14e474d6492de9a8a5bafddafcff4e031f8536c2cc1978179f408c5d90690869b8aaa30513377fda6fe48c3ec6b27f946745426d23b62e447a6d713c87deb38234e937b99176e86f41eddefc6130035073476c9857c373b5043d9aa928dfa4646b8d6f5f0110fabacda1c637747962fc22aa02e0066f7d98631156b7d6b0507d2f42a7128a53f3d66e74a82f06402d4d3045249ad922c73e02868a1a7313ab7bcc2a3", 0xf9}, {&(0x7f0000000c40)="da528d64302f34935f03d09794f648a7f3ee887c86a3e9d70aec0003eeaf2968de78e51924971430ba0ee70c705ea318f56d13d616f4d2d9512ca45160121c5ce5597b24f735e031b56d8de08b265576c69b4924a4b380314a02b5f161bc311e00d28d4f80703f6c2c9520ef59a5cf3452910850f380b018a3f9585d4e532d0f9f77386208328334f1f851f1b931725746e773e49ea62eacf1bb7bda5d750bc2822cf55318d9e7e2edf392f05a8c9bcd4130b8a016f2a0cd377974d545166638f0b3e3d17bff528632", 0xc9}, {&(0x7f0000000d40)="d84d8c59aa8ac046b44b076240a2a570c6612da1348874f6a8d93364fd0a1255a3ef5070afe4d42951f4e8640ebb944f3469a8", 0x33}], 0x5, &(0x7f0000000e00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r9, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x800}}], 0x3, 0x4008880) 07:25:12 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x9}) [ 110.655626][ T5788] EXT4-fs warning (device sda1): verify_group_input:161: Bad blocks count 0 07:25:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 110.728251][ T5800] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 110.764834][ T5801] FAULT_INJECTION: forcing a failure. [ 110.764834][ T5801] name failslab, interval 1, probability 0, space 0, times 0 [ 110.777470][ T5801] CPU: 1 PID: 5801 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 110.786159][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.796285][ T5801] Call Trace: [ 110.799655][ T5801] dump_stack_lvl+0xd6/0x122 [ 110.804229][ T5801] dump_stack+0x11/0x1b [ 110.808383][ T5801] should_fail+0x23c/0x250 [ 110.812804][ T5801] ? kcalloc+0x32/0x50 [ 110.816858][ T5801] __should_failslab+0x81/0x90 [ 110.821686][ T5801] should_failslab+0x5/0x20 [ 110.826173][ T5801] __kmalloc+0x6f/0x350 [ 110.830483][ T5801] kcalloc+0x32/0x50 [ 110.834411][ T5801] ext4_find_extent+0x21c/0x7f0 [ 110.839323][ T5801] ? mark_page_accessed+0x1e3/0x550 [ 110.844530][ T5801] ? __list_del_entry_valid+0x54/0xc0 [ 110.849909][ T5801] ext4_ext_map_blocks+0x115/0x1ff0 [ 110.855202][ T5801] ? memcg_slab_post_alloc_hook+0x17d/0x1f0 [ 110.861141][ T5801] ? ext4_es_lookup_extent+0x206/0x490 [ 110.866644][ T5801] ext4_da_get_block_prep+0x3b4/0x970 [ 110.872048][ T5801] __block_write_begin_int+0x4c5/0x1080 [ 110.877600][ T5801] ? ext4_da_release_space+0x230/0x230 [ 110.883050][ T5801] ? ext4_da_release_space+0x230/0x230 [ 110.888538][ T5801] __block_write_begin+0x2b/0x40 [ 110.888582][ T5801] ext4_da_write_begin+0x34e/0x570 [ 110.888604][ T5801] generic_perform_write+0x1b8/0x3e0 [ 110.888631][ T5801] ext4_buffered_write_iter+0x305/0x400 [ 110.909788][ T5801] ext4_file_write_iter+0x2e7/0x11f0 [ 110.915162][ T5801] ? __alloc_pages+0x194/0x320 [ 110.919928][ T5801] ? alloc_pages+0x382/0x3d0 [ 110.924610][ T5801] do_iter_readv_writev+0x2de/0x380 [ 110.929910][ T5801] do_iter_write+0x192/0x5c0 07:25:12 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x19}) 07:25:12 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x80000001, 0x5, &(0x7f0000000440)=[{&(0x7f0000000100)="6440b6d2f8e2c682bb0e467b8259579d1c9e83768350d8dedd5fe92ae2808fdd49b2c685732310e5baff25aa613bca2ee11c69029dff590865a131f7b8d54d59efe239a9ff7881a42967c68d555673ca4787495c9f5cbf245520fa19a7f6182b8803be5bb91891307a83af24bd409ea17e585290c3cda0f85326f488c10292aa1d075013ea80a04df32f67ce2ad64ad169e95fa11c700b5542761e209b80e316802ce0e5f825fa14328130252e3c3f36e19b36df9562b4780b3899b9909ed1cd", 0xc0, 0x7}, {&(0x7f00000001c0)="554055ae7c7ed8f80cbf2fa9aa2dd5a35a4bdfe40d775568e44de902d7501d7b9af43def9792e0a808", 0x29, 0x1}, {&(0x7f0000000200)="4702582622445e6faaeb38b6cd52549ab069ab8322999f7c2b1615f3fca37e12a1367857c68e0611ef3d5c009544db6a13aff5c6c5e8a918271e3a2f8dedd0f9ab4f29ac42dbbc36ed2b2d8d8ccda6e3bb21cab79931c6e7892fd4456c97ba6998bc57c64c26db36c565c8e77745ac26e54dd481acaf8026f58e58f5d1ae0842364e300a3d36b47f8e771939002d54e6117e08ee26df41e8736c2410d392854db838826b7c7a61f2c42c2200258fdb21a7809c20acb500bc23f6b5f4e7ca71129bacb8c0034f89fc789efd5b1aec93fb883ee6b08d462abbbb1a4db5b4b3344e134af1f8af9d4bcbcbe1f605ccf359765e13", 0xf2, 0x81}, {&(0x7f0000000300)="fe1ddb16bddffc9e00b1b7133fff5a9065e011e95e8e07fa5311904f600d33cf3b878d140f60f5ca91eb37fc3451ccb8d3e0286d82038f642caaf928f2d7a4438073150a2075cb60360f781f1009e608824515aad731be9cc0ad54ff44e2fe26dd92b6472a383fb0208f7d6e864bc9e5a73e4f5d3d25a603d248a57e795264e83f6ac81d8a044437ff642c3e5e70a754dd69f5bfeefc35", 0x97, 0x8}, {&(0x7f00000003c0)="abe11bd6ff875c4bb3b0ffa6fc2c9ad856a5cd104c1329771fff0fc0d3ed2b394c757f9f824eff76c87ab5c7a2cd2b4526b510ae005ca28c1f5bdd7e44ed2a7bd0f08d1ee78d8c4faf326f7290d8d4d8c36b60a03454824242b2bf2286e81d34", 0x60, 0x6}], 0x80000, &(0x7f00000004c0)={[{@fat=@discard}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@debug}, {@fat=@fmask={'fmask', 0x3d, 0x8}}]}) open_tree(r0, &(0x7f0000000540)='./file0\x00', 0x181800) [ 110.934517][ T5801] ? splice_from_pipe_next+0x34f/0x3b0 [ 110.940025][ T5801] ? kmalloc_array+0x2d/0x40 [ 110.944621][ T5801] vfs_iter_write+0x4c/0x70 [ 110.949165][ T5801] iter_file_splice_write+0x43a/0x790 [ 110.949191][ T5801] ? splice_from_pipe+0xd0/0xd0 [ 110.949208][ T5801] direct_splice_actor+0x80/0xa0 [ 110.949223][ T5801] splice_direct_to_actor+0x345/0x650 [ 110.949245][ T5801] ? do_splice_direct+0x190/0x190 [ 110.949261][ T5801] do_splice_direct+0x106/0x190 [ 110.949277][ T5801] do_sendfile+0x63e/0xbb0 [ 110.970281][ T5816] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 110.974805][ T5801] __x64_sys_sendfile64+0x102/0x140 [ 110.974834][ T5801] do_syscall_64+0x44/0xa0 [ 111.004038][ T5801] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 111.009990][ T5801] RIP: 0033:0x7f6acfff5a39 [ 111.014389][ T5801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 111.033978][ T5801] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 111.042477][ T5801] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 111.050488][ T5801] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 111.058550][ T5801] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 111.066561][ T5801] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 111.074517][ T5801] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:12 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 9) 07:25:12 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x31}) 07:25:12 executing program 1: ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x3) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x3) 07:25:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:12 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) open_tree(r0, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x8102) 07:25:12 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x2}) [ 111.497831][ T5825] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) 07:25:12 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x3}) [ 111.551690][ T5839] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 111.613289][ T5843] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 111.639532][ T5845] FAULT_INJECTION: forcing a failure. [ 111.639532][ T5845] name failslab, interval 1, probability 0, space 0, times 0 [ 111.652269][ T5845] CPU: 0 PID: 5845 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 07:25:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5437, 0x0) (fail_nth: 1) [ 111.661076][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.671151][ T5845] Call Trace: [ 111.674610][ T5845] dump_stack_lvl+0xd6/0x122 [ 111.679317][ T5845] dump_stack+0x11/0x1b [ 111.683566][ T5845] should_fail+0x23c/0x250 [ 111.687984][ T5845] ? kcalloc+0x32/0x50 [ 111.692060][ T5845] __should_failslab+0x81/0x90 [ 111.696841][ T5845] should_failslab+0x5/0x20 [ 111.701337][ T5845] __kmalloc+0x6f/0x350 [ 111.705481][ T5845] kcalloc+0x32/0x50 [ 111.709472][ T5845] ext4_find_extent+0x21c/0x7f0 [ 111.714333][ T5845] ? get_mem_cgroup_from_objcg+0x8b/0xa0 [ 111.720050][ T5845] ext4_ext_map_blocks+0x115/0x1ff0 [ 111.725262][ T5845] ? memcg_slab_post_alloc_hook+0x17d/0x1f0 [ 111.731203][ T5845] ? ext4_es_lookup_extent+0x206/0x490 [ 111.736713][ T5845] ext4_da_get_block_prep+0x3b4/0x970 [ 111.742095][ T5845] __block_write_begin_int+0x4c5/0x1080 [ 111.747853][ T5845] ? ext4_da_release_space+0x230/0x230 [ 111.753505][ T5845] ? ext4_da_release_space+0x230/0x230 [ 111.758960][ T5845] __block_write_begin+0x2b/0x40 [ 111.764010][ T5845] ext4_da_write_begin+0x34e/0x570 [ 111.765507][ T5854] FAULT_INJECTION: forcing a failure. [ 111.765507][ T5854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.769122][ T5845] generic_perform_write+0x1b8/0x3e0 [ 111.769155][ T5845] ext4_buffered_write_iter+0x305/0x400 [ 111.793093][ T5845] ext4_file_write_iter+0x2e7/0x11f0 [ 111.798402][ T5845] ? __alloc_pages+0x194/0x320 [ 111.803197][ T5845] ? alloc_pages+0x382/0x3d0 [ 111.807773][ T5845] do_iter_readv_writev+0x2de/0x380 [ 111.812968][ T5845] do_iter_write+0x192/0x5c0 [ 111.817546][ T5845] ? splice_from_pipe_next+0x34f/0x3b0 [ 111.822987][ T5845] ? kmalloc_array+0x2d/0x40 [ 111.827564][ T5845] vfs_iter_write+0x4c/0x70 [ 111.832100][ T5845] iter_file_splice_write+0x43a/0x790 [ 111.837510][ T5845] ? splice_from_pipe+0xd0/0xd0 [ 111.842346][ T5845] direct_splice_actor+0x80/0xa0 [ 111.847267][ T5845] splice_direct_to_actor+0x345/0x650 [ 111.852622][ T5845] ? do_splice_direct+0x190/0x190 [ 111.857748][ T5845] do_splice_direct+0x106/0x190 [ 111.862583][ T5845] do_sendfile+0x63e/0xbb0 [ 111.867041][ T5845] __x64_sys_sendfile64+0x102/0x140 [ 111.872409][ T5845] do_syscall_64+0x44/0xa0 [ 111.876991][ T5845] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 111.883025][ T5845] RIP: 0033:0x7f6acfff5a39 [ 111.887432][ T5845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 111.907031][ T5845] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 111.915435][ T5845] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 111.923401][ T5845] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 111.931360][ T5845] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 111.939334][ T5845] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 111.947324][ T5845] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 [ 111.955287][ T5854] CPU: 1 PID: 5854 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 111.963961][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.974068][ T5854] Call Trace: [ 111.977446][ T5854] dump_stack_lvl+0xd6/0x122 [ 111.982129][ T5854] dump_stack+0x11/0x1b [ 111.986266][ T5854] should_fail+0x23c/0x250 [ 111.990680][ T5854] should_fail_usercopy+0x16/0x20 [ 111.995696][ T5854] _copy_to_user+0x1c/0x90 [ 112.000159][ T5854] simple_read_from_buffer+0xab/0x120 [ 112.005510][ T5854] proc_fail_nth_read+0x10d/0x150 [ 112.010520][ T5854] ? proc_fault_inject_write+0x230/0x230 [ 112.016249][ T5854] vfs_read+0x1e6/0x750 [ 112.020390][ T5854] ? tty_ioctl+0x56d/0x11a0 [ 112.024961][ T5854] ? __fget_light+0x21b/0x260 [ 112.029734][ T5854] ? __cond_resched+0x11/0x40 [ 112.034399][ T5854] ksys_read+0xd9/0x190 [ 112.038550][ T5854] __x64_sys_read+0x3e/0x50 [ 112.043037][ T5854] do_syscall_64+0x44/0xa0 [ 112.047447][ T5854] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 112.053349][ T5854] RIP: 0033:0x7ff6d3b0b5ec [ 112.057770][ T5854] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 112.077463][ T5854] RSP: 002b:00007ff6d18ae170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.085870][ T5854] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff6d3b0b5ec [ 112.093921][ T5854] RDX: 000000000000000f RSI: 00007ff6d18ae1e0 RDI: 0000000000000004 [ 112.102007][ T5854] RBP: 00007ff6d18ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 112.110060][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.118024][ T5854] R13: 00007ffe5511c47f R14: 00007ff6d18ae300 R15: 0000000000022000 07:25:13 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 10) 07:25:13 executing program 1: link(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='./cgroup/cgroup.procs\x00') 07:25:13 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x4}) 07:25:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5437, 0x0) 07:25:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:13 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x7}) 07:25:13 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r1, r0, 0x0, 0x100000002) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2033, r0, 0x10000000) open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x89881) 07:25:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x2, 0x0) 07:25:13 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x9}) 07:25:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:13 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x2, 0x2, 0x2, 0x1, 0x0, 0x81}, 0x20) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') [ 112.498719][ T5884] FAULT_INJECTION: forcing a failure. [ 112.498719][ T5884] name failslab, interval 1, probability 0, space 0, times 0 [ 112.511393][ T5884] CPU: 0 PID: 5884 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 112.520141][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.530182][ T5884] Call Trace: [ 112.533463][ T5884] dump_stack_lvl+0xd6/0x122 [ 112.538054][ T5884] dump_stack+0x11/0x1b [ 112.542203][ T5884] should_fail+0x23c/0x250 [ 112.546642][ T5884] ? __es_insert_extent+0x51f/0xe70 [ 112.551831][ T5884] __should_failslab+0x81/0x90 [ 112.556698][ T5884] should_failslab+0x5/0x20 [ 112.561191][ T5884] kmem_cache_alloc+0x4f/0x300 [ 112.565962][ T5884] __es_insert_extent+0x51f/0xe70 [ 112.570995][ T5884] ext4_es_insert_extent+0x1cb/0x1950 [ 112.576380][ T5884] ext4_ext_map_blocks+0x100a/0x1ff0 [ 112.581699][ T5884] ? memcg_slab_post_alloc_hook+0x17d/0x1f0 [ 112.587648][ T5884] ext4_da_get_block_prep+0x3b4/0x970 [ 112.593032][ T5884] __block_write_begin_int+0x4c5/0x1080 [ 112.598597][ T5884] ? ext4_da_release_space+0x230/0x230 [ 112.604160][ T5884] ? ext4_da_release_space+0x230/0x230 [ 112.609634][ T5884] __block_write_begin+0x2b/0x40 [ 112.614656][ T5884] ext4_da_write_begin+0x34e/0x570 [ 112.619788][ T5884] generic_perform_write+0x1b8/0x3e0 [ 112.625416][ T5884] ext4_buffered_write_iter+0x305/0x400 [ 112.631833][ T5884] ext4_file_write_iter+0x2e7/0x11f0 [ 112.637163][ T5884] ? __alloc_pages+0x194/0x320 [ 112.641912][ T5884] ? alloc_pages+0x382/0x3d0 [ 112.646498][ T5884] do_iter_readv_writev+0x2de/0x380 [ 112.651679][ T5884] do_iter_write+0x192/0x5c0 [ 112.656260][ T5884] ? splice_from_pipe_next+0x34f/0x3b0 [ 112.661710][ T5884] ? kmalloc_array+0x2d/0x40 [ 112.666288][ T5884] vfs_iter_write+0x4c/0x70 [ 112.670842][ T5884] iter_file_splice_write+0x43a/0x790 [ 112.676201][ T5884] ? splice_from_pipe+0xd0/0xd0 [ 112.681049][ T5884] direct_splice_actor+0x80/0xa0 [ 112.686000][ T5884] splice_direct_to_actor+0x345/0x650 [ 112.691350][ T5884] ? do_splice_direct+0x190/0x190 [ 112.696358][ T5884] do_splice_direct+0x106/0x190 [ 112.701221][ T5884] do_sendfile+0x63e/0xbb0 [ 112.705652][ T5884] __x64_sys_sendfile64+0x102/0x140 [ 112.710890][ T5884] do_syscall_64+0x44/0xa0 [ 112.715286][ T5884] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 112.721207][ T5884] RIP: 0033:0x7f6acfff5a39 [ 112.725645][ T5884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.745232][ T5884] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 112.753726][ T5884] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 112.761762][ T5884] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 112.769711][ T5884] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 112.777695][ T5884] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 112.785659][ T5884] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:14 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xc}) 07:25:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:14 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 11) 07:25:14 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='./cgroup/cgroup.procs\x00') 07:25:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x4b47, 0x0) 07:25:14 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xd}) [ 113.283541][ C1] scsi_io_completion_action: 13 callbacks suppressed [ 113.283561][ C1] sd 0:0:1:0: tag#7806 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 113.300078][ C1] sd 0:0:1:0: tag#7806 CDB: opcode=0xe5 (vendor) [ 113.306430][ C1] sd 0:0:1:0: tag#7806 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 113.315485][ C1] sd 0:0:1:0: tag#7806 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 113.324580][ C1] sd 0:0:1:0: tag#7806 CDB[20]: ba 07:25:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:14 executing program 1: sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x200, 0xfff, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4044004}, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x30, r2, 0xcbf6810249fbf57, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}}, 0x20011) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r3) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r4, 0x319}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x84) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7c4}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1000}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040}, 0x200410c0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 113.357858][ C0] sd 0:0:1:0: tag#7757 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 113.367716][ C0] sd 0:0:1:0: tag#7757 CDB: opcode=0xe5 (vendor) [ 113.374049][ C0] sd 0:0:1:0: tag#7757 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 113.383301][ C0] sd 0:0:1:0: tag#7757 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 113.392464][ C0] sd 0:0:1:0: tag#7757 CDB[20]: ba [ 113.398188][ T5911] FAULT_INJECTION: forcing a failure. [ 113.398188][ T5911] name failslab, interval 1, probability 0, space 0, times 0 [ 113.410812][ T5911] CPU: 1 PID: 5911 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 113.419488][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.429595][ T5911] Call Trace: [ 113.432881][ T5911] dump_stack_lvl+0xd6/0x122 [ 113.437566][ T5911] dump_stack+0x11/0x1b [ 113.441789][ T5911] should_fail+0x23c/0x250 [ 113.446190][ T5911] ? jbd2__journal_start+0xf7/0x3b0 [ 113.451381][ T5911] __should_failslab+0x81/0x90 [ 113.456169][ T5911] should_failslab+0x5/0x20 [ 113.460682][ T5911] kmem_cache_alloc+0x4f/0x300 [ 113.465445][ T5911] jbd2__journal_start+0xf7/0x3b0 [ 113.470539][ T5911] __ext4_journal_start_sb+0x159/0x2d0 [ 113.476192][ T5911] ? ext4_expand_extra_isize+0x560/0x560 [ 113.481851][ T5911] ext4_dirty_inode+0x58/0xa0 [ 113.486539][ T5911] __mark_inode_dirty+0x77/0x6a0 [ 113.491487][ T5911] generic_write_end+0x157/0x180 [ 113.496407][ T5911] ext4_da_write_end+0x4cc/0x5e0 [ 113.501340][ T5911] generic_perform_write+0x251/0x3e0 [ 113.506681][ T5911] ? ext4_da_write_begin+0x570/0x570 [ 113.511964][ T5911] ext4_buffered_write_iter+0x305/0x400 [ 113.517500][ T5911] ext4_file_write_iter+0x2e7/0x11f0 [ 113.522819][ T5911] ? __alloc_pages+0x194/0x320 [ 113.527600][ T5911] ? alloc_pages+0x382/0x3d0 [ 113.532224][ T5911] do_iter_readv_writev+0x2de/0x380 [ 113.537433][ T5911] do_iter_write+0x192/0x5c0 [ 113.542014][ T5911] ? splice_from_pipe_next+0x34f/0x3b0 [ 113.547458][ T5911] ? kmalloc_array+0x2d/0x40 [ 113.552113][ T5911] vfs_iter_write+0x4c/0x70 [ 113.556661][ T5911] iter_file_splice_write+0x43a/0x790 [ 113.562015][ T5911] ? splice_from_pipe+0xd0/0xd0 [ 113.566887][ T5911] direct_splice_actor+0x80/0xa0 [ 113.571879][ T5911] splice_direct_to_actor+0x345/0x650 [ 113.577227][ T5911] ? do_splice_direct+0x190/0x190 [ 113.582235][ T5911] do_splice_direct+0x106/0x190 [ 113.587078][ T5911] do_sendfile+0x63e/0xbb0 [ 113.591593][ T5911] __x64_sys_sendfile64+0x102/0x140 [ 113.596781][ T5911] do_syscall_64+0x44/0xa0 [ 113.601197][ T5911] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 113.607115][ T5911] RIP: 0033:0x7f6acfff5a39 [ 113.611534][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.631235][ T5911] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 113.639763][ T5911] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 113.647717][ T5911] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 07:25:15 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xe}) 07:25:15 executing program 1: io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x3ff, 0xffffffffffffffff, &(0x7f0000000140)="89310dd3337132f8c78b8cd3e6b83fa5cba7b063b53d7321870a7fffeefc763186b1efe4b8d8cf041a18f247c4852d7f794134419e23d46e1822a3cac307feee90a2b389bc4874f94d1bd6a94b1588ce80af49f87a3ed44d98434870c52d98558fb48ac825691d26b1c9ff659dc2256258298bbd9ecfc9b4cfb4e1f1d3e8e8918a38bdb314ad708933c7710d98b4436f22e03fd52706da824a0161318b233250f4d51518baccd2ace0a6cf4ab0c9", 0xae, 0x6d33cfea, 0x0, 0x1}, &(0x7f0000000240)) pwrite64(0xffffffffffffffff, &(0x7f0000000280)="7d4b9344820548303333227f825ec9d8dbfc8604a909345803f2a3ef7cbc039aea55c17e134b089a9b464df2a906e0619c036c68e253f2897ff601d0e280e4a9d1c7cdda300f10fda5f29cc6c695d58444b7d7a11e64bdeebf854735753e1afd39b1ace381c22e5d5d43103be4325d3f92fbe2de02469b5aee3f0b3852e343746a93d2c210108f479273c64d8befdbe9c10860d1624215863529bcec0b3af09a0c93177de458d988fe34de0c471a4cf29cf8cf0b0d", 0xb5, 0xb527) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r1, r0, 0x0, 0x100000002) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2033, r0, 0x10000000) openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x80, 0x36) utime(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)={0x401, 0x1000}) tee(r1, r1, 0x3, 0x8) 07:25:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 113.655720][ T5911] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 113.663993][ T5911] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 113.672130][ T5911] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:15 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') lgetxattr(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)=@random={'btrfs.', '\x1f\x00'}, &(0x7f0000000100)=""/77, 0x4d) [ 113.788117][ C0] sd 0:0:1:0: tag#7772 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 113.797951][ C0] sd 0:0:1:0: tag#7772 CDB: opcode=0xe5 (vendor) [ 113.804259][ C0] sd 0:0:1:0: tag#7772 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 113.813309][ C0] sd 0:0:1:0: tag#7772 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 113.822450][ C0] sd 0:0:1:0: tag#7772 CDB[20]: ba 07:25:15 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 12) 07:25:15 executing program 1: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x1c) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000280)=""/152, &(0x7f0000000340)=0x98) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='./file1\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x135, 0x4, 0x5, 0x81, 0x6, 0x47, 0x3, 0x5, 0xcb, [0x8, 0x0, 0x7, 0x7fffffff, 0x8, 0x2, 0x800, 0x1], [0x9, 0x6, 0x0, 0x7, 0x9, 0x1, 0x2, 0x7, 0x100, 0x6]}}) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) 07:25:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:15 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xf}) [ 114.122707][ T22] kauditd_printk_skb: 20 callbacks suppressed [ 114.122718][ T22] audit: type=1400 audit(1634541915.434:268): avc: denied { ioctl } for pid=5932 comm="syz-executor.1" path="socket:[19159]" dev="sockfs" ino=19159 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.124710][ T5940] EXT4-fs warning: 5 callbacks suppressed [ 114.124722][ T5940] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x4b49, 0x0) 07:25:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:15 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') open(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x8) 07:25:15 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x10}) [ 114.218148][ T5952] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 114.240255][ T5956] FAULT_INJECTION: forcing a failure. [ 114.240255][ T5956] name failslab, interval 1, probability 0, space 0, times 0 [ 114.252896][ T5956] CPU: 1 PID: 5956 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 114.261628][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 114.271815][ T5956] Call Trace: [ 114.275092][ T5956] dump_stack_lvl+0xd6/0x122 [ 114.279685][ T5956] dump_stack+0x11/0x1b [ 114.283834][ T5956] should_fail+0x23c/0x250 [ 114.288243][ T5956] ? jbd2__journal_start+0xf7/0x3b0 [ 114.293444][ T5956] __should_failslab+0x81/0x90 [ 114.298204][ T5956] should_failslab+0x5/0x20 [ 114.302708][ T5956] kmem_cache_alloc+0x4f/0x300 [ 114.307538][ T5956] jbd2__journal_start+0xf7/0x3b0 [ 114.312579][ T5956] __ext4_journal_start_sb+0x159/0x2d0 07:25:15 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x84) 07:25:15 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x11}) [ 114.318123][ T5956] ? ext4_expand_extra_isize+0x560/0x560 [ 114.323854][ T5956] ext4_dirty_inode+0x58/0xa0 [ 114.328550][ T5956] __mark_inode_dirty+0x77/0x6a0 [ 114.333565][ T5956] generic_write_end+0x157/0x180 [ 114.338513][ T5956] ext4_da_write_end+0x4cc/0x5e0 [ 114.340470][ T5962] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 114.343493][ T5956] generic_perform_write+0x251/0x3e0 [ 114.343525][ T5956] ? ext4_da_write_begin+0x570/0x570 [ 114.365139][ T5956] ext4_buffered_write_iter+0x305/0x400 [ 114.370686][ T5956] ext4_file_write_iter+0x2e7/0x11f0 [ 114.375958][ T5956] ? __alloc_pages+0x194/0x320 [ 114.380707][ T5956] ? alloc_pages+0x382/0x3d0 [ 114.385290][ T5956] do_iter_readv_writev+0x2de/0x380 [ 114.390477][ T5956] do_iter_write+0x192/0x5c0 [ 114.395098][ T5956] ? splice_from_pipe_next+0x34f/0x3b0 [ 114.400539][ T5956] ? kmalloc_array+0x2d/0x40 [ 114.405114][ T5956] vfs_iter_write+0x4c/0x70 [ 114.409622][ T5956] iter_file_splice_write+0x43a/0x790 [ 114.415015][ T5956] ? splice_from_pipe+0xd0/0xd0 [ 114.419955][ T5956] direct_splice_actor+0x80/0xa0 [ 114.424889][ T5956] splice_direct_to_actor+0x345/0x650 [ 114.430288][ T5956] ? do_splice_direct+0x190/0x190 [ 114.435307][ T5956] do_splice_direct+0x106/0x190 [ 114.440253][ T5956] do_sendfile+0x63e/0xbb0 [ 114.444664][ T5956] __x64_sys_sendfile64+0x102/0x140 [ 114.450006][ T5956] do_syscall_64+0x44/0xa0 [ 114.454507][ T5956] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 114.460488][ T5956] RIP: 0033:0x7f6acfff5a39 [ 114.464889][ T5956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.484579][ T5956] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 114.492991][ T5956] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 114.500997][ T5956] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 114.504813][ C0] sd 0:0:1:0: tag#7807 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 114.508949][ T5956] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 114.508964][ T5956] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 114.508975][ T5956] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 [ 114.542796][ C0] sd 0:0:1:0: tag#7807 CDB: opcode=0xe5 (vendor) [ 114.549155][ C0] sd 0:0:1:0: tag#7807 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 114.558281][ C0] sd 0:0:1:0: tag#7807 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 07:25:15 executing program 1: link(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='./cgroup/cgroup.procs\x00') unlink(&(0x7f0000000000)='./cgroup/cgroup.procs\x00') 07:25:15 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x12}) [ 114.567319][ C0] sd 0:0:1:0: tag#7807 CDB[20]: ba [ 114.598676][ T5970] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:16 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 13) 07:25:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:16 executing program 1: statx(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) mount$9p_unix(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), 0x800, &(0x7f0000000400)={'trans=unix,', {[{@cache_fscache}, {@cache_loose}, {@noextend}, {@cache_loose}, {@cache_mmap}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@privport}, {@noextend}], [{@obj_user={'obj_user', 0x3d, '*]$)'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x99!/@.&'}}, {@dont_appraise}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, '&}z,-\xea+&\\..'}}]}}) unlink(&(0x7f0000000040)='./file0\x00') 07:25:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 114.974501][ T5976] 9pnet: p9_fd_create_unix (5976): problem connecting socket: ./cgroup/cgroup.procs: -111 [ 114.985291][ T5979] 9pnet: p9_fd_create_unix (5979): problem connecting socket: ./cgroup/cgroup.procs: -111 [ 114.995784][ C1] sd 0:0:1:0: tag#7757 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 115.005616][ C1] sd 0:0:1:0: tag#7757 CDB: opcode=0xe5 (vendor) [ 115.011947][ C1] sd 0:0:1:0: tag#7757 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 115.021018][ C1] sd 0:0:1:0: tag#7757 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 115.030051][ C1] sd 0:0:1:0: tag#7757 CDB[20]: ba [ 115.084990][ T5982] FAULT_INJECTION: forcing a failure. [ 115.084990][ T5982] name failslab, interval 1, probability 0, space 0, times 0 [ 115.097819][ T5982] CPU: 0 PID: 5982 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 115.106519][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.116577][ T5982] Call Trace: [ 115.119865][ T5982] dump_stack_lvl+0xd6/0x122 [ 115.124458][ T5982] dump_stack+0x11/0x1b [ 115.128611][ T5982] should_fail+0x23c/0x250 07:25:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5409, 0x0) 07:25:16 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x13}) 07:25:16 executing program 1: prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) 07:25:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 115.133043][ T5982] ? ext4_init_io_end+0x2d/0xa0 [ 115.137956][ T5982] __should_failslab+0x81/0x90 [ 115.142712][ T5982] should_failslab+0x5/0x20 [ 115.147203][ T5982] kmem_cache_alloc+0x4f/0x300 [ 115.152015][ T5982] ext4_init_io_end+0x2d/0xa0 [ 115.156677][ T5982] ext4_writepages+0x7ad/0x1d70 [ 115.161595][ T5982] ? __wake_up+0x8d/0xc0 [ 115.165832][ T5982] ? jbd2_journal_stop+0x587/0x660 [ 115.170995][ T5982] ? jbd2_journal_stop+0x587/0x660 [ 115.176154][ T5982] ? __ext4_journal_stop+0xfb/0x110 [ 115.181366][ T5982] ? ext4_expand_extra_isize+0x560/0x560 [ 115.187104][ T5982] ? ext4_dirty_inode+0x9a/0xa0 [ 115.191959][ T5982] ? ext4_readpage+0x140/0x140 [ 115.192511][ T5993] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 115.196718][ T5982] do_writepages+0x26b/0x3c0 [ 115.196744][ T5982] ? generic_write_end+0x157/0x180 [ 115.217587][ T5982] file_write_and_wait_range+0x1ae/0x240 [ 115.223287][ T5982] ext4_sync_file+0x105/0x670 [ 115.228253][ T5982] ? tsan.module_ctor+0x10/0x10 [ 115.233111][ T5982] vfs_fsync_range+0x107/0x120 [ 115.237877][ T5982] ext4_buffered_write_iter+0x3af/0x400 [ 115.243496][ T5982] ext4_file_write_iter+0x2e7/0x11f0 [ 115.248785][ T5982] ? __alloc_pages+0x194/0x320 [ 115.253464][ T5999] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 115.253553][ T5982] ? alloc_pages+0x382/0x3d0 [ 115.269209][ T5982] do_iter_readv_writev+0x2de/0x380 [ 115.274405][ T5982] do_iter_write+0x192/0x5c0 [ 115.279000][ T5982] ? splice_from_pipe_next+0x34f/0x3b0 [ 115.284510][ T5982] ? kmalloc_array+0x2d/0x40 [ 115.289200][ T5982] vfs_iter_write+0x4c/0x70 [ 115.293709][ T5982] iter_file_splice_write+0x43a/0x790 [ 115.294841][ T6003] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 115.299089][ T5982] ? splice_from_pipe+0xd0/0xd0 [ 115.299122][ T5982] direct_splice_actor+0x80/0xa0 [ 115.320042][ T5982] splice_direct_to_actor+0x345/0x650 [ 115.325514][ T5982] ? do_splice_direct+0x190/0x190 [ 115.330614][ T5982] do_splice_direct+0x106/0x190 [ 115.335374][ C1] sd 0:0:1:0: tag#7771 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 115.335470][ T5982] do_sendfile+0x63e/0xbb0 [ 115.345290][ C1] sd 0:0:1:0: tag#7771 CDB: opcode=0xe5 (vendor) [ 115.349642][ T5982] __x64_sys_sendfile64+0x102/0x140 [ 115.355956][ C1] sd 0:0:1:0: tag#7771 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 115.361122][ T5982] do_syscall_64+0x44/0xa0 [ 115.370132][ C1] sd 0:0:1:0: tag#7771 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 115.374504][ T5982] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 115.383516][ C1] sd 0:0:1:0: tag#7771 CDB[20]: ba [ 115.389366][ T5982] RIP: 0033:0x7f6acfff5a39 [ 115.389382][ T5982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 115.419247][ T5982] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 115.427637][ T5982] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 07:25:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x2, 0x5, &(0x7f0000001400)=[{&(0x7f0000000100)="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", 0x1000, 0x1fffc0}, {&(0x7f0000001100)="7c387eb156f06ec663cc88b1b2ff8e0d4596695584d6da64b9a6bde0fe5d3c008dd59da4aa8f9792ee5609691d88a40ed58ae3416352cc4d73cb87d6e1a1066a77d2135fafa76fdc793990008155cf813b73aa356e7357f9292974780900c245907e484e1fcce83f8b4d3256c69eb25d428ad77b232863631545c37fca4903fb62cf22ae915825cc2a457e35f4263c80f8ca6a7b4f9d50fb155ffdecb095cd26e235a651c51cb652d03433de3eb4d33c72e7b9930b3c32bb59bc3bab322aa4d257a0ea4d6519", 0xc6, 0x401}, {&(0x7f0000001200)="a461c69fb3ea0fd5fa4ef98c4fdcae54e51d6c11b4b1c361fa590d878fd83f104db110b98dfcdbd83f0415c6118898c75b5a24d0680d325e70b07970fe389383a42bfe07981df0be62164556109d390ffa8bf929900809cba9f9fe8c1befc9a9a89a3a3e27de9930aea8410b06ab40cead483d70a9354b7f663d5fbc9b63dc1546f025b72ed77a067f2e91bacdd015d49dcdaa620f3cd521e062c15e9d5c968b6546dc49828fe599f0870fe08aca5949b615d04309704022fa9f65dab4547b3c278b32a172f90524ac8ad7ca48e071", 0xcf, 0x5}, {&(0x7f0000001300)="c09ace7412c049ce2c8989468041213161abe8dde030a0d483ec7e289f801edfb6f3dad669064100c839e2", 0x2b}, {&(0x7f0000001340)="495884d5504a490a4aca026cbd1ccf474e38ce357b30753f78e1165118b3198c9a3195d9ffb184ec9cefd8ce2af03a65b55fa6fc74d6f66600064cb1e8db67fd518b42667aa3c5fc3b4b54ac39cef5619b7021dd5bd412c99ecbdfd3534770ef8bbeb6d904de8cc935ba32eb2aa9b2bc921efdcf7a77e4013ff61589e76408a64a3fd0839c6ea2917f6ed60d1e4641694cb6436dcc5e221a343700e7e61739da8620a15cfa9897193be480f312267887469079fd136e681f41", 0xb9, 0x81}], 0x4, &(0x7f0000001540)=ANY=[@ANYBLOB="756e695f786c6174653d302c666c7573682c757466383d302c6f626a5f726f6c653d2826e92c6d61736b3d4d41595f524541442c66736d6167b10d5f3969633d3078303030303030303030303030303030392c6d61736b3d5e4d41595f524541442c7375626a5f757365723d5c2c00ffc88d79fc8cca42d4b445510a0d18e4a64b257ecb495657741f33db6dce05e9c0cd0fd38ed3edf6d35682e30b5dac9322f10bd926"]) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') 07:25:16 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x14}) 07:25:16 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x15}) [ 115.435639][ T5982] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 115.443603][ T5982] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 115.451552][ T5982] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 115.459639][ T5982] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:17 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 14) 07:25:17 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="8a389a6b88cf0bd36ee9dba7f983c7cf912b9f5e3f1e06569af0466534b52b38f1f7d1c06e4d87536f62086c0595f7cf81b4a2a948ce1d7f21098ba84ca2bdc957653ad68e52b6915f319fdebeef1c"], 0xe4}, 0x1, 0x0, 0x0, 0x20044095}, 0xc801) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000280)={0x0, 0x2, 0x57a, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000680)={r1, 0x4, 0x2, 0x1}) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 07:25:17 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x16}) 07:25:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 115.830310][ T6011] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x540b, 0x0) 07:25:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:17 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') 07:25:17 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x17}) 07:25:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 115.936671][ T6018] FAULT_INJECTION: forcing a failure. [ 115.936671][ T6018] name failslab, interval 1, probability 0, space 0, times 0 [ 115.949448][ T6018] CPU: 1 PID: 6018 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 115.958305][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.968379][ T6018] Call Trace: [ 115.971709][ T6018] dump_stack_lvl+0xd6/0x122 [ 115.976300][ T6018] dump_stack+0x11/0x1b [ 115.980559][ T6018] should_fail+0x23c/0x250 07:25:17 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mknod(&(0x7f0000000100)='./cgroup/cgroup.procs/../file0\x00', 0x8, 0x6) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mount_setattr(r0, &(0x7f0000000040)='./cgroup/cgroup.procs/../file0\x00', 0x10000, &(0x7f00000000c0)={0x100004, 0x100000, 0x160000, {r1}}, 0x20) [ 115.985098][ T6018] ? jbd2__journal_start+0xf7/0x3b0 [ 115.990388][ T6018] __should_failslab+0x81/0x90 [ 115.995246][ T6018] should_failslab+0x5/0x20 [ 115.999758][ T6018] kmem_cache_alloc+0x4f/0x300 [ 116.004534][ T6018] jbd2__journal_start+0xf7/0x3b0 [ 116.009593][ T6018] __ext4_journal_start_sb+0x159/0x2d0 [ 116.015195][ T6018] ext4_writepages+0x9d8/0x1d70 [ 116.020155][ T6018] ? __wake_up+0x8d/0xc0 [ 116.024411][ T6018] ? jbd2_journal_stop+0x587/0x660 [ 116.029537][ T6018] ? jbd2_journal_stop+0x587/0x660 [ 116.034662][ T6018] ? __ext4_journal_stop+0xfb/0x110 [ 116.039928][ T6018] ? ext4_expand_extra_isize+0x560/0x560 [ 116.045589][ T6018] ? ext4_dirty_inode+0x9a/0xa0 [ 116.050457][ T6018] ? ext4_readpage+0x140/0x140 [ 116.055231][ T6018] do_writepages+0x26b/0x3c0 [ 116.060010][ T6018] ? generic_write_end+0x157/0x180 [ 116.065123][ T6018] file_write_and_wait_range+0x1ae/0x240 [ 116.070762][ T6018] ext4_sync_file+0x105/0x670 [ 116.075527][ T6018] ? tsan.module_ctor+0x10/0x10 [ 116.080462][ T6018] vfs_fsync_range+0x107/0x120 07:25:17 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100001ef, 0xd9f, 0x0) mount_setattr(r0, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x900, &(0x7f00000000c0)={0x0, 0x2, 0x80000}, 0x20) 07:25:17 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x18}) [ 116.085231][ T6018] ext4_buffered_write_iter+0x3af/0x400 [ 116.090904][ T6018] ext4_file_write_iter+0x2e7/0x11f0 [ 116.096291][ T6018] ? __alloc_pages+0x194/0x320 [ 116.101068][ T6018] ? alloc_pages+0x382/0x3d0 [ 116.105741][ T6018] do_iter_readv_writev+0x2de/0x380 [ 116.110946][ T6018] do_iter_write+0x192/0x5c0 [ 116.115542][ T6018] ? splice_from_pipe_next+0x34f/0x3b0 [ 116.121094][ T6018] ? kmalloc_array+0x2d/0x40 [ 116.125749][ T6018] vfs_iter_write+0x4c/0x70 [ 116.130353][ T6018] iter_file_splice_write+0x43a/0x790 [ 116.135753][ T6018] ? splice_from_pipe+0xd0/0xd0 [ 116.140686][ T6018] direct_splice_actor+0x80/0xa0 [ 116.145638][ T6018] splice_direct_to_actor+0x345/0x650 [ 116.147985][ T6037] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 116.151079][ T6018] ? do_splice_direct+0x190/0x190 [ 116.151102][ T6018] do_splice_direct+0x106/0x190 [ 116.172068][ T6018] do_sendfile+0x63e/0xbb0 [ 116.176497][ T6018] __x64_sys_sendfile64+0x102/0x140 [ 116.181722][ T6018] do_syscall_64+0x44/0xa0 [ 116.186187][ T6018] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 116.192156][ T6018] RIP: 0033:0x7f6acfff5a39 [ 116.196573][ T6018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 116.216337][ T6018] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 116.224759][ T6018] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 116.232733][ T6018] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 116.240884][ T6018] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 116.248841][ T6018] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 116.256800][ T6018] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 [ 116.264870][ T6018] EXT4-fs (sda1): ext4_writepages: jbd2_start: 9223372036854775807 pages, ino 1216; err -12 [ 116.308639][ C0] sd 0:0:1:0: tag#7803 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 116.318490][ C0] sd 0:0:1:0: tag#7803 CDB: opcode=0xe5 (vendor) [ 116.324905][ C0] sd 0:0:1:0: tag#7803 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 116.334025][ C0] sd 0:0:1:0: tag#7803 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 116.343054][ C0] sd 0:0:1:0: tag#7803 CDB[20]: ba 07:25:17 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 15) 07:25:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x540c, 0x0) 07:25:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x7, 0x482480) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000200)={{r1}, "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"}) 07:25:17 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x19}) 07:25:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 116.692864][ T6046] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:18 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x22}) 07:25:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 116.762382][ C1] sd 0:0:1:0: tag#7750 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 116.772345][ C1] sd 0:0:1:0: tag#7750 CDB: opcode=0xe5 (vendor) [ 116.778699][ C1] sd 0:0:1:0: tag#7750 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 116.787787][ C1] sd 0:0:1:0: tag#7750 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 116.796843][ C1] sd 0:0:1:0: tag#7750 CDB[20]: ba 07:25:18 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x622040, 0x0) openat(r0, &(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x4180, 0x6) 07:25:18 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x300}) [ 116.807906][ T22] audit: type=1400 audit(1634541918.124:269): avc: denied { unlink } for pid=361 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.858911][ T6063] FAULT_INJECTION: forcing a failure. [ 116.858911][ T6063] name failslab, interval 1, probability 0, space 0, times 0 [ 116.871541][ T6063] CPU: 0 PID: 6063 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 116.880226][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.890374][ T6063] Call Trace: [ 116.893651][ T6063] dump_stack_lvl+0xd6/0x122 [ 116.898261][ T6063] dump_stack+0x11/0x1b [ 116.902416][ T6063] should_fail+0x23c/0x250 [ 116.906837][ T6063] ? jbd2__journal_start+0x154/0x3b0 [ 116.912228][ T6063] __should_failslab+0x81/0x90 [ 116.917230][ T6063] should_failslab+0x5/0x20 [ 116.921872][ T6063] kmem_cache_alloc+0x4f/0x300 [ 116.926655][ T6063] ? jbd2__journal_start+0xf7/0x3b0 [ 116.931921][ T6063] jbd2__journal_start+0x154/0x3b0 [ 116.937175][ T6063] __ext4_journal_start_sb+0x159/0x2d0 [ 116.942652][ T6063] ext4_writepages+0x9d8/0x1d70 [ 116.947517][ T6063] ? jbd2_journal_stop+0x587/0x660 [ 116.952651][ T6063] ? ext4_mark_iloc_dirty+0x161a/0x1700 07:25:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:18 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x700}) [ 116.958183][ T6063] ? jbd2_journal_stop+0x587/0x660 [ 116.963403][ T6063] ? __ext4_journal_stop+0xfb/0x110 [ 116.968699][ T6063] ? ext4_expand_extra_isize+0x560/0x560 [ 116.974423][ T6063] ? ext4_dirty_inode+0x9a/0xa0 [ 116.979326][ T6063] ? ext4_readpage+0x140/0x140 [ 116.984104][ T6063] do_writepages+0x26b/0x3c0 [ 116.988886][ T6063] ? generic_write_end+0x157/0x180 [ 116.994011][ T6063] file_write_and_wait_range+0x1ae/0x240 [ 116.999732][ T6063] ext4_sync_file+0x105/0x670 [ 117.004429][ T6063] ? tsan.module_ctor+0x10/0x10 [ 117.009394][ T6063] vfs_fsync_range+0x107/0x120 [ 117.014171][ T6063] ext4_buffered_write_iter+0x3af/0x400 [ 117.019793][ T6063] ext4_file_write_iter+0x2e7/0x11f0 [ 117.025184][ T6063] ? __alloc_pages+0x194/0x320 [ 117.029962][ T6063] ? alloc_pages+0x382/0x3d0 [ 117.034575][ T6063] do_iter_readv_writev+0x2de/0x380 [ 117.039789][ T6063] do_iter_write+0x192/0x5c0 [ 117.044459][ T6063] ? splice_from_pipe_next+0x34f/0x3b0 [ 117.049987][ T6063] ? kmalloc_array+0x2d/0x40 [ 117.054570][ T6063] vfs_iter_write+0x4c/0x70 [ 117.059117][ T6063] iter_file_splice_write+0x43a/0x790 [ 117.064473][ T6063] ? splice_from_pipe+0xd0/0xd0 [ 117.069449][ T6063] direct_splice_actor+0x80/0xa0 [ 117.074442][ T6063] splice_direct_to_actor+0x345/0x650 [ 117.079793][ T6063] ? do_splice_direct+0x190/0x190 [ 117.084849][ T6063] do_splice_direct+0x106/0x190 [ 117.089680][ T6063] do_sendfile+0x63e/0xbb0 [ 117.094103][ T6063] __x64_sys_sendfile64+0x102/0x140 [ 117.099328][ T6063] do_syscall_64+0x44/0xa0 [ 117.103822][ T6063] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 117.109740][ T6063] RIP: 0033:0x7f6acfff5a39 [ 117.114156][ T6063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.133902][ T6063] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 117.142322][ T6063] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 117.150359][ T6063] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 117.158382][ T6063] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 117.166360][ T6063] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 117.174324][ T6063] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 [ 117.182366][ T6063] EXT4-fs (sda1): ext4_writepages: jbd2_start: 9223372036854775807 pages, ino 1221; err -12 [ 117.187880][ C1] sd 0:0:1:0: tag#7796 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 117.202384][ C1] sd 0:0:1:0: tag#7796 CDB: opcode=0xe5 (vendor) [ 117.208725][ C1] sd 0:0:1:0: tag#7796 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 117.217768][ C1] sd 0:0:1:0: tag#7796 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 117.226801][ C1] sd 0:0:1:0: tag#7796 CDB[20]: ba 07:25:18 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 16) 07:25:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x540d, 0x0) 07:25:18 executing program 1: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x2000000) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000011c0)=@l2={0x1f, 0x81}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r1, &(0x7f0000000000)="acf288ca", 0x5c8, 0x0, &(0x7f00000011c0)=@can={0x1d, r2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x0, 0x0, 0x20000}}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3df14020", @ANYRES16=0x0, @ANYBLOB="200081000000000000002b00000008000300562a21b4bec2e8cb3c4fff5c9541b0a3f4cc14156869c52ee74bd5bd3b79d28e5a29f7d5d42f3ec117e97b65355e56b41d7f7d8c4b0f3359d6e840daad0c8ebc69225ebe0b7a37067743dec98b959f5bbcc03ba1acec04329d0efe162c52eed5ccc1431298f4ce77b6c8d2f3109b1fa44c2674b67740ec9010938a1ff43f4981e2479355671faae2", @ANYRES32=0x0, @ANYRESHEX], 0x34}, 0x1, 0x0, 0x0, 0x8082}, 0x40000) 07:25:18 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x900}) 07:25:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x0, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:18 executing program 1: link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x400000, 0xb2) 07:25:18 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xc00}) [ 117.623921][ C1] sd 0:0:1:0: tag#7788 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 117.633892][ C1] sd 0:0:1:0: tag#7788 CDB: opcode=0xe5 (vendor) [ 117.640342][ C1] sd 0:0:1:0: tag#7788 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 117.649373][ C1] sd 0:0:1:0: tag#7788 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 117.658392][ C1] sd 0:0:1:0: tag#7788 CDB[20]: ba [ 117.674977][ T6092] FAULT_INJECTION: forcing a failure. [ 117.674977][ T6092] name failslab, interval 1, probability 0, space 0, times 0 [ 117.687784][ T6092] CPU: 1 PID: 6092 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 117.696502][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.706545][ T6092] Call Trace: [ 117.709810][ T6092] dump_stack_lvl+0xd6/0x122 [ 117.714395][ T6092] dump_stack+0x11/0x1b [ 117.718548][ T6092] should_fail+0x23c/0x250 [ 117.723154][ T6092] ? ext4_alloc_io_end_vec+0x2e/0xd0 [ 117.728431][ T6092] __should_failslab+0x81/0x90 [ 117.733187][ T6092] should_failslab+0x5/0x20 [ 117.737791][ T6092] kmem_cache_alloc+0x4f/0x300 [ 117.742558][ T6092] ext4_alloc_io_end_vec+0x2e/0xd0 [ 117.747735][ T6092] ext4_writepages+0xacd/0x1d70 [ 117.752606][ T6092] ? __wake_up+0x8d/0xc0 [ 117.756897][ T6092] ? jbd2_journal_stop+0x587/0x660 [ 117.762069][ T6092] ? jbd2_journal_stop+0x587/0x660 [ 117.767176][ T6092] ? __ext4_journal_stop+0xfb/0x110 [ 117.772381][ T6092] ? ext4_expand_extra_isize+0x560/0x560 [ 117.778047][ T6092] ? ext4_dirty_inode+0x9a/0xa0 [ 117.782941][ T6092] ? ext4_readpage+0x140/0x140 [ 117.787690][ T6092] do_writepages+0x26b/0x3c0 [ 117.792265][ T6092] ? generic_write_end+0x157/0x180 [ 117.797357][ T6092] file_write_and_wait_range+0x1ae/0x240 [ 117.802981][ T6092] ext4_sync_file+0x105/0x670 [ 117.807675][ T6092] ? tsan.module_ctor+0x10/0x10 [ 117.812520][ T6092] vfs_fsync_range+0x107/0x120 [ 117.817267][ T6092] ext4_buffered_write_iter+0x3af/0x400 [ 117.822809][ T6092] ext4_file_write_iter+0x2e7/0x11f0 [ 117.828091][ T6092] ? __alloc_pages+0x194/0x320 [ 117.832867][ T6092] ? alloc_pages+0x382/0x3d0 [ 117.837509][ T6092] do_iter_readv_writev+0x2de/0x380 [ 117.842820][ T6092] do_iter_write+0x192/0x5c0 [ 117.847419][ T6092] ? splice_from_pipe_next+0x34f/0x3b0 [ 117.852898][ T6092] ? kmalloc_array+0x2d/0x40 [ 117.857490][ T6092] vfs_iter_write+0x4c/0x70 [ 117.861986][ T6092] iter_file_splice_write+0x43a/0x790 [ 117.867486][ T6092] ? splice_from_pipe+0xd0/0xd0 [ 117.872419][ T6092] direct_splice_actor+0x80/0xa0 [ 117.877347][ T6092] splice_direct_to_actor+0x345/0x650 [ 117.882699][ T6092] ? do_splice_direct+0x190/0x190 [ 117.887723][ T6092] do_splice_direct+0x106/0x190 [ 117.892693][ T6092] do_sendfile+0x63e/0xbb0 [ 117.897097][ T6092] __x64_sys_sendfile64+0x102/0x140 [ 117.902368][ T6092] do_syscall_64+0x44/0xa0 [ 117.906841][ T6092] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 117.912720][ T6092] RIP: 0033:0x7f6acfff5a39 [ 117.917118][ T6092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.936730][ T6092] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 117.945233][ T6092] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 117.953250][ T6092] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 117.961240][ T6092] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 07:25:19 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xd00}) 07:25:19 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x6]}, 0x8, 0x80800) fcntl$lock(r1, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x4279, 0x200, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)) link(&(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x4202411, 0x0) [ 117.969293][ T6092] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 117.977266][ T6092] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x0, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:19 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 17) 07:25:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5412, 0x0) 07:25:19 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xe00}) 07:25:19 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') lgetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '^]\x00'}, &(0x7f0000000100)=""/19, 0x13) open(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0xa2100, 0x100) r0 = openat(0xffffffffffffffff, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100001ef, 0xd9f, 0x0) execveat(r0, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[&(0x7f0000000200)='%\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00'], &(0x7f00000004c0)=[&(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000340)='&]]+\xa0-\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='^]\x00', &(0x7f0000000400)='trusted.overlay.nlink\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00'], 0x1000) r1 = open(&(0x7f0000000140)='./file0\x00', 0x701282, 0x2) fcntl$setlease(r1, 0x400, 0x2) 07:25:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x0, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:19 executing program 1: link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 07:25:19 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x100000001, 0x1, &(0x7f0000000280)=[{&(0x7f0000000200)="79729340475e38d62ad5cb9af9694c2ebc67b70b831773175781b57e3cf351ccf0b2511b8226b70bac06f902768029630d1bfc7d1b962b3c57a683c152e7d25e42cdfc70e863be85549a0fedc2e5b66b7da492700176ec12794490e8a3177e27afbb6cd974e4bfb84f", 0x69, 0xffffffffffffffc1}], 0x0, &(0x7f00000002c0)={[{'@}#}\')(-'}, {'{)/'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'security.capability\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x64, 0x0, 0x61, 0x35, 0x0, 0x31, 0x31], 0x2d, [0x34, 0x65, 0x62, 0x61], 0x2d, [0x0, 0x62, 0x31, 0x33], 0x2d, [0x30, 0x61, 0x62, 0x35], 0x2d, [0x66, 0x0, 0x33, 0x63, 0x0, 0x38, 0x63, 0x66]}}}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xe7!.2-#\xf6\\#/^{'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@audit}, {@fowner_lt={'fowner<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, '{'}}]}) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0xa3e7, 0x1}, {0x401, 0x8}]}, 0x18, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 07:25:19 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xf00}) 07:25:19 executing program 1: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x0, 0x6, 0x1, 0x0, 0xff, 0x10000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xb8e0, 0x0, @perf_config_ext={0x8001, 0x18}, 0x8400, 0x3f, 0x0, 0x4, 0x9, 0x9, 0x4, 0x0, 0xff, 0x0, 0x9}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x4) preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000000180)=""/237, 0xed}, {&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000340)=""/182, 0xb6}], 0x6, 0x0, 0xffffffff, 0x15) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') [ 118.498845][ C0] scsi_io_completion_action: 1 callbacks suppressed [ 118.498876][ C0] sd 0:0:1:0: tag#7748 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 118.515431][ C0] sd 0:0:1:0: tag#7748 CDB: opcode=0xe5 (vendor) [ 118.521766][ C0] sd 0:0:1:0: tag#7748 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 118.530820][ C0] sd 0:0:1:0: tag#7748 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 118.539858][ C0] sd 0:0:1:0: tag#7748 CDB[20]: ba 07:25:19 executing program 1: r0 = request_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "b465e3aec8460c6f5bd0e99e1b98c35f938f4056c809c29a75af9e221a01b16a7b22a21cf8de06167628378f2f4994d5b895c3262342d65385cec6e1183a7ae8", 0x1d}, 0x48, r0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x1c243911) keyctl$chown(0x4, r2, 0xee00, 0xee01) keyctl$chown(0x8, r2, 0xffffffffffffffff, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @auto=[0x36, 0x64, 0x37, 0x64, 0x35, 0x39, 0x54, 0x66, 0x35, 0x38, 0x36, 0x65, 0x38, 0x32, 0x33, 0x63]}, &(0x7f00000003c0)={0x0, "4722584cf46041a7a765991e61ae479152d18300219d65e3da8b746fd95adee4c63858f62e8b655cfd01b9a4091e5cd36be7c091f06d65800eb004b3095e1df2", 0x34}, 0x48, r2) request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='/\x00', r1) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r4 = open(&(0x7f0000000140)='./file0\x00', 0x101282, 0x1) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) keyctl$chown(0x4, r3, r6, r7) [ 118.545671][ T6127] FAULT_INJECTION: forcing a failure. [ 118.545671][ T6127] name failslab, interval 1, probability 0, space 0, times 0 [ 118.558415][ T6127] CPU: 0 PID: 6127 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 118.567114][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.577231][ T6127] Call Trace: [ 118.580496][ T6127] dump_stack_lvl+0xd6/0x122 [ 118.585077][ T6127] dump_stack+0x11/0x1b [ 118.589256][ T6127] should_fail+0x23c/0x250 [ 118.593671][ T6127] ? kcalloc+0x32/0x50 [ 118.597765][ T6127] __should_failslab+0x81/0x90 [ 118.602704][ T6127] should_failslab+0x5/0x20 [ 118.607201][ T6127] __kmalloc+0x6f/0x350 [ 118.611353][ T6127] kcalloc+0x32/0x50 [ 118.615255][ T6127] ext4_find_extent+0x21c/0x7f0 [ 118.620099][ T6127] ? should_fail+0xd6/0x250 [ 118.624632][ T6127] ext4_ext_map_blocks+0x115/0x1ff0 [ 118.629823][ T6127] ? ext4_es_lookup_extent+0x36b/0x490 [ 118.635467][ T6127] ext4_map_blocks+0x71e/0xf00 [ 118.640465][ T6127] mpage_map_one_extent+0x10d/0x360 [ 118.645774][ T6127] ext4_writepages+0xc5a/0x1d70 [ 118.650798][ T6127] ? jbd2_journal_stop+0x587/0x660 [ 118.655916][ T6127] ? jbd2_journal_stop+0x587/0x660 [ 118.661043][ T6127] ? __ext4_journal_stop+0xfb/0x110 [ 118.666234][ T6127] ? ext4_expand_extra_isize+0x560/0x560 [ 118.671989][ T6127] ? ext4_dirty_inode+0x9a/0xa0 [ 118.677046][ T6127] ? ext4_readpage+0x140/0x140 [ 118.681883][ T6127] do_writepages+0x26b/0x3c0 [ 118.686459][ T6127] ? generic_write_end+0x157/0x180 [ 118.691722][ T6127] file_write_and_wait_range+0x1ae/0x240 [ 118.697348][ T6127] ext4_sync_file+0x105/0x670 [ 118.702073][ T6127] ? tsan.module_ctor+0x10/0x10 [ 118.706915][ T6127] vfs_fsync_range+0x107/0x120 [ 118.711732][ T6127] ext4_buffered_write_iter+0x3af/0x400 [ 118.717321][ T6127] ext4_file_write_iter+0x2e7/0x11f0 [ 118.722596][ T6127] ? __alloc_pages+0x194/0x320 [ 118.727413][ T6127] ? alloc_pages+0x382/0x3d0 [ 118.731992][ T6127] do_iter_readv_writev+0x2de/0x380 [ 118.737244][ T6127] do_iter_write+0x192/0x5c0 [ 118.741897][ T6127] ? splice_from_pipe_next+0x34f/0x3b0 [ 118.747555][ T6127] ? kmalloc_array+0x2d/0x40 [ 118.752138][ T6127] vfs_iter_write+0x4c/0x70 [ 118.756628][ T6127] iter_file_splice_write+0x43a/0x790 [ 118.761986][ T6127] ? splice_from_pipe+0xd0/0xd0 [ 118.766817][ T6127] direct_splice_actor+0x80/0xa0 [ 118.771823][ T6127] splice_direct_to_actor+0x345/0x650 [ 118.777288][ T6127] ? do_splice_direct+0x190/0x190 [ 118.782293][ T6127] do_splice_direct+0x106/0x190 [ 118.787285][ T6127] do_sendfile+0x63e/0xbb0 [ 118.791698][ T6127] __x64_sys_sendfile64+0x102/0x140 [ 118.796890][ T6127] do_syscall_64+0x44/0xa0 [ 118.801440][ T6127] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 118.807373][ T6127] RIP: 0033:0x7f6acfff5a39 [ 118.811790][ T6127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.831417][ T6127] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 118.840093][ T6127] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 07:25:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 118.848059][ T6127] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 118.856021][ T6127] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 118.863980][ T6127] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 118.872123][ T6127] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:20 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 18) [ 119.259573][ T6127] syz-executor.0 (6127) used greatest stack depth: 10368 bytes left 07:25:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5413, 0x0) 07:25:20 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_buf(r0, 0x1, 0x24, &(0x7f0000000000)=""/72, &(0x7f0000000080)=0x48) r1 = openat(0xffffffffffffffff, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100001ef, 0xd9f, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x1}, 0x4) semget$private(0x0, 0x0, 0x4c0) 07:25:20 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1100}) 07:25:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x0, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 119.348938][ T6148] EXT4-fs warning: 8 callbacks suppressed [ 119.348950][ T6148] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 119.379121][ T6150] FAULT_INJECTION: forcing a failure. [ 119.379121][ T6150] name failslab, interval 1, probability 0, space 0, times 0 [ 119.391826][ T6150] CPU: 1 PID: 6150 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 119.400569][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 119.410820][ T6150] Call Trace: [ 119.414186][ T6150] dump_stack_lvl+0xd6/0x122 [ 119.418823][ T6150] dump_stack+0x11/0x1b [ 119.422992][ T6150] should_fail+0x23c/0x250 [ 119.427501][ T6150] ? ext4_mb_new_blocks+0x317/0x1fc0 [ 119.432972][ T6150] __should_failslab+0x81/0x90 [ 119.437791][ T6150] should_failslab+0x5/0x20 07:25:20 executing program 1: r0 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20010}, 0x4000) link(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') 07:25:20 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1200}) [ 119.442056][ T6159] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 119.442301][ T6150] kmem_cache_alloc+0x4f/0x300 [ 119.458459][ T6150] ext4_mb_new_blocks+0x317/0x1fc0 [ 119.463577][ T6150] ? ext4_find_extent+0x6cf/0x7f0 [ 119.468607][ T6150] ? ext4_ext_search_right+0x300/0x540 [ 119.474204][ T6150] ? ext4_inode_to_goal_block+0x1bd/0x1d0 [ 119.480095][ T6150] ext4_ext_map_blocks+0x15ed/0x1ff0 [ 119.485758][ T6150] ? ext4_es_lookup_extent+0x36b/0x490 [ 119.491210][ T6150] ext4_map_blocks+0x71e/0xf00 [ 119.495976][ T6150] mpage_map_one_extent+0x10d/0x360 [ 119.501183][ T6150] ext4_writepages+0xc5a/0x1d70 [ 119.506047][ T6150] ? jbd2_journal_stop+0x587/0x660 [ 119.511170][ T6150] ? ext4_mark_iloc_dirty+0x161a/0x1700 [ 119.516786][ T6150] ? jbd2_journal_stop+0x587/0x660 [ 119.521901][ T6150] ? __ext4_journal_stop+0xfb/0x110 [ 119.527132][ T6150] ? ext4_expand_extra_isize+0x560/0x560 [ 119.532748][ T6150] ? ext4_dirty_inode+0x9a/0xa0 [ 119.537581][ T6150] ? ext4_readpage+0x140/0x140 [ 119.542343][ T6150] do_writepages+0x26b/0x3c0 [ 119.545648][ C0] sd 0:0:1:0: tag#7787 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 119.546969][ T6150] ? generic_write_end+0x157/0x180 [ 119.546991][ T6150] file_write_and_wait_range+0x1ae/0x240 [ 119.556798][ C0] sd 0:0:1:0: tag#7787 CDB: opcode=0xe5 (vendor) [ 119.561855][ T6150] ext4_sync_file+0x105/0x670 [ 119.567485][ C0] sd 0:0:1:0: tag#7787 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 119.573756][ T6150] ? tsan.module_ctor+0x10/0x10 [ 119.578448][ C0] sd 0:0:1:0: tag#7787 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 119.587400][ T6150] vfs_fsync_range+0x107/0x120 [ 119.587421][ T6150] ext4_buffered_write_iter+0x3af/0x400 [ 119.592348][ C0] sd 0:0:1:0: tag#7787 CDB[20]: ba [ 119.601504][ T6150] ext4_file_write_iter+0x2e7/0x11f0 [ 119.601529][ T6150] ? __alloc_pages+0x194/0x320 [ 119.601551][ T6150] ? alloc_pages+0x382/0x3d0 [ 119.631760][ T6150] do_iter_readv_writev+0x2de/0x380 [ 119.637070][ T6150] do_iter_write+0x192/0x5c0 [ 119.641679][ T6150] ? splice_from_pipe_next+0x34f/0x3b0 [ 119.647126][ T6150] ? kmalloc_array+0x2d/0x40 [ 119.651825][ T6150] vfs_iter_write+0x4c/0x70 [ 119.656317][ T6150] iter_file_splice_write+0x43a/0x790 [ 119.661670][ T6150] ? splice_from_pipe+0xd0/0xd0 [ 119.666571][ T6150] direct_splice_actor+0x80/0xa0 [ 119.671504][ T6150] splice_direct_to_actor+0x345/0x650 [ 119.677161][ T6150] ? do_splice_direct+0x190/0x190 [ 119.682201][ T6150] do_splice_direct+0x106/0x190 [ 119.687086][ T6150] do_sendfile+0x63e/0xbb0 [ 119.691661][ T6150] __x64_sys_sendfile64+0x102/0x140 [ 119.696849][ T6150] do_syscall_64+0x44/0xa0 [ 119.701339][ T6150] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 119.707305][ T6150] RIP: 0033:0x7f6acfff5a39 [ 119.711702][ T6150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.731892][ T6150] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 119.740296][ T6150] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 07:25:21 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./cgroup/cgroup.procs/file0\x00') setxattr$incfs_size(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0), &(0x7f0000000100)=0x7ede, 0x8, 0x1) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r5) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x9, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="1d23aa6d16c6f050a4f88a5034cd96b48c01589fcd0b94ba70b67b19d890b158acbc77b97f5a80543650207428018d94368d0f5fd945e6b11cdc4b41ff3e1f2ca6edc74ec332fe6644c800547618ebff8b7dbe0f0eada0acf297e0a411eae650eea41e2a670e4250cddfb448c0a1d9ae3fde4f12e06f41859387edd6ec43d56542fff49589a6a76d7217b82729c9aa9057fbc22d2909b96ef332b9bf99", 0x9d, 0x10000}], 0x121a022, &(0x7f0000000380)={[{@nobarrier}, {@discard}, {@nojournal_checksum}, {@usrquota}, {@discard}, {@grpquota}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@euid_gt={'euid>', r5}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) setxattr$incfs_id(&(0x7f0000000140)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x33}, 0x20, 0x0) 07:25:21 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1300}) 07:25:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 119.748681][ T6150] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 119.756652][ T6150] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 119.764612][ T6150] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 119.772768][ T6150] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x0, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 119.848677][ T6175] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 119.893423][ C1] sd 0:0:1:0: tag#7796 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 119.903281][ C1] sd 0:0:1:0: tag#7796 CDB: opcode=0xe5 (vendor) [ 119.909646][ C1] sd 0:0:1:0: tag#7796 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 119.918725][ C1] sd 0:0:1:0: tag#7796 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 119.927738][ C1] sd 0:0:1:0: tag#7796 CDB[20]: ba 07:25:21 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 19) [ 120.110558][ T6150] syz-executor.0 (6150) used greatest stack depth: 10304 bytes left 07:25:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5414, 0x0) 07:25:21 executing program 1: link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', &(0x7f0000000100)=""/4096, 0x1000) utime(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x9, 0x8}) 07:25:21 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1400}) 07:25:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x0, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 120.229963][ T6184] FAULT_INJECTION: forcing a failure. [ 120.229963][ T6184] name failslab, interval 1, probability 0, space 0, times 0 [ 120.242748][ T6184] CPU: 1 PID: 6184 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 120.251605][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.261758][ T6184] Call Trace: [ 120.265039][ T6184] dump_stack_lvl+0xd6/0x122 [ 120.269688][ T6184] dump_stack+0x11/0x1b [ 120.273838][ T6184] should_fail+0x23c/0x250 [ 120.278516][ T6184] ? __es_insert_extent+0x51f/0xe70 [ 120.283807][ T6184] __should_failslab+0x81/0x90 [ 120.288584][ T6184] should_failslab+0x5/0x20 [ 120.293081][ T6184] kmem_cache_alloc+0x4f/0x300 [ 120.297847][ T6184] __es_insert_extent+0x51f/0xe70 [ 120.303017][ T6184] ext4_es_insert_extent+0x1cb/0x1950 [ 120.308387][ T6184] ? percpu_counter_add_batch+0x69/0xd0 [ 120.309035][ C0] sd 0:0:1:0: tag#7804 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 120.313928][ T6184] ext4_map_blocks+0xa5d/0xf00 [ 120.313955][ T6184] mpage_map_one_extent+0x10d/0x360 [ 120.323776][ C0] sd 0:0:1:0: tag#7804 CDB: opcode=0xe5 (vendor) [ 120.328492][ T6184] ext4_writepages+0xc5a/0x1d70 [ 120.333692][ C0] sd 0:0:1:0: tag#7804 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 120.339996][ T6184] ? jbd2_journal_stop+0x587/0x660 [ 120.344844][ C0] sd 0:0:1:0: tag#7804 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 120.353993][ T6184] ? jbd2_journal_stop+0x587/0x660 [ 120.359111][ C0] sd 0:0:1:0: tag#7804 CDB[20]: ba 07:25:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x0, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:21 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1500}) [ 120.368166][ T6184] ? __ext4_journal_stop+0xfb/0x110 [ 120.383523][ T6184] ? ext4_expand_extra_isize+0x560/0x560 [ 120.389165][ T6184] ? ext4_dirty_inode+0x9a/0xa0 [ 120.394016][ T6184] ? ext4_readpage+0x140/0x140 [ 120.398848][ T6184] do_writepages+0x26b/0x3c0 [ 120.403461][ T6184] ? generic_write_end+0x157/0x180 [ 120.408575][ T6184] file_write_and_wait_range+0x1ae/0x240 [ 120.414368][ T6184] ext4_sync_file+0x105/0x670 [ 120.419086][ T6184] ? tsan.module_ctor+0x10/0x10 [ 120.423991][ T6184] vfs_fsync_range+0x107/0x120 07:25:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x0, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 120.428766][ T6184] ext4_buffered_write_iter+0x3af/0x400 [ 120.434322][ T6184] ext4_file_write_iter+0x2e7/0x11f0 [ 120.439620][ T6184] ? __alloc_pages+0x194/0x320 [ 120.444400][ T6184] ? alloc_pages+0x382/0x3d0 [ 120.449171][ T6184] do_iter_readv_writev+0x2de/0x380 [ 120.452260][ T6201] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 120.454461][ T6184] do_iter_write+0x192/0x5c0 [ 120.454487][ T6184] ? splice_from_pipe_next+0x34f/0x3b0 [ 120.475692][ T6184] ? kmalloc_array+0x2d/0x40 [ 120.480300][ T6184] vfs_iter_write+0x4c/0x70 [ 120.484860][ T6184] iter_file_splice_write+0x43a/0x790 [ 120.490226][ T6184] ? splice_from_pipe+0xd0/0xd0 [ 120.495079][ T6184] direct_splice_actor+0x80/0xa0 [ 120.500008][ T6184] splice_direct_to_actor+0x345/0x650 [ 120.505370][ T6184] ? do_splice_direct+0x190/0x190 [ 120.510605][ T6184] do_splice_direct+0x106/0x190 [ 120.515531][ T6184] do_sendfile+0x63e/0xbb0 [ 120.519937][ T6184] __x64_sys_sendfile64+0x102/0x140 [ 120.525220][ T6184] do_syscall_64+0x44/0xa0 [ 120.529739][ T6184] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 120.535682][ T6184] RIP: 0033:0x7f6acfff5a39 [ 120.540082][ T6184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.559711][ T6184] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 120.568165][ T6184] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 07:25:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:21 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1600}) [ 120.576125][ T6184] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 120.584154][ T6184] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 120.592110][ T6184] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 120.600312][ T6184] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 [ 120.655304][ C1] sd 0:0:1:0: tag#7788 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 120.657315][ T6210] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 120.665172][ C1] sd 0:0:1:0: tag#7788 CDB: opcode=0xe5 (vendor) [ 120.665191][ C1] sd 0:0:1:0: tag#7788 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 120.691634][ C1] sd 0:0:1:0: tag#7788 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 120.700673][ C1] sd 0:0:1:0: tag#7788 CDB[20]: ba 07:25:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 120.737138][ C1] sd 0:0:1:0: tag#7769 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 120.747104][ C1] sd 0:0:1:0: tag#7769 CDB: opcode=0xe5 (vendor) [ 120.753487][ C1] sd 0:0:1:0: tag#7769 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 120.762545][ C1] sd 0:0:1:0: tag#7769 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 120.771613][ C1] sd 0:0:1:0: tag#7769 CDB[20]: ba 07:25:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x0, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 120.986159][ C1] sd 0:0:1:0: tag#7801 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 120.996126][ C1] sd 0:0:1:0: tag#7801 CDB: opcode=0xe5 (vendor) [ 121.002440][ C1] sd 0:0:1:0: tag#7801 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 121.011466][ C1] sd 0:0:1:0: tag#7801 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 121.020514][ C1] sd 0:0:1:0: tag#7801 CDB[20]: ba 07:25:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5415, 0x0) 07:25:22 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 20) 07:25:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x0, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:22 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1700}) 07:25:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x0, 0x3f, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 121.175610][ T6228] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 121.201530][ C1] sd 0:0:1:0: tag#7749 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 121.211402][ C1] sd 0:0:1:0: tag#7749 CDB: opcode=0xe5 (vendor) 07:25:22 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1800}) [ 121.217771][ C1] sd 0:0:1:0: tag#7749 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 121.226812][ C1] sd 0:0:1:0: tag#7749 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 121.235897][ C1] sd 0:0:1:0: tag#7749 CDB[20]: ba [ 121.250992][ C0] sd 0:0:1:0: tag#7750 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 121.256776][ T6233] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 121.260857][ C0] sd 0:0:1:0: tag#7750 CDB: opcode=0xe5 (vendor) [ 121.279111][ C0] sd 0:0:1:0: tag#7750 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 121.288160][ C0] sd 0:0:1:0: tag#7750 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 121.297218][ C0] sd 0:0:1:0: tag#7750 CDB[20]: ba [ 121.303924][ T6235] FAULT_INJECTION: forcing a failure. [ 121.303924][ T6235] name failslab, interval 1, probability 0, space 0, times 0 [ 121.316898][ T6235] CPU: 0 PID: 6235 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 07:25:22 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1900}) 07:25:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 121.325581][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.333324][ T6238] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 121.335634][ T6235] Call Trace: [ 121.335643][ T6235] dump_stack_lvl+0xd6/0x122 [ 121.335667][ T6235] dump_stack+0x11/0x1b [ 121.358730][ T6235] should_fail+0x23c/0x250 [ 121.363209][ T6235] ? jbd2_journal_add_journal_head+0x6c/0x310 [ 121.369278][ T6235] __should_failslab+0x81/0x90 [ 121.374045][ T6235] should_failslab+0x5/0x20 [ 121.378542][ T6235] kmem_cache_alloc+0x4f/0x300 [ 121.383295][ T6235] ? ext4_validate_block_bitmap+0x215/0x820 [ 121.389193][ T6235] jbd2_journal_add_journal_head+0x6c/0x310 [ 121.395141][ T6235] jbd2_journal_get_write_access+0x14d/0x1b0 [ 121.401197][ T6235] __ext4_journal_get_write_access+0x1c2/0x490 [ 121.407509][ T6235] ? ext4_wait_block_bitmap+0x3f/0x150 [ 121.413118][ T6235] ext4_mb_mark_diskspace_used+0x106/0xca0 [ 121.418915][ T6235] ? ext4_mb_use_preallocated+0x5b1/0x640 [ 121.424714][ T6235] ext4_mb_new_blocks+0xae3/0x1fc0 [ 121.429804][ T6235] ? ext4_find_extent+0x6cf/0x7f0 [ 121.434829][ T6235] ? ext4_ext_search_right+0x300/0x540 [ 121.440301][ T6235] ? ext4_inode_to_goal_block+0x1bd/0x1d0 [ 121.446064][ T6235] ext4_ext_map_blocks+0x15ed/0x1ff0 [ 121.451350][ T6235] ? ext4_es_lookup_extent+0x36b/0x490 [ 121.456862][ T6235] ext4_map_blocks+0x71e/0xf00 [ 121.461614][ T6235] mpage_map_one_extent+0x10d/0x360 [ 121.466817][ T6235] ext4_writepages+0xc5a/0x1d70 [ 121.471663][ T6235] ? jbd2_journal_stop+0x587/0x660 [ 121.476803][ T6235] ? jbd2_journal_stop+0x587/0x660 [ 121.482010][ T6235] ? __ext4_journal_stop+0xfb/0x110 [ 121.487263][ T6235] ? ext4_expand_extra_isize+0x560/0x560 [ 121.492931][ T6235] ? ext4_dirty_inode+0x9a/0xa0 [ 121.497851][ T6235] ? ext4_readpage+0x140/0x140 [ 121.502610][ T6235] do_writepages+0x26b/0x3c0 [ 121.507205][ T6235] ? generic_write_end+0x157/0x180 [ 121.512358][ T6235] file_write_and_wait_range+0x1ae/0x240 [ 121.517993][ T6235] ext4_sync_file+0x105/0x670 [ 121.522650][ T6235] ? tsan.module_ctor+0x10/0x10 [ 121.527518][ T6235] vfs_fsync_range+0x107/0x120 [ 121.532302][ T6235] ext4_buffered_write_iter+0x3af/0x400 [ 121.537881][ T6235] ext4_file_write_iter+0x2e7/0x11f0 [ 121.543371][ T6235] ? __alloc_pages+0x194/0x320 [ 121.548141][ T6235] ? alloc_pages+0x382/0x3d0 [ 121.552742][ T6235] do_iter_readv_writev+0x2de/0x380 [ 121.558105][ T6235] do_iter_write+0x192/0x5c0 [ 121.562702][ T6235] ? splice_from_pipe_next+0x34f/0x3b0 [ 121.568146][ T6235] ? kmalloc_array+0x2d/0x40 [ 121.572739][ T6235] vfs_iter_write+0x4c/0x70 [ 121.577243][ T6235] iter_file_splice_write+0x43a/0x790 [ 121.582602][ T6235] ? splice_from_pipe+0xd0/0xd0 [ 121.587443][ T6235] direct_splice_actor+0x80/0xa0 [ 121.592437][ T6235] splice_direct_to_actor+0x345/0x650 [ 121.597850][ T6235] ? do_splice_direct+0x190/0x190 [ 121.602860][ T6235] do_splice_direct+0x106/0x190 [ 121.607780][ T6235] do_sendfile+0x63e/0xbb0 [ 121.612273][ T6235] __x64_sys_sendfile64+0x102/0x140 [ 121.617473][ T6235] do_syscall_64+0x44/0xa0 [ 121.622035][ T6235] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 121.627916][ T6235] RIP: 0033:0x7f6acfff5a39 [ 121.632513][ T6235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.652109][ T6235] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 121.660543][ T6235] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 121.668617][ T6235] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 07:25:23 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x2000}) [ 121.676575][ T6235] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 121.684566][ T6235] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 121.692534][ T6235] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 [ 121.700598][ T6235] ENOMEM in journal_alloc_journal_head, retrying. 07:25:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:23 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1900}) [ 121.737029][ T6242] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 121.801192][ T6244] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 121.831109][ C0] sd 0:0:1:0: tag#7759 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 121.840961][ C0] sd 0:0:1:0: tag#7759 CDB: opcode=0xe5 (vendor) [ 121.847297][ C0] sd 0:0:1:0: tag#7759 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 121.856508][ C0] sd 0:0:1:0: tag#7759 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 121.865542][ C0] sd 0:0:1:0: tag#7759 CDB[20]: ba 07:25:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5416, 0x0) 07:25:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:23 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x2200}) 07:25:23 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1200}) 07:25:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:23 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 21) [ 122.015546][ T6235] syz-executor.0 (6235) used greatest stack depth: 9888 bytes left 07:25:23 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x4000}) 07:25:23 executing program 1: r0 = request_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "b465e3aec8460c6f5bd0e99e1b98c35f938f4056c809c29a75af9e221a01b16a7b22a21cf8de06167628378f2f4994d5b895c3262342d65385cec6e1183a7ae8", 0x1d}, 0x48, r0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x1c243911) keyctl$chown(0x4, r2, 0xee00, 0xee01) keyctl$chown(0x8, r2, 0xffffffffffffffff, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @auto=[0x36, 0x64, 0x37, 0x64, 0x35, 0x39, 0x54, 0x66, 0x35, 0x38, 0x36, 0x65, 0x38, 0x32, 0x33, 0x63]}, &(0x7f00000003c0)={0x0, "4722584cf46041a7a765991e61ae479152d18300219d65e3da8b746fd95adee4c63858f62e8b655cfd01b9a4091e5cd36be7c091f06d65800eb004b3095e1df2", 0x34}, 0x48, r2) request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='/\x00', r1) link(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='./file0\x00') r4 = open(&(0x7f0000000140)='./file0\x00', 0x101282, 0x1) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) keyctl$chown(0x4, r3, r6, r7) 07:25:23 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x20000}) [ 122.167942][ T6266] FAULT_INJECTION: forcing a failure. [ 122.167942][ T6266] name failslab, interval 1, probability 0, space 0, times 0 [ 122.180584][ T6266] CPU: 1 PID: 6266 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 122.189382][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.199466][ T6266] Call Trace: [ 122.202756][ T6266] dump_stack_lvl+0xd6/0x122 [ 122.207356][ T6266] dump_stack+0x11/0x1b [ 122.211510][ T6266] should_fail+0x23c/0x250 [ 122.215937][ T6266] ? mempool_alloc_slab+0x16/0x20 [ 122.220969][ T6266] __should_failslab+0x81/0x90 [ 122.225909][ T6266] should_failslab+0x5/0x20 [ 122.230412][ T6266] kmem_cache_alloc+0x4f/0x300 [ 122.235175][ T6266] mempool_alloc_slab+0x16/0x20 [ 122.240043][ T6266] ? mempool_free+0x130/0x130 [ 122.244712][ T6266] mempool_alloc+0x9d/0x310 [ 122.248709][ T6272] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=6164 sclass=netlink_xfrm_socket pid=6272 comm=syz-executor.1 [ 122.249227][ T6266] bio_alloc_bioset+0xcc/0x530 [ 122.249250][ T6266] ext4_bio_write_page+0x7c5/0xa40 [ 122.272151][ T6266] ext4_writepages+0x10a0/0x1d70 [ 122.277099][ T6266] ? ext4_readpage+0x140/0x140 [ 122.281914][ T6266] do_writepages+0x26b/0x3c0 [ 122.286502][ T6266] ? generic_write_end+0x157/0x180 [ 122.291608][ T6266] file_write_and_wait_range+0x1ae/0x240 [ 122.297328][ T6266] ext4_sync_file+0x105/0x670 [ 122.302036][ T6266] ? tsan.module_ctor+0x10/0x10 [ 122.306883][ T6266] vfs_fsync_range+0x107/0x120 [ 122.311692][ T6266] ext4_buffered_write_iter+0x3af/0x400 [ 122.317320][ T6266] ext4_file_write_iter+0x2e7/0x11f0 [ 122.322633][ T6266] ? __alloc_pages+0x194/0x320 [ 122.327390][ T6266] ? alloc_pages+0x382/0x3d0 [ 122.331993][ T6266] do_iter_readv_writev+0x2de/0x380 [ 122.337184][ T6266] do_iter_write+0x192/0x5c0 [ 122.341853][ T6266] ? splice_from_pipe_next+0x34f/0x3b0 [ 122.347322][ T6266] ? kmalloc_array+0x2d/0x40 [ 122.351969][ T6266] vfs_iter_write+0x4c/0x70 [ 122.356559][ T6266] iter_file_splice_write+0x43a/0x790 [ 122.361965][ T6266] ? splice_from_pipe+0xd0/0xd0 [ 122.366823][ T6266] direct_splice_actor+0x80/0xa0 [ 122.371768][ T6266] splice_direct_to_actor+0x345/0x650 [ 122.377128][ T6266] ? do_splice_direct+0x190/0x190 [ 122.382199][ T6266] do_splice_direct+0x106/0x190 [ 122.387040][ T6266] do_sendfile+0x63e/0xbb0 [ 122.391448][ T6266] __x64_sys_sendfile64+0x102/0x140 [ 122.396654][ T6266] do_syscall_64+0x44/0xa0 [ 122.401144][ T6266] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 122.407061][ T6266] RIP: 0033:0x7f6acfff5a39 07:25:23 executing program 1: unshare(0x4a060480) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)=',*\x00') socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req={0x9, 0x2, 0x6, 0x7fffffff}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cc40)={0x100, [], 0x81, "24de72034a8091"}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000141813160000020000fc0200000000e7ff928efa96e723aadfd9487e9300000100000000004000000000000000000000000000000b000000000000f05c8e3e717445b47f27c27366678cbac0e71a07f898bf03f072c556b00af47a73d86f7f76507482323a9d405ac11708fddc11761a3eeaffc6d66286bb4ef564f0d5b7530c452c9f3615cbef046fb18abce8162bc02316130cac233cc5fa42", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) 07:25:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 122.411472][ T6266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.431109][ T6266] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 122.439534][ T6266] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 122.447499][ T6266] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 122.455495][ T6266] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 122.463472][ T6266] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 122.471534][ T6266] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 07:25:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5417, 0x0) 07:25:24 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1ffff8}) 07:25:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x0, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:24 executing program 1: perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffd, 0x6c, 0x1, @buffer={0x0, 0xde, &(0x7f0000000240)=""/222}, &(0x7f0000000340)="93fdbffd0c110e524eca3a11bac5eec514621955672262acfb1f71f03558bb712619800a0b07c49ae62f5a2572b432b463f19fb581d9bd86cbd1d2336092ac870fed12787e6c2ff57c26ca4606f87472a2afc32920f81021e75e2c03dc0b07a148b40deb56544de89e3f9083", &(0x7f00000004c0)=""/251, 0x6, 0x4, 0x2, &(0x7f00000003c0)}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x80, &(0x7f0000000000)="6e494024732ac6871e4b0f8378174ab2afd5004bf0138e00a21baed47945f507709852e3a40383f26ac0ae5c390c78f2cc37a6f6e46cafd906979de80ddfdda38e440434bd8d67a77186a2d5c6c63c54dbf220d8eb0b", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="62d647e71077eace15ec037f9c106ccbed23f5fa647c6fc0b6e598ac3bf066edced3f889a90e305331e3575335bc9828e42270a94df443ab63daf89260d52560e00a7bdfae0e1230663acb01b6f5492f2e77bc77f3f8706de1a492d5d983691ef69cfeb4e88efc2c4d9fed521b76b88e2db546dc6477cb4012be5e1641b8cd3cc84ed3b623a50ce95c1c4fc17f0e1696962511981ef6d1f9b7a0cebd08cd00c12b6b17ab9885110c513c972c7337a73063a938f14e8d10224826b881ada5cf25a68c125da82b750343da2d2c1a9778") 07:25:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x0, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:24 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 22) 07:25:24 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x200000}) 07:25:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x0, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:24 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) sendmmsg(r1, &(0x7f0000006d80)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002280)=[{&(0x7f00000000c0)="fa748b655945ad489f87cba4145f0e4b4be4eda851a5ce2fb1583b5d12979a711ae293d0a8737db4c3c11e72d44ede23113e460b80d389d391fcd21bd3bd52a7404b950eb8d848462824ac312235d4f51b8576c8eebbb0d3971289db6970545a23417d33d7d2d24ac22d73310e8b6edd79326b5a3aece430c4e1e58e6a963b9534466bf3dafec755c73f3b454b828f95baf4a88db8dfa63dab1dee598e3b6ee1d6bbaefd83f2170f76", 0xa9}, {&(0x7f0000000180)="356f14d4f887dd40e734358316095919c24a34855de56c355f9650204aa0f3daacd2171857601bf8f9", 0x29}, {&(0x7f00000001c0)="5b2026ee192add2e5c7150aae9ee62d4e0672dc7f0a68fdf3368b2d98b3e8ec6ca05c4fd91df87bfbf2e127f1fd89dd048196a6643a9dae84ebf336b672f21c5e9a0ba2df5c1bb4b5ffc6534ffdcad54bb64dd598f218fcfc0e011da7c37b1379e8c37592f84bb9c73e77c64b993852888626d57c209ac9b4af20827b24111a9430e4319febdb462677747a21add3deae1180a76a739994f55efc9dfeafc97b579e302627baf4689df5d35e853b4507848ab", 0xb2}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="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", 0x1000}], 0x5}}, {{&(0x7f0000002300)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x400000}, 0x80, &(0x7f0000002380), 0x0, &(0x7f00000023c0)=[{0xa8, 0x10d, 0x7fffffff, "3f3dea220d5b6bb2cad691c4c4ec4fc64dc650c26e8a976d6fbfdc18f9abae9ff2977bc7bd25076e49350056fa68850752d721bccbaaab3deff5190087cacf02a573649ea83ceda5cecb9971f11ce0e6139e0925e07af7a751a91f766f957e53f2b79b9e24d65cac40937f3e73b5f08cbdf9df7ed4e23b7b36503f386bfe075ef1d2b2de8024e676db314e13375f4270a98953c5"}, {0x100, 0x11, 0x5, "44d9d5d766bac4d9997b668b3a8f1d2f05b0574e3d4a67bb9c910fd0e3e96b7926b76c9ce95eeca437230498fcf22dd0b43303b4c910dc7495f5a1c8380349e9cd29245a792256f09cdc8b9bb4793e38bd97cb95ddcb07553c0255558cf3a25a0590e6d0b64baa53f90016787fd066dd11cb6bd7ebb22e8bdf5641a98ba83288a3db1bf1dbd0e958aa5d1f7accc9e3972ba5811b42cbd6b140aec9d364220f38b7b614693ec17190312a980bcdb1e7ea8ac29329b7e6fb5b44a32e6c4b55a91171dd644dcacdff14252d73a0d826217ef4afcb6d06426027f01c1e4677efceec7dbcfb977bbe9561ba466053"}, {0x108, 0x115, 0x1, "cfd5fc98b73dab9ecd21ab6cf93162511bace0c3bb28d51c3ae646cefeb5b42a61a5772dc116c6cd55cdcf306edddec7706fcdaa2db20f24b3c37f466e19b7fdfb741efe7767f1be9632d922e64a8017541c8f1fef9ea6044126c7082ca4812779b348d03da85264c1f0037e3f7449940cc17bcc4af55c0e5b0c532372158dafae2c6c4bb7ed41473d20959faced8aa70d404fb6348a69754a817358e4da342ea29cddd97b58a67e65c039de3743aa20497602d50b35b9dc55d60d2f68e60a716269ac7d8304d0045fc47fca007e4cc541660d0e7abf300f42f8d7bfa3b4103958968194ed4fb8d2d1cf1de6464734c467"}, {0x108, 0x116, 0x9, "d0941c534668409faa3b7a53b6a56cf34aa0712a902ebd7bca6350af9dbaad08be0a025743cc1354326ddb9e44b2b83a38859953d800be51b7c14054398246598c294e5cb3aaabea03fa6cea7b22ba22711920f73722e2eafa30c57a281dd9a282ac390f59a610fc432bc1ee66f186ff9ce0935e4600122faf5c78376f93c6a15acc7cbeb050a8528b9c2ddec88781c3c0bf5c747a53e54f70e3b4df6f17f254985375fe671ca335f17e6c8eb25f18aa97b35efc8a1e3f7969742fd1e5b723580474140fb2758579582a97295b365b66f3001f32b5c55b6ac2f602d536e1708feba1ec317a5121bd4fb805686397e6d4f3b07f85"}, {0x80, 0x111, 0x2, "fd759e0289120a75a7175f0eb641acaa1009093ad3dec4d7996a37b6092b3aa1302f8773575826eb7261a936aea659ae2c8b6c0bd4d05657f241c8d24601bfc2a66705a58bdbb400f1db70fe3830232600025524a50cf11564f24b562a48876cc8e72ffd0112c70d1e7a"}, {0x1010, 0x6, 0x9, "00dd294d3754fe5195bdc0eb7840f0c522458c3d63f71038ab442f1f1d52803dac52918b07c831d976596fee72e4c6d7d47376a1f0153be3d48d5283abc2248f2571d0d82620d73c3585753e670fb711c79493d6baa19779bea91b73f151c44d87a684688a7ed9088ecee0e131a722b03849135777103cd82b943fbaa0d7f1d9217bb2e40b3fb9cde4ad28966fdc6ff8b5387e5ca3dcace1ada95b81787d2295c7939782b84072ef4444412e8317ee3c860d8bfe20fa3005bf1d998cf981db6967bee95286eb2f211c0e28edd9862e188a19d38fe08dae4dda50421d962c2d8f9baa88771ad0967277eb7531b40e2dc5aae1edf3601387a02791408488e8def3e7791ef55287509e0c52583d5ab9419309458fe18770da97a56ebe7f3d2f02301a5cc8d396f0215e945feeda0a214ded2827754cae78e152d1ae7c51d96c148c52fc91504473c175f22d33627feeeee67d8c6356d8c2016a9b7b86886d166c2f4937285a77156e14386ef9c3c67ceef12c4f2d052b4b3d367d0822c631a18ad68fa86105ab1063b2d693b0e2f092565e67d4daca8fa3f317c96fcc6710d8509eca9bf0a2b4a750c1f05f1ee1fbd0a8babe23caf3e9ab409121f9099d99460df111bceffb8e0b9c1c373a6ebb4a483ae1d1cb56cf26799caea7159f2be17995e9312683d0047e8f375fe5c5ea34f63ae4d147559980240a69503cc20e9cecc437f0e4821e23e787dff84e7db3e5311f8d9a41274a81bf93256e62aa4a7e238c8894c80835498d1666735a6eb05aad2e3b613e82c8d5ec14c66b857452cd55787735af943d34dd76e26498bb9acc7ca4f0ef9a465a96e028d0011c33ba363759efc3a6d99aaad61496285c67fec95edc8e75d6758c51874d1a58678e171646ba9a44bddb34cd5d25b490ecf795abf8795e490649521be7f3373f29165ba514217cd037ac00eb66e0289c3fae3377c7ea18335e71ab434c200e6a0cd20f33bf1e2f60428b5571c3b4cf6002db3b44bbf6453b2414660bcae4c8b076f40e933b215c5c84b0620fdf47805ccfac0e0750724b22af8226acb0603de0bb673e68568c017768ca0dd9f3134fae916b46258a284a447be3a31854ed47fd92da7635c19a874c8393ae36b0e0af33974f83d0ad3b17a16757e8c2f8daf0b6b57704dc883dc9e5e9b59d996c5e8bb1e1b72961fa1b225922a3f451bc7e9e73a51c4383aa6f8c6a0e9099e1e77e3422595a8e7478ca63345388600b846eba04e6dca52ecb8ff7ea3ea90b7c72e6e279474299396433e2c2b90a89adaeaff6620c3dd001c084cc5bda578ec5dc5ce565728c964a94fa9f08338e85c3edd07ba423c71b49e3f733505bb8e9c0b160587d64cf988c21b14a7f8d48b6a0aff931d783c90cddce9286ed9c2ac0766f7cbb5b6059e4a0e99a8930374f3f0602f610ef2836bce758ef3de7125137cdfd71519cff9c620f10104a24425bb4b91a843549b82e058c337b3907337771aeb47025816b4e25bf70a26c52a353b927d25f87c5d3c231fd66966c3d24375c6752303ad57ba0abfb176c0e113b8236c1a4d6aec873ef531525320b07db40c6dcd89c76ecf1580275a2380acd91591258750ced96cca3d9b100015e2b3d89d2ee21eae114739636525c06f0356d077ff790395168ee9a0feeb1dc689256f73e672490138f1ea6094da6b17467a234ee6eedad5d02982dc3cda483be46e2ce385cd784f9d80b21917a26716d0ac5e80a700ecbb8bf0b7be6df47bcf6085bc21613c6648a1ecf187404562ddc8d37ee45a769a6bce471bcfef9c2656ac1dd373ba5e62b934f9d5cad84d171229c59bd9583ee0cdc5d6f0fd0222d40708db097cd776ee9e43724f372c18379b65e1c9a833c937c219b7679e161e1ccfef0020563996e53bb5672e2ca816fb2b81cc04be40cc89010f53cba08028718e477db495c29d5f4844033ba15dd3d707687ea7e591aca1f9909c7688ec31029848d60408fc238243f84e6507487ec18a2c683264ccbc812a0978b7873bf9025ecdaeb0ba0eb561cea321f17fb0a0ad3358b354b49fae5c204b9ac6229b4bc321b82f83b16d5ec21d0b75d26a13c9807b811cf42d9bdca9289dfb4b0505c091d5cabb3d1647d56f045ff02a4b44a12297eaf12e570c4c2bdc7965ba01935882388b6e4c5b422044f0c2e71070692f4616d9d4f62fb287662cfb617b9a6917c05c17e55427d47e34689402d089bf1d378bffed666387d719fc1680031d041530a675288dc10f2b84ed782f45a1acafb6afc353f420b65907f42e48d2ec92270ad9acb6ef818e27e1a2c0f929fc91913d23d26d38f0276ae0a3d3c6f384648597778aaff5c2d0e8befa10457ec27fe657c7c27e11a676221c0ea1347174ddb1e5956c7fedf8e9efb02e71c3737738a2b9e36275d21cc45c104e45e22722d213c15da10ccfc2721965caff612aed7ccedc600addb0a938be1dab89d5a36d8a23df733f59ba131fba8aba6fc76eb03ac63f952cab232c9f4b6a8583399119366277bbbd5a7504c9455d64ce53d65edbfe6fc8b2bebd234a1cf6152a45c34d5aa16b2a84f6c88bed3ad6f3adad8a833cc02e90f87665fb38b139b0695bc14e7e2adc9801ac1ec7afee2fbbd90807535276e2f979e41cd837a997433493ff354dd30662cda6d7ae8f19024cfe0403bb39a939349f389037b07ee5a779c1e62c1f7598460edbea007705f93416230e2f9cac10fd695448298c08aad8b177e384d08ca646c7f2d44b4d6b5dd175cf51199bc8dd7751712e3ec562f0bf824d6403afaa310151271b94ba2394545181838506a92b39dc58f2517f2412f66765ea072e7f6725461ed6bcdccb0215e9fedcebdc4bbe0bdb61ce76cf90d49433274e9aa93d250d33dd5531d1f11a1db774b951b9d3a5c06f120f04a32575a8ff847671aaaf2027f836602a721c39f18afcbfe716eb1cec4779245468965364fef8b29053ce95f95c258cbdd0a7c589b083a715ff90c2c79930031b13cbba992193099aabe4af7e67c64f5ef87caa5a3a4514586483f9e047c3c68a35e545fdae79ae6cc2fa055119e35074a5e4d789ba5a4ba54956f18823654f61e781021fb429300234dd428625e715575510f62307f7299034973c79aacc238aa4456f8c1a48bbe34096a27a2e30f2bc56a715b1b8bc3a0594dcde137e8a2732ffaac7782b4515f80a9e20b5d9d21bd34a2e2e233bd63859fd863739a367b55cdee8c9b34a6b73aaadb1d11a8bc96aa8568fcf4667b69e874d6320978305fa298df24f600feea78b658b3146dd3ed4812e18e0650a1a71f330871f2af5b8efa8d89fb7c3c73e5a3a0ae65e5c45f19c440ee340b32c5db8ed569363c2947f521c093b2d48c3519ced78675c80121e34dc60713088ecf7f1e5991bbd623d14e9997bfe91c4a00d926f09cfbe7ed7004fb3b50ce8f3ab390ceb2cf19afdc78fee8925dfa530e57b98c9d025ff0334422cef40074cdb27bb8c927927c6cc7a32cf4d00fc642ac6f72c67633af9fa10727aa2a3a6826d901df3f59c79cb41b2be68a32b3c5e8f83aee8597b2d12dcff589a9e48f8deedab2964a2a42b9b8a0a220b97ebf506df9b2f6b18d6a3cd0f2c77a302c83cba3f82ab750f638b29328ba9f8201b473f5193cbba4e217e6471ce9e9aa44d224690e18363ae3490b51dafdf9043a5310f47dae4219072a7ac5539cc75bc73eaa5a1b2942a3685b8e239be04786bd4d37783da7af8522a8b9097afe9b1340d1358e4cd7ca356c11e37bb922122e7f1e61a200d63799c84b933a598ad3f6ba5b5e02cb15fe4a95a26ac05f80b64b84a1871d7ec5dd960b9c2eaf723443dbf20fb6965c48c91886a92ed9843476d40bb0a906e7e2156287728a63e82c991c7c9ab56ae7fdb5f90fb5d1b41cde70cb097f9a430d73e8ac6ff91cae53513231e9802c618e9df4421a07cb546323eba822f4b189316db2ba98ff6b1b1711f8950b8d2180ec6c4bf9fa0131d67db5002475827b8d4883e9eb59615f557637e664ed72108f80dddd15f1aff91e30be5c19a5f149a71d5f78b7e3c65569eefbba2da71d3644b2e034e1f16b9d14fccff2944a54dadf00d363ec7f866d36df328bcdeeba429df3a78f235c54b2313ad9a133f265c7358d374f818e2026504ea76a25100e24b244a8f66aa1393e4395e8846180b6d79b75b1b99ff9fa872e207945f739b9acb9e35954b2ff41d857f76756036fa5e442cb7617a19ffb7230fa68813cdb1eb838d666006ff44248ad3537c530db65b7ff6ac124a5950a9dbf2421d9ac1bd70ed4f79d429b7b89a9f926513ac58fe4d43ab9472992457af8ff9886f2e0a897c26305e936da4d156b33bf4306c9a5d1d0ceef5f32c12caaa1d3dea45f2b5fdda8548f28c243b3f6157b815dc21918b35b09c96e6375c8c3ddc813ba6840a932df2459b4aaa3fa9c7ef50c0eb538ecf78a30f6a892c24b2e3b90dc77ff1e1816f7d209b8235a24321996f17eb58d8262af5cdaae4b723b429cce1a2484e50617ced54ec37132cb9971004d47aba5782103a26186c1fd941cff91e05c434ca02a10f3c4b85421fa881d230f67ff02447131ea6192df765bb94b5256927b97d4a534301996ac84b282762c520d97005a3cc1b90f0d00c9bb887ca237082e808b3a688215680cb948ffcafc40da6c5e4da2f58d9ad4334d37a9381b2d6a2d2dd4457a30838260af3b74537c330e5afd91529da9451a4cbd4cd7785460586083645b3bb8cca5584177fd5ebdb14e6f68aafa21b6c877d4323dd0a469ccb38eab9a4414e9a6beb17d7c941740ecff628b355abc10910c6f42a265b8960705a4c0c60e78779c42a28cc37d05b845dc9c74a193a34055f3a47dbb84878fcdd8e3a20092f12f3ab8c43d223461cd8c773d29d650beec35c77b55f8200360fc087453c2af65b5839568b3683230fb60d2f18ea07a0a11c628a4d4a768befd559b34eebc870f2492f0b63bcb0deb852cf7c66dfc9cdac16869183aa4d9d3c5d3bc32a70e7fef06610578a202f9cb128abc6aae3663d5dd34ce0705b4d02eeb7585d1a517fa5cd8e7ee87338e10012f83846d9cd2b98746a79b23ffaaaea44de5b44b361c498b7410468a40009585ad8b25893be81b5ba579f14bee4c14bd83de8bfa8b3fb8ce18530a1350bbe6c9cbba06791d8f6e7fcd31cf50f7f87593b0c7dfdf0a22f7bdc1f9c8e6bc570d9877da0ece499296dc68d7ce03ce376451e35da408fb5249e8326818365773d1ff08ec8ff2fb565c9cbb9e9d2d8c00fffd7487f5b8e75cb67417a1df6a75f277160f6fb140614b4ddf5c5e1557b4e2a4c20d7260f00aa4984c14c9ea82c906c0feb07c0a28b6506ce4e9d3de63f17e68db06a9b0ddcc84ca712985d99ce4d316da200d7e62abc81221508d23030dbe018aab6fce080bd947579a9589ef028dd2f33e527587161648e4bd6bc665e3ecd96358c1fe1b424207eaa1dd531fd68221daf75b7cb5a673de039a81101045c87c37bdb6b9a61476509e700e85ab93ed1711fd5d4ae9482e354569ed87574bfaf302f735e8334e620a9f034f927f8c6b4bf1c7bf22dc705dbfa003dc46863394d061f8d03a9132a4cd4ea80d30107acc96210332cd0cb2f573ffb0aa3d4b7327183accbc7a3b8c406a45427a4f1ba920183fe973e980ed4118c6062410220cdbab0d1d141372076fc3c47b9e00a21b32e75d07e90ed5929d47d8a2076d673e4d8e4fcc895fad2849429b1ea2971b8525df35687de7dab31c43b7a7f1012f9404d676d629"}, {0xe8, 0x112, 0x1, "6b3feffdeb7e615ca885e3581ec23a5d976a4ccf49d98764449e256d76ae210230f0d75f8f50876c17de1cc9520af68dc3af55e6adb48d23c42662e464a0fab2123e948fc27a2168dc784b2ed23f158a5f631c0287822ff001428b0e2c5775bae65bfb22857ba3850607ea50479e7391293b1099d77b0b58f9bae834b04a668686c9197eed1e5976794e0073c89a581e5c8f8919008e2c584c6ac48c53babd8d0659f1e4f5d23598cafbc0377712cb47131eb4c907c853f4a2e5ffd9c0ce0acc791a7422e82be25d059d4b2c9c4aa2cfd98083cabaacf2"}], 0x1530}}, {{&(0x7f0000003900)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000003980)="e5fe39bbcf231c842354bd5d36ce3669905b58865b76210c1ae6e5886ae31d723a8b26ba3ea9b90f02fc704b6f6b0140d2f722084403645769fd4b54023db5b0820f405511138198ccde08402d53f1e250464f2ba6da61d98976f42c1639ecd648b27188a3077014c83fff91832c4123cfe5c45b2f181831575a55fd0a46064927497af3", 0x84}, {&(0x7f0000003a40)="c0bf54e48496e5c70df18b2d9abd49144a1507f45331b2cbd7bd83b6c15aab4f0300d734a7c56eeccaec70814d45ec0c73a187774a78758782b02d7ada120887f95be819dd0584fbd49ac387099158b25e107b8929a5c451628503b506553e604a7c6cf322bc1502d3ecf439cc5a1d9b70a186fc88b9a4009bdb36247e06b0edf44b1953b797079b6eca287889d6784434c40cc8a6dd24104f30977f68a86851cc1a38faf9fa71", 0xa7}, {&(0x7f0000003b00)="b62a265c59dca06d0ae67e200109491975ff90708351f2a73586aa012a87f74ca1b1d770973960ce345bef1be170349af737505a3bde", 0x36}, {&(0x7f0000003b40)="9f76fe3b931b9eed9967600f475f12b3be60ee2bb2247ceda8ffb9c6836400a034dc614fe42cb79df79bf5ed487f1f4fa46bf1aec4e4d74396232881f96931c3bc8277f5d82dbc2223b0736de9e393c351560fa1e638f9bfb097d8a450287528", 0x60}, {&(0x7f0000003bc0)="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", 0x1000}, {&(0x7f0000004bc0)}, {&(0x7f0000004c00)="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", 0x1000}, {&(0x7f0000005c00)="8e1f0aea3654f41b707ec307066ca2289ab9bd04ff6d57e7c90fce1c71dab9e56fe9366ebaa8ae75821a1265e3f569fde3542270d60b9eb4e830666df7e1c639407b5e175d3918ef352ca827ff0cb51b1a10c1cfd9e8ec4ec9f4e9af391ff0220c5e20c8e328bf65aaeaa3275558a05930d2e07ebe1e327d888877e656c69c2e5bcc5e", 0x83}], 0x8, &(0x7f0000005d40)=[{0x20, 0x10d, 0x3f, "a45fdf39ac86616a3f1260c1b58249"}, {0x1010, 0x10f, 0x2, "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"}], 0x1030}}], 0x3, 0x40) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) 07:25:24 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1000000}) 07:25:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x2, 0x2be3e728e45afb1) syz_open_dev$sg(&(0x7f00000002c0), 0x9, 0x482800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@generic={0x3, 0x9, 0x3}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x20, 0x10000}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r4, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0xb}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000820) sendfile(r2, r2, 0x0, 0x100000002) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2033, r1, 0x10000000) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000000)) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x9628}) [ 123.021917][ T22] audit: type=1400 audit(1634541924.334:270): avc: denied { map } for pid=6301 comm="syz-executor.1" path="socket:[20099]" dev="sockfs" ino=20099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.045526][ T22] audit: type=1400 audit(1634541924.334:271): avc: denied { read } for pid=6301 comm="syz-executor.1" path="socket:[20099]" dev="sockfs" ino=20099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.073061][ T6305] FAULT_INJECTION: forcing a failure. [ 123.073061][ T6305] name failslab, interval 1, probability 0, space 0, times 0 [ 123.085792][ T6305] CPU: 1 PID: 6305 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 123.094698][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.104864][ T6305] Call Trace: [ 123.108142][ T6305] dump_stack_lvl+0xd6/0x122 [ 123.112771][ T6305] dump_stack+0x11/0x1b [ 123.117071][ T6305] should_fail+0x23c/0x250 [ 123.121898][ T6305] ? mempool_alloc_slab+0x16/0x20 [ 123.126924][ T6305] __should_failslab+0x81/0x90 [ 123.131710][ T6305] should_failslab+0x5/0x20 [ 123.136226][ T6305] kmem_cache_alloc+0x4f/0x300 [ 123.141001][ T6305] ? mempool_alloc_slab+0x16/0x20 [ 123.146010][ T6305] mempool_alloc_slab+0x16/0x20 [ 123.150964][ T6305] ? mempool_free+0x130/0x130 [ 123.155744][ T6305] mempool_alloc+0x9d/0x310 [ 123.160290][ T6305] bio_alloc_bioset+0x1af/0x530 [ 123.165266][ T6305] ext4_bio_write_page+0x7c5/0xa40 [ 123.170371][ T6305] ext4_writepages+0x10a0/0x1d70 [ 123.175312][ T6305] ? ext4_readpage+0x140/0x140 [ 123.180192][ T6305] do_writepages+0x26b/0x3c0 [ 123.184769][ T6305] ? generic_write_end+0x157/0x180 [ 123.189876][ T6305] file_write_and_wait_range+0x1ae/0x240 [ 123.195504][ T6305] ext4_sync_file+0x105/0x670 [ 123.200253][ T6305] ? tsan.module_ctor+0x10/0x10 [ 123.205492][ T6305] vfs_fsync_range+0x107/0x120 [ 123.210237][ T6305] ext4_buffered_write_iter+0x3af/0x400 [ 123.215892][ T6305] ext4_file_write_iter+0x2e7/0x11f0 [ 123.221166][ T6305] ? __alloc_pages+0x194/0x320 [ 123.225911][ T6305] ? alloc_pages+0x382/0x3d0 [ 123.230546][ T6305] do_iter_readv_writev+0x2de/0x380 [ 123.235730][ T6305] do_iter_write+0x192/0x5c0 [ 123.240313][ T6305] ? splice_from_pipe_next+0x34f/0x3b0 [ 123.245766][ T6305] ? kmalloc_array+0x2d/0x40 [ 123.250429][ T6305] vfs_iter_write+0x4c/0x70 [ 123.254922][ T6305] iter_file_splice_write+0x43a/0x790 [ 123.260351][ T6305] ? splice_from_pipe+0xd0/0xd0 [ 123.265181][ T6305] direct_splice_actor+0x80/0xa0 [ 123.270097][ T6305] splice_direct_to_actor+0x345/0x650 [ 123.275451][ T6305] ? do_splice_direct+0x190/0x190 [ 123.280461][ T6305] do_splice_direct+0x106/0x190 [ 123.285313][ T6305] do_sendfile+0x63e/0xbb0 [ 123.289758][ T6305] __x64_sys_sendfile64+0x102/0x140 [ 123.294943][ T6305] do_syscall_64+0x44/0xa0 [ 123.299342][ T6305] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 123.305269][ T6305] RIP: 0033:0x7f6acfff5a39 [ 123.309666][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.329272][ T6305] RSP: 002b:00007f6acdd2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 123.337670][ T6305] RAX: ffffffffffffffda RBX: 00007f6ad00f90e0 RCX: 00007f6acfff5a39 [ 123.345663][ T6305] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 123.353621][ T6305] RBP: 00007f6acdd2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 123.361579][ T6305] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 07:25:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x0, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 123.369547][ T6305] R13: 00007ffdc0def71f R14: 00007f6acdd2a300 R15: 0000000000022000 [ 123.393751][ T22] audit: type=1400 audit(1634541924.704:272): avc: denied { ioctl } for pid=6309 comm="syz-executor.1" path="socket:[20657]" dev="sockfs" ino=20657 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.419534][ T22] audit: type=1400 audit(1634541924.714:273): avc: denied { read } for pid=6309 comm="syz-executor.1" path="socket:[20657]" dev="sockfs" ino=20657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 07:25:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5418, 0x0) 07:25:25 executing program 1: sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40c0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000030601010000000000000000079c8ebf"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x24000080) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000003c0)={0x4}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d40000000004010027cd7000fbdbdf25ac14140e00001500000000000000000000000000200000004e0904004e24003f0000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0100000000000000378cffffffffffff05000000000000000700000000000000f000000000000000020000000000000000000000000000000500000000000000070038000000000008000000000000000004000000000000080000000000000001000000b96b6e000001160200000000030000000000000008001d00400000000a0110"], 0xd4}, 0x1, 0x0, 0x0, 0x448c0}, 0x40000) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 07:25:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x0, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x0, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:25 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x2000000}) 07:25:25 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) (fail_nth: 23) 07:25:25 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x3000000}) [ 123.846754][ C1] scsi_io_completion_action: 5 callbacks suppressed [ 123.846781][ C1] sd 0:0:1:0: tag#7765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 123.863328][ C1] sd 0:0:1:0: tag#7765 CDB: opcode=0xe5 (vendor) [ 123.869668][ C1] sd 0:0:1:0: tag#7765 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 123.878707][ C1] sd 0:0:1:0: tag#7765 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 123.879474][ T6333] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1024 sclass=netlink_xfrm_socket pid=6333 comm=syz-executor.1 [ 123.887755][ C1] sd 0:0:1:0: tag#7765 CDB[20]: ba [ 123.914883][ T6334] FAULT_INJECTION: forcing a failure. [ 123.914883][ T6334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.927991][ T6334] CPU: 0 PID: 6334 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 123.936699][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.946911][ T6334] Call Trace: [ 123.950176][ T6334] dump_stack_lvl+0xd6/0x122 [ 123.954754][ T6334] dump_stack+0x11/0x1b [ 123.958930][ T6334] should_fail+0x23c/0x250 [ 123.963331][ T6334] should_fail_usercopy+0x16/0x20 [ 123.968337][ T6334] _copy_to_user+0x1c/0x90 [ 123.972775][ T6334] simple_read_from_buffer+0xab/0x120 [ 123.978160][ T6334] proc_fail_nth_read+0x10d/0x150 [ 123.983248][ T6334] ? proc_fault_inject_write+0x230/0x230 [ 123.988867][ T6334] vfs_read+0x1e6/0x750 [ 123.993011][ T6334] ? do_sendfile+0x9c3/0xbb0 [ 123.997596][ T6334] ? __fget_light+0x21b/0x260 [ 124.002298][ T6334] ? __cond_resched+0x11/0x40 [ 124.006964][ T6334] ksys_read+0xd9/0x190 [ 124.011152][ T6334] __x64_sys_read+0x3e/0x50 [ 124.015700][ T6334] do_syscall_64+0x44/0xa0 [ 124.020126][ T6334] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 124.026244][ T6334] RIP: 0033:0x7f6acffa85ec 07:25:25 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x4000000}) [ 124.030718][ T6334] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 124.050355][ T6334] RSP: 002b:00007f6acdd4b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.059099][ T6334] RAX: ffffffffffffffda RBX: 000000000000002e RCX: 00007f6acffa85ec [ 124.067499][ T6334] RDX: 000000000000000f RSI: 00007f6acdd4b1e0 RDI: 0000000000000008 [ 124.075478][ T6334] RBP: 00007f6acdd4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 124.083461][ T6334] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 07:25:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:25 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x7000000}) [ 124.091454][ T6334] R13: 00007ffdc0def71f R14: 00007f6acdd4b300 R15: 0000000000022000 07:25:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:25 executing program 1: r0 = getpid() r1 = gettid() sched_setattr(r1, &(0x7f0000000140)={0x38, 0x3, 0x20, 0xfffffffc, 0x3ff, 0x6a2, 0xfff, 0x8, 0x7fffffff, 0x5}, 0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xfb, 0x7f, 0xea, 0x6, 0x0, 0xffffffff, 0x4, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x90, 0x6, 0xfffffffc, 0x1, 0xffffffffffff8000, 0xdc2, 0xe371, 0x0, 0x800, 0x0, 0xaf}, r0, 0xe, r2, 0x0) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) [ 124.167998][ C0] sd 0:0:1:0: tag#7792 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 124.177933][ C0] sd 0:0:1:0: tag#7792 CDB: opcode=0xe5 (vendor) [ 124.184269][ C0] sd 0:0:1:0: tag#7792 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 124.193331][ C0] sd 0:0:1:0: tag#7792 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 124.202365][ C0] sd 0:0:1:0: tag#7792 CDB[20]: ba 07:25:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x541b, 0x0) 07:25:25 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) 07:25:25 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x9000000}) 07:25:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:25 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x8400, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}, 0x22}]}}) 07:25:26 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xc000000}) [ 124.659200][ T6352] EXT4-fs warning: 9 callbacks suppressed [ 124.659215][ T6352] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 124.725069][ C1] sd 0:0:1:0: tag#7796 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 124.734925][ C1] sd 0:0:1:0: tag#7796 CDB: opcode=0xe5 (vendor) [ 124.741246][ C1] sd 0:0:1:0: tag#7796 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 124.750278][ C1] sd 0:0:1:0: tag#7796 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 124.759333][ C1] sd 0:0:1:0: tag#7796 CDB[20]: ba 07:25:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:26 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xd000000}) [ 124.767235][ T6365] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 124.837304][ C1] sd 0:0:1:0: tag#7803 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 124.847170][ C1] sd 0:0:1:0: tag#7803 CDB: opcode=0xe5 (vendor) [ 124.847600][ T6372] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 124.853519][ C1] sd 0:0:1:0: tag#7803 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 124.853540][ C1] sd 0:0:1:0: tag#7803 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 07:25:26 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xe000000}) [ 124.853577][ C1] sd 0:0:1:0: tag#7803 CDB[20]: ba [ 124.943992][ T6377] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x541d, 0x0) 07:25:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:26 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xf000000}) 07:25:26 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8f) 07:25:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 125.561903][ T6382] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:26 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x10000000}) 07:25:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 125.607508][ C1] sd 0:0:1:0: tag#7803 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 125.617391][ C1] sd 0:0:1:0: tag#7803 CDB: opcode=0xe5 (vendor) [ 125.623764][ C1] sd 0:0:1:0: tag#7803 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 125.632816][ C1] sd 0:0:1:0: tag#7803 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 125.641943][ C1] sd 0:0:1:0: tag#7803 CDB[20]: ba 07:25:27 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x11000000}) 07:25:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 125.679282][ T6395] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 125.718430][ C1] sd 0:0:1:0: tag#7790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 125.728281][ C1] sd 0:0:1:0: tag#7790 CDB: opcode=0xe5 (vendor) [ 125.734665][ C1] sd 0:0:1:0: tag#7790 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 125.743723][ C1] sd 0:0:1:0: tag#7790 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 125.752778][ C1] sd 0:0:1:0: tag#7790 CDB[20]: ba [ 125.767923][ T6402] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:27 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x12000000}) [ 125.797052][ C0] sd 0:0:1:0: tag#7769 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 125.806921][ C0] sd 0:0:1:0: tag#7769 CDB: opcode=0xe5 (vendor) [ 125.813278][ C0] sd 0:0:1:0: tag#7769 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 125.822343][ C0] sd 0:0:1:0: tag#7769 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 125.831409][ C0] sd 0:0:1:0: tag#7769 CDB[20]: ba [ 125.856408][ T6405] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x541e, 0x0) 07:25:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8}, 0xffffffffffffffff, 0x6, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:27 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x13000000}) 07:25:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:27 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xbd) 07:25:27 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x14000000}) [ 126.442599][ T6415] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 126.498615][ C0] sd 0:0:1:0: tag#7757 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 126.508465][ C0] sd 0:0:1:0: tag#7757 CDB: opcode=0xe5 (vendor) [ 126.514814][ C0] sd 0:0:1:0: tag#7757 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 126.523826][ C0] sd 0:0:1:0: tag#7757 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 126.532332][ C1] sd 0:0:1:0: tag#7758 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 126.532866][ C0] sd 0:0:1:0: tag#7757 CDB[20]: ba 07:25:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) [ 126.542660][ C1] sd 0:0:1:0: tag#7758 CDB: opcode=0xe5 (vendor) [ 126.554072][ C1] sd 0:0:1:0: tag#7758 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 126.556701][ T6426] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 126.563127][ C1] sd 0:0:1:0: tag#7758 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 126.583246][ C1] sd 0:0:1:0: tag#7758 CDB[20]: ba 07:25:27 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x15000000}) 07:25:27 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:27 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x16000000}) [ 126.679547][ C1] sd 0:0:1:0: tag#7790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 126.689416][ C1] sd 0:0:1:0: tag#7790 CDB: opcode=0xe5 (vendor) [ 126.695834][ C1] sd 0:0:1:0: tag#7790 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 126.705014][ C1] sd 0:0:1:0: tag#7790 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 126.714052][ C1] sd 0:0:1:0: tag#7790 CDB[20]: ba 07:25:28 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x17000000}) 07:25:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x541e, 0x0) 07:25:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:28 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:28 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x202) 07:25:28 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x18000000}) 07:25:28 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x10000000}) 07:25:28 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:28 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x19000000}) 07:25:28 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x20000000}) 07:25:28 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x3c) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000491c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004a3c0)={0x0, 0x0, "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", "dd7a50902cb86b8af0ceac29c00d8638e167057ce7ca4a8bd1e50aa7e06e3f4fc0d6d4066a39d1e9120d7d1e8393a85c5319d5da94657d75f769293819299088d20f611e9922f19d75790e3ea951adc1e1fda504194d4da8ede73f770ff66d481eeaef86a11f776b2f52164d94667cf8f9c20a46d455f484cd943eef5b818023c3341835bd41a93489d2c27b93bce8996f603fa45adfea49c340918d6cab01602772614d1b958c2076f90bef5d45042b60670d8d31bbbe2e55fe9c32a90fbb550dd7ab3abb2ab4499bcceabfab245ca331ce2abf281b689c1270961ce03fc535c31e78ab727ccc72bd946fc4fde0e14c8296e451fbd096b9bf22c8b8c43d4944f9dac6fba11909f9dfe7445f0bfa05beca85c3b7cc2fa68db87e6ca5a2f0033aabec8bc52a36dfa42db2c09872d697500bd2398cd0e8dacba2fc6b9318f138b870bc4ff183ba7cb5bbfcfe1827410d0795a14c271482744cd5b92e541c85e77a9915a0f7ed712e7ddafbea426b76cef7cc1331ae1094a6c44c1bbec6d2f736f836e1438ecb27d346436f4af46abea3d793c4cf6520fef66d64fb66312dba8e8803d63b5543c0c28f5a558cb21ec7c68e1137cc40a2a4980f8e55357431bf7b57d41b356ce1930be70fb32cc90a815b229ccee520c1f4f301f4deca2efd52e6e08254f0c561cf077805045107e082a5977fcdb7c98af05c8398cda427679423f3f33622558e6bf4e4ef35c315c6f1fad3b71155b5e341b6755ca8eb2675d73793dacfb3d660b7f52ed5fc69aaac6c4ea11d3b3a47707d9516af800354eeb4800294e5f0c773593ed00249d0132a1dc0566e93ffb60fe6af0cdf7627b40cdb35eb82e53278e0800d651a82e2ef62a3bdc9e19f9288c238fdff62e5a2cbb1aac58fcea01a9ce7e27eb9d1ca3a41597a548a110cbcd7f4489dcaaf6ca7641efa4776e6f5e26887119b6ce6733a0f82da7b6f86a8db54a39168b07799cc9ca98c0fe47901be6e5f1910c861a4a3cadaadb87519df620ac1d617d87b4da3884a8aa41f56b403a2616b297cd4b75a5deae6ec5540c2f84aa44c19cab99691bdb2e2e3cc0ae01bd25e1711d37da4bd016d6cc0845b01c453114c9a49e38c676d25824708aa624b10df978b52414767974bd17b6861048fdbf2c953089e6b1949e972a211bf95e6adc33def52ab1f440034cf0102997837ec980a13fdf3ca0194507462ba31358ea0d018e08ff323d633af1299ff71459cffa8860dc6e3872785df65de69b56c64bcbfa1dc2bb2237d15a249fbd061072cea84c2ae21b53d5d53339133c44761fd409170fe58c6ae85cea52b01dc17331df7ebfc5e702515c857956a551484269fc8c6d10e43ab61dc37127783dcf8aaafce0306de5ce4206a75c211a6ef575c6d2d31951c5a48c6420d47ed6138e4261a24a057d88d783ae98717786fef2b7b173c0a67dc731f4649b0857970f504d720be77f7269f28b318eec1e9c394a0916da5e71c33aafd105572ee81a4e3d68f820d05d39980300b7665ea31b1fdbd51c9f1aaf942590df073facc8e0921df775f719e20c188204f47ac9458c3f538bbcec5578cef0232b7e0c8864b4719cb86ea72e2868e3d37df4a4b0be6a573cf241cfcb69db5e3c34d31d4f22e07fba4f0b4d53955b88cabb5786bc9224c8fb652cfa044c292b06a85508870f4e7a15746170d27417dddcfee6392aadb1784c149acfd78f96179f208042afa533336b417af6100c3d171284d2d8ee2d807517d124797b181bfaf271e61c4f0169cb7fc14346176ce5fccc7ef2b60088e63482dc68fa1363cc3be01b24a6c6192e8f59806d0bacd7317530dece2f23c955de9f6c24580d787bf8844cc7ef39c795edd74029b2f7cfef5aff7a1999ffd93a0fb98d932e4782e4f6d378b68614bd686f2bfb59c6e3dc4c4fbef9ead25dcaf5b1402fa49bd88aff43e2dde50b41855dd1ef6fd0fe012f1d6d38f9a24054acd53f17b1797ca096dd8cf849f77951c864f07775fff0fc60aa6534fdc961a469440c7918b9e781229a763abf0b5ad3bcb25e508ed3e67ab57c0867a6c1aa1fcd3ae19d6e6e7e82607d07001a52112a443da88ca5d48548485bf45011a8de490d8bde9a318d36e03dcef8494a662cfd8dda96859a9fdcc595fa274ec8472955523dbe319fa54c6d27427267b4cbed08c0a6a7b7c4abe7a9e94ace9d3c90ae0d6b7a76d1c37cf968cdbb7c2b5e924f56ac0715694a6914886b6e4a4a8af4141054368b63ae130cdc498593d763aaee08d5ecb8422b2fed33c50bcc8a8211280dabac6b26ed7f1a6d61a37e441394f339e4da45feb23b8c1b4af4e1cf245cd119ddcea7daf64a2f6fd459cd4e3e40c1387efb12981fe249d9da3ed09dbfb0461c6ce830c594150aa090963b343c2d763a950b61f3ef0fc3c99d3b1c8b2f29d4a05fec05ea0d7b395f49a5af33d5a35a0ec44ec79a0c158c96eb44408504bf02df94ab7aaace65afff23969839233ef7f1297d461da58ed0dc3bb699b390d122cf2246c5fbb284a418eec0f0dfa3d0ce2893dc5322a31077c074f52f615dede68aca38e2bc528483674ff0e9ff1d7f304330aed5b84cb99cf5a5e4cdf10e27806cd7111ee68db3d42ca46650bc30a733257a2fb64ca6e43a79b2465202da19ab76ef1a7f94bb154340f000fbd7bf38d7412c2af5eb93f92be1aee6d44d0242b8bc8fc379b2131a39048743793e87039698bfcb95e804a931ef4f2f594757d840aa628eb4903b4e29dcced102594435c50384dc143c2f5b08e6ecd045352f1e8b4120464b81a88ae85eb8d12dea603a7b5a0e31cb65bafb7c687cb6ee98d6160806d40366790378c62364784c9a7c8e10db349512e09acf62109988db860294e3514535f65ed78d100366b1f148befba4df7170a744df990f5994f728a7a14df09b537569b1911192e84d8c0539b36f082ac872c58890e7dccbc34450fba7ebc84ddf0f39174583a9cac49e2e18673b250e376da6b9866a797a26dbb528f359fc8563286145e1f34161bc34ae06cec7127c2d96d23440a2cf2c9bbe9e28785d3632bba30cc9688d51e9ad1b1222ef519964b3a52cc41b37a2a462c19e0422ab13fadf3b2f340b11758b74e306bce245d126972ad0dfc02871eee88b6b946a7c4360affff301ab49c86a8a6b2468ca1258701b76350dbd34962353aaa0424731544928a60cb1bfda6b40b23a052ce9a74e8701f6ab766b5d4290524515fc4ac29a8dc3756ab705a57ff2a6d4cd17b378cf785ca729d55eab46ad4e734d1072839c04bb875ab4b018f8590f342afe5b0b5cb4da2b1f65c71da87e3c9e1119f8c64eacd6331d83fe40d6f0625b7d743a9fece1cb152ceea6265fe5815e41bee989fa47550d59593e2a73684b27bb5909c1828051b65b045669b3c666eb960be4b551eca5005324b8c41a0f2d75bdaba7a89066e1915b5972f572f7de7b1c104a6fbe6075d29bba87ff54570ac38dcebb55d09e1a8587d628458b37c1d6e5d0c69dccc04106bf8bf5036961efd4631acd31bd6f9ba5db870ad73b67415ea836ab82dee84395285827e6392d76dcd93755edda0414be8e116ae1c9ba701b716cf52a41b105c686e6b4852a017164ae5a320fc62f59e7b18a021e8c6cd2fc09fc263eb9efbea828d25046fa0f8e6c6dad5aededaa3686fd05b03c71751fedccf114631220c830a422ee8d311cf679289d9809a17331f923a853605170893de180091de12217b163f46bb629c6a772a700ba9e697bc7fc5238e24d84086f63cf5ca6fa5ce605cb67ec25e951f1527c15597afce01a5f6a98e41c959fdd537e7155976ff66f761ab890ed2cc04795fc93734b7f7df5ce1c8c221501798b22bffc7118a7db43c68bcb79c979b7476c7fedb4a7e909ea67134b003eb43ff5207e0cdb6803747912a86f34145cb0d8725371878844e7929d7059438fca8aabef04d10be279d8a94f43f29922e07d4e9d76c863a2d640d8dbd6a6570f3674029cdd0908d67570761f5cf96cd3ca7916c7f764c41e8ebed565f3a5e606f67a5dba2ebea4eeaf3706404338ace01b8d33af150aa6a862ea141763b70f70312d93620c657350328764f89ca0394dc3530845564594f8c8964dd94186c29fb2536839e4932994569324f312b11241eaa6834c8a622a67f3bf370115213f09ce678e8f63961e1fb999b65d6cfe9734f385f238c0f2abe57451b18492f95ec73d0251a5e7bb8d0d45c6c3032775ca5c9879b4a2de0906429b383cfa118011e38d301e23027bd269f9c5aefaba4803d448c35d7ade29a484086a560a6df1e23987548f439e73cbf746a55d65292ad142e411857f6cc39c51b307f32ec71a2adeae184f2573578ef17fa691ef9b629b5a689853e70fe7d64a83e51c2bfad3f4340f31ca65703e1046ed66f26a9e4bcdcc4013e12a93660492c8a35bc4de54a39eb9c5fd4f20720fd0fa13ffdaae5a7b94aa429f08006697832661e14caa26a247da2035f44f427bd3b2b844e5f223e70999b1d1d4a791ee0771f0d9abe028614eb35fb671198b868d7a248777a5381fbc4aeb5df7b7f13e17b12cdbaf711541f786641f201a40fbc9d6a67962f8876504e103b9d44ce8661b76c18ecf55606817d0a0d928723abff0af714df8620da60b358e929a385bf6cf4a14151993ae5499642616dbec33b1148a77e070c30edf1f09defa8be701cf4b653c7379f15b4fd2bc6f44457bedec443cf6ce8efa40e39485e584cf0327ff77fb5a0da52a9ba14f8a6dc8d1e3eb5fd9cf0cf7b49b3ef840e4d7b42de6f7b6552e7ff462b3d1db9856fc02f60b9f487e6b61e29fc76777840bf85374079424d621c2efd670f559a208bcef7c01193d0cf3ac713e3606fa7cb0e0f83d591350fa82881e488bd82add73e77c00834c809d4e88311ce48d087ccbe6fecb8bc023e9779e4beb2ea4b840e9de4d5a5d2b5170af2625784faa63155a9eb96575bf49c450147fbaf9bb271758594d9e77668cbcbe9bc4917077a242be63ed539a9c92b3bfd682632991077462b41df620567ba069006172182ad3581f565ee7ce982935663bfc737a11c61c115b74d247641f1502384faaefcba7e84c6112125e7230877c69f0e00f0c2470d4a418974ad591f93daa44b7fd2e6fea12e7d896fb887f5844250755b68d687fa5742b4291b2eefcfa8be52d9d9514cfb9ec7b7fc997e10b866e90b9b9e24625ac4b2dc6cb9685947cb3a27b491c5fc24a6c93ef63d763b0e21fc87c122a3af9be8b56686b696a3e6184f2ac9459a47ae165120f6687df49309a4d1f71882bb242c9362f3d8b912e0d7778fa35aa49528388e64db0e4ae87d28072cfaef1e23d45908308a7e182fc8ca50a71eed0c4c0d93a2de530557dfead8837b4c9d1c"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5}, {}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {r5}, {}, {r5}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {r5, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {}, {0x0, 0x0}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {r4}, {r4}, {}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {}, {}, {}, {r5, r6}, {r4, r6}, {r5, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4}, {}, {}, {}, {0x0, r6}, {r1, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r4}, {}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r4}, {}, {r5}, {}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {r5, r6}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {r4, r6}, {}, {}, {}, {r5}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {}, {r5}, {}, {}, {}, {}, {r5}, {}, {r5}, {r4, r6}, {}, {}, {}, {0x0, r6}, {}, {r4, r6}, {}, {r5}, {r5}, {r4}, {}, {r5}, {r5}, {}, {}, {}, {r5}, {0x0, r6}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r9 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b3c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r4, r8}], 0x0, "82fad84bd94426"}) vmsplice(r9, 0x0, 0x0, 0x0) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x3, r11) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r11, &(0x7f0000001f00)=[{0x0}, {&(0x7f0000001d80)="b28b9da59bda61cfe56b4a516bbb91b314987d03039e8bef3b54180ebeb436e45eb5aee90a2aa0b39fe393d21e53475e24d7d830f70320d298044b9a2f17ca1febd6c2920dae2a9004893bba71a2383f2986a7876049656bd17ce9d98a8208e863e0172680ef3cece2dc7b228fe38ee97bfe45e444d79f9d769d51dae7a2ca59ca2c72b553d6fa90d17f17f8886221b1942e6898a42c85460a5d8b649e5008a9ddf53fd9816dbc25c6ca932c0ee55d9a5773d290a11dc4f113717fcc46bcda5b2e4a28ba3252b5015c4283ab6e2fedb84e5855f48e7e55eb654fc64a4e8899d54975484766201bcaa8d55842eda3", 0xee}], 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000200)='3d', 0x5c6, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 07:25:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5421, 0x0) 07:25:29 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:29 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x22000000}) 07:25:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:29 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x203) 07:25:29 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x40000000}) 07:25:29 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:29 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xf5ffffff}) 07:25:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x0) unshare(0x66060400) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/244) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000001c0)={0x57, 0x0, 0x0, {}, {}, @ramp}) unshare(0x0) 07:25:29 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xf8ff1f00}) [ 128.373358][ T22] audit: type=1400 audit(1634541929.684:274): avc: denied { read } for pid=6496 comm="syz-executor.1" name="event0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.396910][ T22] audit: type=1400 audit(1634541929.684:275): avc: denied { ioctl } for pid=6496 comm="syz-executor.1" path="/dev/input/event0" dev="devtmpfs" ino=115 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 07:25:30 executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0\x00') write(r0, &(0x7f0000000600)="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", 0x200) pivot_root(0x0, 0x0) sendfile(r0, r1, 0x0, 0xef85) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={{r2, r3/1000+10000}, {0x0, 0xea60}}, 0x0) 07:25:30 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5423, 0x0) 07:25:30 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xfbffffff}) 07:25:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:30 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x204) 07:25:30 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xffefffff}) 07:25:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, 0x0, 0x0) 07:25:30 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xffffefff}) [ 129.150201][ C1] scsi_io_completion_action: 5 callbacks suppressed [ 129.150232][ C1] sd 0:0:1:0: tag#7759 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 129.166685][ C1] sd 0:0:1:0: tag#7759 CDB: opcode=0xe5 (vendor) [ 129.173025][ C1] sd 0:0:1:0: tag#7759 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 129.182131][ C1] sd 0:0:1:0: tag#7759 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 129.191207][ C1] sd 0:0:1:0: tag#7759 CDB[20]: ba 07:25:30 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xfffffff5}) 07:25:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, 0x0, 0x0) 07:25:30 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 129.322250][ C1] sd 0:0:1:0: tag#7758 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 129.332104][ C1] sd 0:0:1:0: tag#7758 CDB: opcode=0xe5 (vendor) [ 129.338435][ C1] sd 0:0:1:0: tag#7758 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 129.347472][ C1] sd 0:0:1:0: tag#7758 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 129.356513][ C1] sd 0:0:1:0: tag#7758 CDB[20]: ba 07:25:30 executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0\x00') write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) pivot_root(0x0, 0x0) sendfile(r0, r1, 0x0, 0xef85) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={{r2, r3/1000+10000}, {0x0, 0xea60}}, 0x0) 07:25:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5424, 0x0) 07:25:31 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xfffffffb}) 07:25:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, 0x0, 0x0) 07:25:31 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, 0x0, 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:31 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:31 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x205) [ 130.002023][ T6550] EXT4-fs warning: 15 callbacks suppressed [ 130.002037][ T6550] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 130.062095][ C0] sd 0:0:1:0: tag#7788 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 130.071949][ C0] sd 0:0:1:0: tag#7788 CDB: opcode=0xe5 (vendor) [ 130.078307][ C0] sd 0:0:1:0: tag#7788 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 130.082133][ T6558] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 130.087386][ C0] sd 0:0:1:0: tag#7788 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 130.087404][ C0] sd 0:0:1:0: tag#7788 CDB[20]: ba 07:25:31 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x200000000000}) 07:25:31 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1000000000000}) [ 130.123778][ C1] sd 0:0:1:0: tag#7754 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 130.133651][ C1] sd 0:0:1:0: tag#7754 CDB: opcode=0xe5 (vendor) [ 130.140028][ C1] sd 0:0:1:0: tag#7754 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 130.149110][ C1] sd 0:0:1:0: tag#7754 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 130.158261][ C1] sd 0:0:1:0: tag#7754 CDB[20]: ba 07:25:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x40000) 07:25:31 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x2000000000000}) [ 130.168151][ T6562] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:31 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:31 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, 0x0, 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 130.233213][ T6568] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 130.260398][ C0] sd 0:0:1:0: tag#7781 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 130.270356][ C0] sd 0:0:1:0: tag#7781 CDB: opcode=0xe5 (vendor) [ 130.276719][ C0] sd 0:0:1:0: tag#7781 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 130.285753][ C0] sd 0:0:1:0: tag#7781 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 130.294782][ C0] sd 0:0:1:0: tag#7781 CDB[20]: ba [ 130.321831][ C0] sd 0:0:1:0: tag#7796 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 130.331707][ C0] sd 0:0:1:0: tag#7796 CDB: opcode=0xe5 (vendor) [ 130.338055][ C0] sd 0:0:1:0: tag#7796 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 130.347098][ C0] sd 0:0:1:0: tag#7796 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 130.356131][ C0] sd 0:0:1:0: tag#7796 CDB[20]: ba 07:25:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5425, 0x0) 07:25:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x40000) 07:25:32 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x100000000000000}) 07:25:32 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, 0x0, 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:32 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, 0x0, 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:32 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x206) [ 130.862930][ T6574] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 130.917138][ C1] sd 0:0:1:0: tag#7806 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 130.927021][ C1] sd 0:0:1:0: tag#7806 CDB: opcode=0xe5 (vendor) [ 130.927886][ C0] sd 0:0:1:0: tag#7744 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 130.933333][ C1] sd 0:0:1:0: tag#7806 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 130.933350][ C1] sd 0:0:1:0: tag#7806 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 130.943157][ C0] sd 0:0:1:0: tag#7744 CDB: opcode=0xe5 (vendor) 07:25:32 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x200000000000000}) [ 130.952156][ C1] sd 0:0:1:0: tag#7806 CDB[20]: ba [ 130.961179][ C0] sd 0:0:1:0: tag#7744 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 130.981620][ C0] sd 0:0:1:0: tag#7744 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 130.990842][ C0] sd 0:0:1:0: tag#7744 CDB[20]: ba 07:25:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x40000) 07:25:32 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, 0x0, 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:32 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x300000000000000}) [ 131.013870][ T6589] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:32 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 131.091881][ T6598] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 131.114939][ C1] sd 0:0:1:0: tag#7801 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 131.115890][ C0] sd 0:0:1:0: tag#7802 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 131.124785][ C1] sd 0:0:1:0: tag#7801 CDB: opcode=0xe5 (vendor) [ 131.134579][ C0] sd 0:0:1:0: tag#7802 CDB: opcode=0xe5 (vendor) [ 131.140886][ C1] sd 0:0:1:0: tag#7801 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 131.147234][ C0] sd 0:0:1:0: tag#7802 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 131.147255][ C0] sd 0:0:1:0: tag#7802 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 131.156257][ C1] sd 0:0:1:0: tag#7801 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 131.156273][ C1] sd 0:0:1:0: tag#7801 CDB[20]: ba 07:25:32 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 131.165285][ C0] sd 0:0:1:0: tag#7802 CDB[20]: ba 07:25:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5427, 0x0) 07:25:33 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xffffefff}) 07:25:33 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x400000000000000}) 07:25:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x40000) 07:25:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:33 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x207) 07:25:33 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x700000000000000}) [ 131.789248][ T6607] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:33 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x203) 07:25:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 1) 07:25:33 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x900000000000000}) [ 131.862916][ T6620] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:33 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xc00000000000000}) [ 131.926652][ T6628] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 131.957474][ T6626] FAULT_INJECTION: forcing a failure. [ 131.957474][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 131.970209][ T6626] CPU: 1 PID: 6626 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 131.978887][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.988932][ T6626] Call Trace: [ 131.992362][ T6626] dump_stack_lvl+0xd6/0x122 [ 131.996947][ T6626] dump_stack+0x11/0x1b [ 132.001099][ T6626] should_fail+0x23c/0x250 [ 132.005498][ T6626] ? jbd2__journal_start+0xf7/0x3b0 [ 132.010680][ T6626] __should_failslab+0x81/0x90 [ 132.015665][ T6626] should_failslab+0x5/0x20 [ 132.020637][ T6626] kmem_cache_alloc+0x4f/0x300 [ 132.025401][ T6626] jbd2__journal_start+0xf7/0x3b0 [ 132.030504][ T6626] __ext4_journal_start_sb+0x159/0x2d0 [ 132.035950][ T6626] ? ext4_expand_extra_isize+0x560/0x560 [ 132.041577][ T6626] ext4_dirty_inode+0x58/0xa0 [ 132.046260][ T6626] __mark_inode_dirty+0x77/0x6a0 [ 132.051193][ T6626] ? current_time+0xed/0x1a0 [ 132.055765][ T6626] file_update_time+0x3b5/0x3f0 [ 132.060662][ T6626] file_modified+0x62/0x80 [ 132.065068][ T6626] ext4_file_write_iter+0x77f/0x11f0 [ 132.070336][ T6626] ? iov_iter_init+0xb1/0xf0 [ 132.074942][ T6626] vfs_write+0x7bc/0x900 [ 132.079203][ T6626] ksys_write+0xd9/0x190 [ 132.083499][ T6626] __x64_sys_write+0x3e/0x50 [ 132.088069][ T6626] do_syscall_64+0x44/0xa0 [ 132.092494][ T6626] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 132.098406][ T6626] RIP: 0033:0x7fb6f9ccda39 [ 132.102803][ T6626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.122396][ T6626] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.130816][ T6626] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 132.138773][ T6626] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 132.146737][ T6626] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 132.154715][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.162744][ T6626] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5428, 0x0) 07:25:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:34 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xd00000000000000}) 07:25:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 2) 07:25:34 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x208) 07:25:34 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0x4c, &(0x7f0000000000)={0x0}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000000240)=[{{}, 0x6e}], 0x61, 0x0) 07:25:34 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xe00000000000000}) [ 132.754328][ T6642] FAULT_INJECTION: forcing a failure. [ 132.754328][ T6642] name failslab, interval 1, probability 0, space 0, times 0 [ 132.767345][ T6642] CPU: 0 PID: 6642 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 132.776111][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 132.786153][ T6642] Call Trace: [ 132.789541][ T6642] dump_stack_lvl+0xd6/0x122 [ 132.794166][ T6642] dump_stack+0x11/0x1b [ 132.798338][ T6642] should_fail+0x23c/0x250 [ 132.802731][ T6642] ? jbd2__journal_start+0xf7/0x3b0 [ 132.808051][ T6642] __should_failslab+0x81/0x90 [ 132.812883][ T6642] should_failslab+0x5/0x20 [ 132.817423][ T6642] kmem_cache_alloc+0x4f/0x300 [ 132.822186][ T6642] jbd2__journal_start+0xf7/0x3b0 [ 132.827264][ T6642] __ext4_journal_start_sb+0x159/0x2d0 [ 132.832735][ T6642] ext4_iomap_begin+0x408/0x630 [ 132.837593][ T6642] ? ext4_alloc_da_blocks+0xd0/0xd0 [ 132.842890][ T6642] iomap_iter+0x39c/0x470 [ 132.847350][ T6642] __iomap_dio_rw+0x698/0x1010 [ 132.852129][ T6642] iomap_dio_rw+0x30/0x70 [ 132.856504][ T6642] ext4_file_write_iter+0xa59/0x11f0 [ 132.861784][ T6642] ? iov_iter_init+0xb1/0xf0 [ 132.866360][ T6642] vfs_write+0x7bc/0x900 [ 132.870711][ T6642] ksys_write+0xd9/0x190 [ 132.874937][ T6642] __x64_sys_write+0x3e/0x50 [ 132.879539][ T6642] do_syscall_64+0x44/0xa0 [ 132.883937][ T6642] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 132.889830][ T6642] RIP: 0033:0x7fb6f9ccda39 07:25:34 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xf00000000000000}) [ 132.894239][ T6642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.914968][ T6642] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.923402][ T6642] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 132.931362][ T6642] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 132.939327][ T6642] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 132.947306][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 07:25:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002100)=[{{&(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0x8000) close(r0) 07:25:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 3) [ 132.955276][ T6642] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:34 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200), 0x120010, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c616e616d653d5d265b2a972c7569643d907a3feac072c5311cf6a383c49fe9eae27f2e2efaef54cc181cd1", @ANYRESDEC=0x0, @ANYBLOB=',fsuuid=b5b79e\x003-733b-29f8-82b2-82aeed64,\x00']) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @private}, &(0x7f0000000300)=0xc) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/125, 0x7d) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2005, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 133.052885][ T6662] FAULT_INJECTION: forcing a failure. [ 133.052885][ T6662] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.066350][ T6662] CPU: 1 PID: 6662 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 133.075115][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.085241][ T6662] Call Trace: [ 133.088509][ T6662] dump_stack_lvl+0xd6/0x122 [ 133.093122][ T6662] dump_stack+0x11/0x1b [ 133.097273][ T6662] should_fail+0x23c/0x250 [ 133.101667][ T6662] __alloc_pages+0x102/0x320 [ 133.106273][ T6662] alloc_pages+0x382/0x3d0 [ 133.110717][ T6662] __page_cache_alloc+0x4d/0xf0 [ 133.115549][ T6662] pagecache_get_page+0x5fe/0x910 [ 133.120584][ T6662] grab_cache_page_write_begin+0x3f/0x70 [ 133.126206][ T6662] ext4_da_write_begin+0x323/0x570 [ 133.131301][ T6662] generic_perform_write+0x1b8/0x3e0 [ 133.136612][ T6662] ext4_buffered_write_iter+0x305/0x400 [ 133.142152][ T6662] ext4_file_write_iter+0xe79/0x11f0 [ 133.147531][ T6662] ? iov_iter_init+0xb1/0xf0 [ 133.152114][ T6662] vfs_write+0x7bc/0x900 [ 133.156348][ T6662] ksys_write+0xd9/0x190 [ 133.160660][ T6662] __x64_sys_write+0x3e/0x50 [ 133.165263][ T6662] do_syscall_64+0x44/0xa0 [ 133.170071][ T6662] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 133.175993][ T6662] RIP: 0033:0x7fb6f9ccda39 [ 133.180388][ T6662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.200176][ T6662] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.208569][ T6662] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 133.216540][ T6662] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 133.224590][ T6662] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 133.232729][ T6662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.240852][ T6662] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5441, 0x0) 07:25:34 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1000000000000000}) 07:25:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, 0x0, 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:34 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) pipe2(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e84, &(0x7f00000016c0)={0x0, 0x8, 0x3, 0x1, 0x1df}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000001740)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000007c0), 0x0, 0xd}, 0xfffffffd) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001640)={0x53, 0xfffffffffffffffd, 0xd6, 0x3, @buffer={0x0, 0x1000, &(0x7f0000000440)=""/4096}, &(0x7f0000001440)="1924cd3d358f4d9f04734e7f9f5a70f41c7dc06acad6d90a067a98b73637c86126c1aae3a9b1442ae90d5a4f04d855cf315fb3010f78e85a9622e1fbf3485e5f3b64a2a9d6f07942f2a3a2647095359ddc8ff690b52a9174b5913d218e2fedff0b8918c222ba4bfb98cca78d4a92424ce88101e8581626b05f9deb53e9de6383559ddbc768724994568604bde5da953ad44a48c9868015db2e9f54990161ff6a0e8858906c78d1e78eb971217904857c07a3a512f35b3d965cdd0d80a368bbb1de1474171c46086a94aaebab430d870c7ab9ba8d2306", &(0x7f0000001540)=""/227, 0x5, 0x21, 0x3, &(0x7f0000000300)}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x3}, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48004}, 0x4000800) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000070c0)=""/102400, 0x19000}], 0x5}}], 0x1, 0x2020, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1f92, 0xd74a, 0x3, &(0x7f0000000100)={[0xa6a6]}, 0x8) 07:25:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 4) 07:25:34 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x209) [ 133.652824][ T6673] FAULT_INJECTION: forcing a failure. [ 133.652824][ T6673] name failslab, interval 1, probability 0, space 0, times 0 [ 133.665717][ T6673] CPU: 1 PID: 6673 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 133.674395][ T6673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.684442][ T6673] Call Trace: [ 133.687796][ T6673] dump_stack_lvl+0xd6/0x122 [ 133.692465][ T6673] dump_stack+0x11/0x1b [ 133.696652][ T6673] should_fail+0x23c/0x250 [ 133.701090][ T6673] ? __es_insert_extent+0x51f/0xe70 [ 133.706379][ T6673] __should_failslab+0x81/0x90 [ 133.711221][ T6673] should_failslab+0x5/0x20 [ 133.715726][ T6673] kmem_cache_alloc+0x4f/0x300 [ 133.720483][ T6673] __es_insert_extent+0x51f/0xe70 [ 133.725499][ T6673] ext4_es_insert_delayed_block+0x11b/0x390 [ 133.731386][ T6673] ext4_da_get_block_prep+0x506/0x970 [ 133.736926][ T6673] __block_write_begin_int+0x4c5/0x1080 [ 133.742486][ T6673] ? ext4_da_release_space+0x230/0x230 [ 133.748086][ T6673] ? ext4_da_release_space+0x230/0x230 07:25:35 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1100000000000000}) [ 133.753588][ T6673] __block_write_begin+0x2b/0x40 [ 133.758597][ T6673] ext4_da_write_begin+0x34e/0x570 [ 133.763753][ T6673] generic_perform_write+0x1b8/0x3e0 [ 133.769110][ T6673] ext4_buffered_write_iter+0x305/0x400 [ 133.774662][ T6673] ext4_file_write_iter+0xe79/0x11f0 [ 133.779940][ T6673] ? iov_iter_init+0xb1/0xf0 [ 133.784519][ T6673] vfs_write+0x7bc/0x900 [ 133.788785][ T6673] ksys_write+0xd9/0x190 [ 133.793037][ T6673] __x64_sys_write+0x3e/0x50 [ 133.797798][ T6673] do_syscall_64+0x44/0xa0 07:25:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000200)=0x4000042) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000002c0)={0x0, 0x0, {0x2a, 0x2bb, 0x10019, 0x40000d, 0x2000004, 0x4, 0x4, 0x58, 0xffffffffffffffff}}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x4f, 0x0, "00000000000000000000000000000000000000000000000000008000007200000000000000000000439a00000000000000000000000000000000000000000000000000006926ed0c00"}, 0xd8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp, @sack_perm, @window={0x3, 0xc591}, @timestamp, @window={0x3, 0x800}, @mss={0x2, 0x6}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000004c0)={0x0, 0x3, 0x7fffffdd}, 0x14) shutdown(r0, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000640)={0x4, {{0x2, 0x4e21, @local}}, 0x0, 0xa, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e20, @rand_addr=0x64010101}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e20, @remote}}]}, 0x590) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) [ 133.802221][ T6673] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 133.808152][ T6673] RIP: 0033:0x7fb6f9ccda39 [ 133.812554][ T6673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.832153][ T6673] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.840593][ T6673] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 07:25:35 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, 0x0, 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:35 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1200000000000000}) 07:25:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 5) [ 133.848560][ T6673] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 133.856703][ T6673] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 133.864665][ T6673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.872621][ T6673] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000200)=0x4000042) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000002c0)={0x0, 0x0, {0x2a, 0x2bb, 0x10019, 0x40000d, 0x2000004, 0x4, 0x4, 0x58, 0xffffffffffffffff}}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x4f, 0x0, "00000000000000000000000000000000000000000000000000008000007200000000000000000000439a00000000000000000000000000000000000000000000000000006926ed0c00"}, 0xd8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp, @sack_perm, @window={0x3, 0xc591}, @timestamp, @window={0x3, 0x800}, @mss={0x2, 0x6}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000004c0)={0x0, 0x3, 0x7fffffdd}, 0x14) shutdown(r0, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000640)={0x4, {{0x2, 0x4e21, @local}}, 0x0, 0xa, [{{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e20, @rand_addr=0x64010101}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e20, @remote}}]}, 0x590) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) [ 133.976907][ T6699] FAULT_INJECTION: forcing a failure. [ 133.976907][ T6699] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.990220][ T6699] CPU: 1 PID: 6699 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 133.998988][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.009052][ T6699] Call Trace: [ 134.012320][ T6699] dump_stack_lvl+0xd6/0x122 [ 134.016897][ T6699] dump_stack+0x11/0x1b [ 134.021937][ T6699] should_fail+0x23c/0x250 [ 134.026375][ T6699] __alloc_pages+0x102/0x320 [ 134.030981][ T6699] alloc_pages+0x382/0x3d0 [ 134.035681][ T6699] __page_cache_alloc+0x4d/0xf0 [ 134.040661][ T6699] pagecache_get_page+0x5fe/0x910 [ 134.045735][ T6699] grab_cache_page_write_begin+0x3f/0x70 [ 134.051397][ T6699] ext4_da_write_begin+0x323/0x570 [ 134.056555][ T6699] generic_perform_write+0x1b8/0x3e0 [ 134.061827][ T6699] ext4_buffered_write_iter+0x305/0x400 [ 134.067428][ T6699] ext4_file_write_iter+0xe79/0x11f0 [ 134.072764][ T6699] ? iov_iter_init+0xb1/0xf0 [ 134.077346][ T6699] vfs_write+0x7bc/0x900 [ 134.081574][ T6699] ksys_write+0xd9/0x190 [ 134.085815][ T6699] __x64_sys_write+0x3e/0x50 [ 134.090402][ T6699] do_syscall_64+0x44/0xa0 [ 134.094873][ T6699] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 134.100877][ T6699] RIP: 0033:0x7fb6f9ccda39 [ 134.105303][ T6699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.125111][ T6699] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.133617][ T6699] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 134.141768][ T6699] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 134.149724][ T6699] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 134.157677][ T6699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.165807][ T6699] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5450, 0x0) 07:25:35 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1300000000000000}) 07:25:35 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, 0x0, 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:35 executing program 1: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) ppoll(&(0x7f0000000080)=[{r0, 0x100}, {r0, 0x8000}, {r0, 0x404}, {r0, 0x14}, {r0, 0x7a8}], 0x5, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={[0x528]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) lremovexattr(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="ee"]) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1030c0, 0x100) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006005600600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000003980)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000001", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x0, &(0x7f0000000040)=ANY=[]) recvmmsg$unix(r2, &(0x7f0000000700)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/89, 0x59}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/72, 0x48}, {&(0x7f0000000500)=""/129, 0x81}], 0x4, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x100}}], 0x1, 0x10043, &(0x7f0000000740)={0x77359400}) sched_setattr(r1, &(0x7f0000000800)={0x38, 0x6, 0x10000012, 0x4, 0x6, 0x5, 0x9, 0x8dda, 0x80, 0x450}, 0x0) rt_tgsigqueueinfo(r3, r1, 0xf, &(0x7f0000000780)={0xb, 0x8, 0x8}) 07:25:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 6) 07:25:35 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20a) 07:25:35 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1400000000000000}) [ 134.573995][ C1] scsi_io_completion_action: 9 callbacks suppressed [ 134.574024][ C1] sd 0:0:1:0: tag#7753 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 134.575728][ T6706] FAULT_INJECTION: forcing a failure. [ 134.575728][ T6706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 134.580683][ C1] sd 0:0:1:0: tag#7753 CDB: opcode=0xe5 (vendor) [ 134.580702][ C1] sd 0:0:1:0: tag#7753 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 134.580720][ C1] sd 0:0:1:0: tag#7753 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 134.590821][ T6706] CPU: 0 PID: 6706 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 134.603986][ C1] sd 0:0:1:0: tag#7753 CDB[20]: ba [ 134.610253][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.610265][ T6706] Call Trace: [ 134.610272][ T6706] dump_stack_lvl+0xd6/0x122 [ 134.660079][ T6706] dump_stack+0x11/0x1b [ 134.664235][ T6706] should_fail+0x23c/0x250 [ 134.668636][ T6706] __alloc_pages+0x102/0x320 [ 134.673310][ T6706] alloc_pages+0x382/0x3d0 [ 134.677731][ T6706] __page_cache_alloc+0x4d/0xf0 [ 134.682581][ T6706] pagecache_get_page+0x5fe/0x910 [ 134.687643][ T6706] grab_cache_page_write_begin+0x3f/0x70 [ 134.693298][ T6706] ext4_da_write_begin+0x323/0x570 [ 134.698487][ T6706] generic_perform_write+0x1b8/0x3e0 [ 134.703791][ T6706] ext4_buffered_write_iter+0x305/0x400 [ 134.709338][ T6706] ext4_file_write_iter+0xe79/0x11f0 [ 134.714638][ T6706] ? iov_iter_init+0xb1/0xf0 [ 134.719251][ T6706] vfs_write+0x7bc/0x900 [ 134.723527][ T6706] ksys_write+0xd9/0x190 [ 134.730983][ T6706] __x64_sys_write+0x3e/0x50 [ 134.735643][ T6706] do_syscall_64+0x44/0xa0 [ 134.740088][ T6706] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 134.745986][ T6706] RIP: 0033:0x7fb6f9ccda39 [ 134.750415][ T6706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:25:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:36 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1500000000000000}) [ 134.770337][ T6706] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.778754][ T6706] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 134.786726][ T6706] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 134.794781][ T6706] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 134.802752][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.810894][ T6706] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:36 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1600000000000000}) 07:25:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 7) 07:25:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 134.933972][ T6730] FAULT_INJECTION: forcing a failure. [ 134.933972][ T6730] name failslab, interval 1, probability 0, space 0, times 0 [ 134.946568][ T6730] CPU: 1 PID: 6730 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 134.955273][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.965327][ T6730] Call Trace: [ 134.968598][ T6730] dump_stack_lvl+0xd6/0x122 [ 134.973199][ T6730] dump_stack+0x11/0x1b [ 134.977344][ T6730] should_fail+0x23c/0x250 [ 134.981740][ T6730] ? xas_create+0x3fb/0xb30 [ 134.986228][ T6730] __should_failslab+0x81/0x90 [ 134.991077][ T6730] should_failslab+0x5/0x20 [ 134.995570][ T6730] kmem_cache_alloc+0x4f/0x300 [ 135.000318][ T6730] xas_create+0x3fb/0xb30 [ 135.004648][ T6730] xas_store+0x70/0xca0 [ 135.008848][ T6730] ? memcg_check_events+0x23/0x3b0 [ 135.013947][ T6730] ? get_page_from_freelist+0x55e/0x830 [ 135.019487][ T6730] ? cgroup_rstat_updated+0x34/0x100 [ 135.024762][ T6730] ? xas_find_conflict+0x422/0x4c0 [ 135.029922][ T6730] __add_to_page_cache_locked+0x20b/0x4f0 [ 135.035661][ T6730] ? workingset_activation+0x270/0x270 [ 135.041151][ T6730] add_to_page_cache_lru+0xa0/0x1b0 [ 135.046442][ T6730] pagecache_get_page+0x6ad/0x910 [ 135.051530][ T6730] grab_cache_page_write_begin+0x3f/0x70 [ 135.057150][ T6730] ext4_da_write_begin+0x323/0x570 [ 135.062265][ T6730] generic_perform_write+0x1b8/0x3e0 [ 135.067538][ T6730] ? ext4_da_write_begin+0x570/0x570 [ 135.072850][ T6730] ext4_buffered_write_iter+0x305/0x400 [ 135.078488][ T6730] ext4_file_write_iter+0xe79/0x11f0 [ 135.083763][ T6730] ? iov_iter_init+0xb1/0xf0 [ 135.088335][ T6730] vfs_write+0x7bc/0x900 [ 135.092633][ T6730] ksys_write+0xd9/0x190 [ 135.096863][ T6730] __x64_sys_write+0x3e/0x50 [ 135.101458][ T6730] do_syscall_64+0x44/0xa0 [ 135.105858][ T6730] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.111749][ T6730] RIP: 0033:0x7fb6f9ccda39 [ 135.116150][ T6730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.135742][ T6730] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.144143][ T6730] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 135.152159][ T6730] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 135.160144][ T6730] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 135.168102][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.176079][ T6730] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5451, 0x0) 07:25:36 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1700000000000000}) 07:25:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 8) 07:25:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:36 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = clone3(&(0x7f0000000200)={0x100850080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x19}, &(0x7f00000000c0)=""/129, 0x81, &(0x7f0000000180)=""/55, &(0x7f00000001c0)=[r0, r0, r0], 0x3}, 0x58) tkill(r1, 0x21) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x1) 07:25:36 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20b) [ 135.460259][ T6739] EXT4-fs warning: 11 callbacks suppressed [ 135.460272][ T6739] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:36 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1800000000000000}) 07:25:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 135.511104][ T6748] FAULT_INJECTION: forcing a failure. [ 135.511104][ T6748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.524338][ T6748] CPU: 0 PID: 6748 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 135.533040][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.543095][ T6748] Call Trace: [ 135.546375][ T6748] dump_stack_lvl+0xd6/0x122 [ 135.551236][ T6748] dump_stack+0x11/0x1b [ 135.555425][ T6748] should_fail+0x23c/0x250 [ 135.559844][ T6748] should_fail_usercopy+0x16/0x20 [ 135.564868][ T6748] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 135.570597][ T6748] generic_perform_write+0x201/0x3e0 [ 135.575903][ T6748] ? ext4_da_write_begin+0x570/0x570 [ 135.581200][ T6748] ext4_buffered_write_iter+0x305/0x400 [ 135.586750][ T6748] ext4_file_write_iter+0xe79/0x11f0 [ 135.592038][ T6748] ? iov_iter_init+0xb1/0xf0 [ 135.596631][ T6748] vfs_write+0x7bc/0x900 [ 135.600892][ T6748] ksys_write+0xd9/0x190 [ 135.605149][ T6748] __x64_sys_write+0x3e/0x50 07:25:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 135.609748][ T6748] do_syscall_64+0x44/0xa0 [ 135.614302][ T6748] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.620268][ T6748] RIP: 0033:0x7fb6f9ccda39 [ 135.624675][ T6748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.644369][ T6748] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.652782][ T6748] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 07:25:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 9) [ 135.660760][ T6748] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 135.668845][ T6748] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 135.676912][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.684883][ T6748] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 [ 135.699731][ T6763] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:37 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x1900000000000000}) [ 135.763485][ T6767] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 135.788730][ T6766] FAULT_INJECTION: forcing a failure. [ 135.788730][ T6766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.801980][ T6766] CPU: 0 PID: 6766 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 135.811001][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.821242][ T6766] Call Trace: [ 135.824504][ T6766] dump_stack_lvl+0xd6/0x122 [ 135.829086][ T6766] dump_stack+0x11/0x1b [ 135.833224][ T6766] should_fail+0x23c/0x250 [ 135.837617][ T6766] should_fail_usercopy+0x16/0x20 [ 135.842756][ T6766] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 135.848578][ T6766] generic_perform_write+0x201/0x3e0 [ 135.853850][ T6766] ? ext4_da_write_begin+0x570/0x570 [ 135.859187][ T6766] ext4_buffered_write_iter+0x305/0x400 [ 135.864714][ T6766] ext4_file_write_iter+0xe79/0x11f0 [ 135.869980][ T6766] ? iov_iter_init+0xb1/0xf0 [ 135.874568][ T6766] vfs_write+0x7bc/0x900 [ 135.878814][ T6766] ksys_write+0xd9/0x190 [ 135.883085][ T6766] __x64_sys_write+0x3e/0x50 [ 135.887653][ T6766] do_syscall_64+0x44/0xa0 [ 135.892154][ T6766] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.898159][ T6766] RIP: 0033:0x7fb6f9ccda39 [ 135.902552][ T6766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.922315][ T6766] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.930733][ T6766] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 135.938701][ T6766] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 135.946671][ T6766] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 135.954621][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.962625][ T6766] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5452, 0x0) 07:25:37 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:37 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x2000000000000000}) 07:25:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 10) [ 136.354229][ T6773] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 136.377064][ T6771] FAULT_INJECTION: forcing a failure. [ 136.377064][ T6771] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 136.390540][ T6771] CPU: 1 PID: 6771 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 136.399222][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.409566][ T6771] Call Trace: [ 136.412903][ T6771] dump_stack_lvl+0xd6/0x122 [ 136.417486][ T6771] dump_stack+0x11/0x1b [ 136.421642][ T6771] should_fail+0x23c/0x250 [ 136.426065][ T6771] __alloc_pages+0x102/0x320 [ 136.430688][ T6771] alloc_pages+0x382/0x3d0 [ 136.435260][ T6771] __page_cache_alloc+0x4d/0xf0 [ 136.440270][ T6771] pagecache_get_page+0x5fe/0x910 [ 136.445299][ T6771] grab_cache_page_write_begin+0x3f/0x70 [ 136.450928][ T6771] ext4_da_write_begin+0x323/0x570 [ 136.456084][ T6771] generic_perform_write+0x1b8/0x3e0 [ 136.461374][ T6771] ? ext4_da_write_begin+0x570/0x570 [ 136.466689][ T6771] ext4_buffered_write_iter+0x305/0x400 [ 136.472216][ T6771] ext4_file_write_iter+0xe79/0x11f0 [ 136.477657][ T6771] ? iov_iter_init+0xb1/0xf0 [ 136.482315][ T6771] vfs_write+0x7bc/0x900 [ 136.486559][ T6771] ksys_write+0xd9/0x190 [ 136.490810][ T6771] __x64_sys_write+0x3e/0x50 [ 136.495380][ T6771] do_syscall_64+0x44/0xa0 [ 136.499779][ T6771] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 136.505809][ T6771] RIP: 0033:0x7fb6f9ccda39 [ 136.510289][ T6771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.529943][ T6771] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.538345][ T6771] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 136.546314][ T6771] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 136.554264][ T6771] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 136.562214][ T6771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.570282][ T6771] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:39 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x2200000000000000}) 07:25:39 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20c) 07:25:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 11) 07:25:39 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:39 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}}}, &(0x7f0000000000)=0xe8) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r4) setresuid(0xee00, r0, r4) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x64, 0x0) 07:25:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x545d, 0x0) [ 138.483417][ T6789] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 138.524037][ T6786] FAULT_INJECTION: forcing a failure. [ 138.524037][ T6786] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.537451][ T6786] CPU: 0 PID: 6786 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 138.546265][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 138.556321][ T6786] Call Trace: [ 138.559598][ T6786] dump_stack_lvl+0xd6/0x122 [ 138.564279][ T6786] dump_stack+0x11/0x1b [ 138.568481][ T6786] should_fail+0x23c/0x250 [ 138.572906][ T6786] __alloc_pages+0x102/0x320 [ 138.577512][ T6786] alloc_pages+0x382/0x3d0 [ 138.581959][ T6786] __page_cache_alloc+0x4d/0xf0 [ 138.586842][ T6786] pagecache_get_page+0x5fe/0x910 [ 138.591895][ T6786] grab_cache_page_write_begin+0x3f/0x70 [ 138.597589][ T6786] ext4_da_write_begin+0x323/0x570 [ 138.602750][ T6786] generic_perform_write+0x1b8/0x3e0 [ 138.608221][ T6786] ? ext4_da_write_begin+0x570/0x570 [ 138.613599][ T6786] ext4_buffered_write_iter+0x305/0x400 [ 138.619152][ T6786] ext4_file_write_iter+0xe79/0x11f0 07:25:39 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:39 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x80002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x1, 0x29, 0x80, 0x17, 0x0, 0x9, 0x8000, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, @perf_bp={&(0x7f00000001c0), 0x6}, 0x40000, 0x6, 0x7, 0x1, 0x5, 0x9, 0x3ff, 0x0, 0x4, 0x0, 0x7ff}, 0xffffffffffffffff, 0xd, r0, 0xa) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000540)={0x101, 0x80000001, 0x3, 0x6, 0x1, [{0x7ff, 0x401, 0x4, '\x00', 0x885}]}) r5 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0xffffffffffffffff]}, 0x8, 0x800) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, r6}}, 0x80000000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) signalfd4(r5, &(0x7f0000000180)={[0xc0000000]}, 0x8, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x7000)=nil, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_enter(r0, 0x71a1, 0xf499, 0x2, &(0x7f0000000500)={[0x7]}, 0x8) sendfile(r8, r7, 0x0, 0x100000002) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2033, r7, 0x10000000) readlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file0/file0\x00', &(0x7f00000005c0)=""/174, 0xae) 07:25:39 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x4000000000000000}) [ 138.624513][ T6786] ? iov_iter_init+0xb1/0xf0 [ 138.629094][ T6786] vfs_write+0x7bc/0x900 [ 138.633344][ T6786] ksys_write+0xd9/0x190 [ 138.633367][ T6786] __x64_sys_write+0x3e/0x50 [ 138.633389][ T6786] do_syscall_64+0x44/0xa0 [ 138.633412][ T6786] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 138.633504][ T6786] RIP: 0033:0x7fb6f9ccda39 [ 138.633520][ T6786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 138.633537][ T6786] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.633555][ T6786] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 138.633564][ T6786] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 138.633574][ T6786] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 138.633584][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 07:25:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 12) [ 138.633594][ T6786] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 [ 138.636033][ T6800] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 138.725362][ T6804] FAULT_INJECTION: forcing a failure. [ 138.725362][ T6804] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.751944][ T6804] CPU: 1 PID: 6804 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 138.751961][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 138.751968][ T6804] Call Trace: [ 138.751972][ T6804] dump_stack_lvl+0xd6/0x122 [ 138.751989][ T6804] dump_stack+0x11/0x1b [ 138.752000][ T6804] should_fail+0x23c/0x250 [ 138.752011][ T6804] __alloc_pages+0x102/0x320 [ 138.752060][ T6804] alloc_pages+0x382/0x3d0 [ 138.752074][ T6804] __page_cache_alloc+0x4d/0xf0 [ 138.752088][ T6804] pagecache_get_page+0x5fe/0x910 [ 138.752103][ T6804] grab_cache_page_write_begin+0x3f/0x70 [ 138.752192][ T6804] ext4_da_write_begin+0x323/0x570 [ 138.752208][ T6804] generic_perform_write+0x1b8/0x3e0 [ 138.752222][ T6804] ? ext4_da_write_begin+0x570/0x570 [ 138.752236][ T6804] ext4_buffered_write_iter+0x305/0x400 [ 138.752334][ T6804] ext4_file_write_iter+0xe79/0x11f0 [ 138.752360][ T6804] ? iov_iter_init+0xb1/0xf0 [ 138.752371][ T6804] vfs_write+0x7bc/0x900 [ 138.752416][ T6804] ksys_write+0xd9/0x190 [ 138.752429][ T6804] __x64_sys_write+0x3e/0x50 [ 138.752450][ T6804] do_syscall_64+0x44/0xa0 [ 138.752476][ T6804] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 138.752499][ T6804] RIP: 0033:0x7fb6f9ccda39 07:25:40 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xf5ffffff00000000}) [ 138.752514][ T6804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 138.752531][ T6804] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.752550][ T6804] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 138.752563][ T6804] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 07:25:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0xe8, 0x218, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000100), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x7, 0x3}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0x5, 0x2000, 0x1, 0x0, "3898c99a26e92b8bfc1e640f7241b50d12921e55040fba995b1437941410e77bdb53343f2199fe6be3c3dea34ce4bc8e6dca9f84bf9ff0056bbbde78b7724b06"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="ba2fbeabb431", @multicast1, @empty, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) vmsplice(r1, &(0x7f0000000780)=[{&(0x7f00000000c0)='d', 0x1}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) r3 = dup3(0xffffffffffffffff, r2, 0x80000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r1) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x104, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5d1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4008840}, 0x20040040) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x41) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f00000005c0)=""/245) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 07:25:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 13) [ 138.752574][ T6804] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 138.752584][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.752591][ T6804] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 [ 138.928968][ T6807] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 139.004918][ T6811] FAULT_INJECTION: forcing a failure. [ 139.004918][ T6811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.018161][ T6811] CPU: 1 PID: 6811 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 139.026842][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.036902][ T6811] Call Trace: [ 139.040180][ T6811] dump_stack_lvl+0xd6/0x122 [ 139.044806][ T6811] dump_stack+0x11/0x1b [ 139.048961][ T6811] should_fail+0x23c/0x250 [ 139.053455][ T6811] should_fail_usercopy+0x16/0x20 [ 139.058474][ T6811] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 139.064353][ T6811] generic_perform_write+0x201/0x3e0 [ 139.069630][ T6811] ? ext4_da_write_begin+0x570/0x570 [ 139.074898][ T6811] ext4_buffered_write_iter+0x305/0x400 [ 139.082425][ T6811] ext4_file_write_iter+0xe79/0x11f0 [ 139.087832][ T6811] ? iov_iter_init+0xb1/0xf0 [ 139.092404][ T6811] vfs_write+0x7bc/0x900 [ 139.096634][ T6811] ksys_write+0xd9/0x190 [ 139.100877][ T6811] __x64_sys_write+0x3e/0x50 [ 139.105447][ T6811] do_syscall_64+0x44/0xa0 [ 139.109861][ T6811] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 139.115932][ T6811] RIP: 0033:0x7fb6f9ccda39 [ 139.120406][ T6811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 139.140081][ T6811] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.148544][ T6811] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 139.156610][ T6811] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 139.164567][ T6811] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 139.172615][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.180568][ T6811] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:40 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20d) 07:25:40 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xf8ff1f0000000000}) 07:25:40 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x1c243911) keyctl$chown(0x4, r2, 0xee00, 0xee01) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x1c243911) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=@newpolicy={0x244, 0x13, 0x1, 0x70bd2d, 0x25dfdbfd, {{@in6=@empty, @in6=@private2, 0x4e20, 0x0, 0x4e24, 0xb8fb, 0xa, 0x0, 0x20, 0x3c, 0x0, 0xee01}, {0x401, 0x2, 0x8, 0xb65c, 0x8000, 0x7, 0x81, 0x7f}, {0x3, 0x101, 0x7fffffff, 0x1474}, 0x101, 0x6e6bbb, 0x2, 0x1, 0x2}, [@algo_crypt={0x6f, 0x2, {{'cbc(aes-aesni)\x00'}, 0x138, "2c4d0c9d21a4c6a487959e60951b625218cf9846c622ff7b4e0e25deb0a6285eae2fdefca0df33"}}, @algo_crypt={0x101, 0x2, {{'xchacha12-arm\x00'}, 0x5c8, "1b1f8a78d28c7e24f0c9ae9601ce08b2737bcd416bf9f6e53b2687a45fbd30bc0af4f0f65cb58dc7543c91178d430c3c9aa1ffa2ec16af4a278e51f74cd8b2ed503b80a8b83d9036850ed878713e4db087f7557fff33f32ee96ba04e0e77cb34255416857d1d5a508bf6f413d6f0c090db9628a1d5806b41e1fd3e25d5be91c59c7c35b2d514f7981df2df4fcbb869a7204ab4933a22898ae0813e244d6a601d36fc70bdd9ad4d1d11ece08252dee84c0c179ec669fea991ec"}}, @proto={0x5, 0x19, 0x3c}, @proto={0x5, 0x19, 0x2b}, @replay_thresh={0x8, 0xb, 0x5}]}, 0x244}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000001) keyctl$chown(0x4, r3, 0xee00, 0xee01) keyctl$chown(0x8, r3, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, 0x0, 0xee01) keyctl$chown(0x8, r2, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="cc011100e0000002000000000000000000000000fe88000000000000000000000000000100000000000000000000000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000ac141400000000000000000000000000ac1414aa000000000000000000000000ff020000000000000000000000000001fc020000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000000000100000000000000000000ffffac141400e00000020000000000000000000000000000000000000000000000007f00000100000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aae0000002000000000000000000000000000000000000000000000000e00000020000000000000000000000007f00000100000000000000000000000000000000000000000000000000000000ac14140000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYRESDEC=r1], 0x238}}, 0x0) 07:25:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x5460, 0x0) 07:25:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 14) 07:25:40 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xfbffffff00000000}) [ 139.336379][ T6820] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:40 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xf8ff1f0000000000}) [ 139.396537][ T6831] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:40 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xffefffff00000000}) [ 139.439733][ T6826] FAULT_INJECTION: forcing a failure. [ 139.439733][ T6826] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.453119][ T6826] CPU: 0 PID: 6826 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 139.458874][ T6837] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 139.461798][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.461813][ T6826] Call Trace: 07:25:40 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0xffffffffffffffff}) 07:25:40 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x2}) [ 139.461819][ T6826] dump_stack_lvl+0xd6/0x122 [ 139.490894][ T6826] dump_stack+0x11/0x1b [ 139.495119][ T6826] should_fail+0x23c/0x250 [ 139.499671][ T6826] __alloc_pages+0x102/0x320 [ 139.504350][ T6826] alloc_pages+0x382/0x3d0 [ 139.508810][ T6826] __page_cache_alloc+0x4d/0xf0 [ 139.513681][ T6826] pagecache_get_page+0x5fe/0x910 [ 139.518841][ T6826] grab_cache_page_write_begin+0x3f/0x70 [ 139.524570][ T6826] ext4_da_write_begin+0x323/0x570 [ 139.529696][ T6826] generic_perform_write+0x1b8/0x3e0 [ 139.535096][ T6826] ? ext4_da_write_begin+0x570/0x570 07:25:40 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x3}) [ 139.540398][ T6826] ext4_buffered_write_iter+0x305/0x400 [ 139.545986][ T6826] ext4_file_write_iter+0xe79/0x11f0 [ 139.551275][ T6826] ? iov_iter_init+0xb1/0xf0 [ 139.555920][ T6826] vfs_write+0x7bc/0x900 [ 139.560177][ T6826] ksys_write+0xd9/0x190 [ 139.564427][ T6826] __x64_sys_write+0x3e/0x50 [ 139.569213][ T6826] do_syscall_64+0x44/0xa0 [ 139.573688][ T6826] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 139.579655][ T6826] RIP: 0033:0x7fb6f9ccda39 [ 139.584076][ T6826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 139.603776][ T6826] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.612300][ T6826] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 139.620287][ T6826] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 139.628355][ T6826] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 139.636332][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.644318][ T6826] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:41 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20e) 07:25:41 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x4}) 07:25:41 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c8933d6c606010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed410000000400ec27f465d60df4655fddf4655f000000000200040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e16cd3", 0x24, 0x1600}], 0x81, &(0x7f00000003c0)=ANY=[]) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x8, 0x7800}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) connect$packet(r2, &(0x7f0000000140)={0x11, 0xb067beae71f448b4, r1, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x40002005}) 07:25:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x40049409, 0x0) 07:25:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 15) 07:25:41 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x7}) [ 140.204962][ T22] audit: type=1400 audit(1634541941.524:276): avc: denied { append } for pid=6851 comm="syz-executor.1" name="hwrng" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 07:25:41 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:41 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x9}) 07:25:41 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x4}) [ 140.302961][ T6863] FAULT_INJECTION: forcing a failure. [ 140.302961][ T6863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.316174][ T6863] CPU: 1 PID: 6863 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 140.324876][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.334979][ T6863] Call Trace: [ 140.338258][ T6863] dump_stack_lvl+0xd6/0x122 [ 140.342849][ T6863] dump_stack+0x11/0x1b [ 140.346990][ T6863] should_fail+0x23c/0x250 07:25:41 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0xc}) [ 140.351402][ T6863] should_fail_usercopy+0x16/0x20 [ 140.356434][ T6863] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 140.362157][ T6863] generic_perform_write+0x201/0x3e0 [ 140.367486][ T6863] ? ext4_da_write_begin+0x570/0x570 [ 140.372855][ T6863] ext4_buffered_write_iter+0x305/0x400 [ 140.378406][ T6863] ext4_file_write_iter+0xe79/0x11f0 [ 140.383690][ T6863] ? iov_iter_init+0xb1/0xf0 [ 140.388265][ T6863] vfs_write+0x7bc/0x900 [ 140.392538][ T6863] ksys_write+0xd9/0x190 [ 140.396930][ T6863] __x64_sys_write+0x3e/0x50 [ 140.401523][ T6863] do_syscall_64+0x44/0xa0 [ 140.406159][ T6863] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 140.412074][ T6863] RIP: 0033:0x7fb6f9ccda39 [ 140.416567][ T6863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.436244][ T6863] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.444651][ T6863] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 140.452697][ T6863] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 140.460655][ T6863] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 140.468667][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.476622][ T6863] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 [ 140.492784][ T6875] EXT4-fs warning: 7 callbacks suppressed 07:25:41 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20d) [ 140.492795][ T6875] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:42 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x210) 07:25:42 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0xd}) 07:25:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 16) 07:25:42 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 141.034377][ T6884] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 141.063081][ T6885] FAULT_INJECTION: forcing a failure. [ 141.063081][ T6885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.076295][ T6885] CPU: 1 PID: 6885 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 141.084975][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.095034][ T6885] Call Trace: [ 141.098351][ T6885] dump_stack_lvl+0xd6/0x122 [ 141.103211][ T6885] dump_stack+0x11/0x1b [ 141.107350][ T6885] should_fail+0x23c/0x250 [ 141.111965][ T6885] should_fail_usercopy+0x16/0x20 [ 141.117037][ T6885] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 141.122743][ T6885] generic_perform_write+0x201/0x3e0 [ 141.128023][ T6885] ? ext4_da_write_begin+0x570/0x570 [ 141.133378][ T6885] ext4_buffered_write_iter+0x305/0x400 [ 141.138953][ T6885] ext4_file_write_iter+0xe79/0x11f0 [ 141.144279][ T6885] ? iov_iter_init+0xb1/0xf0 [ 141.148865][ T6885] vfs_write+0x7bc/0x900 [ 141.153186][ T6885] ksys_write+0xd9/0x190 [ 141.157451][ T6885] __x64_sys_write+0x3e/0x50 [ 141.162045][ T6885] do_syscall_64+0x44/0xa0 [ 141.166503][ T6885] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 141.172447][ T6885] RIP: 0033:0x7fb6f9ccda39 07:25:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x40086602, 0x0) 07:25:42 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0xe}) [ 141.176881][ T6885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 141.196495][ T6885] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.204938][ T6885] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 141.212932][ T6885] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 141.220888][ T6885] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 07:25:42 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:42 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0xf}) [ 141.228888][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.236968][ T6885] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 [ 141.247265][ T6892] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 17) [ 141.304835][ T22] audit: type=1400 audit(1634541942.624:277): avc: denied { setattr } for pid=6893 comm="syz-executor.5" path="/dev/ptmx" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 141.335039][ T6899] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:42 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x10}) 07:25:42 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20e) [ 141.383641][ T6901] FAULT_INJECTION: forcing a failure. [ 141.383641][ T6901] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.397256][ T6901] CPU: 1 PID: 6901 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 141.405933][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.412544][ T6904] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 141.416015][ T6901] Call Trace: 07:25:42 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 141.416026][ T6901] dump_stack_lvl+0xd6/0x122 [ 141.416050][ T6901] dump_stack+0x11/0x1b [ 141.439382][ T6901] should_fail+0x23c/0x250 [ 141.443801][ T6901] __alloc_pages+0x102/0x320 [ 141.448462][ T6901] alloc_pages+0x382/0x3d0 [ 141.452972][ T6901] __page_cache_alloc+0x4d/0xf0 [ 141.457870][ T6901] pagecache_get_page+0x5fe/0x910 [ 141.462980][ T6901] grab_cache_page_write_begin+0x3f/0x70 [ 141.468658][ T6901] ext4_da_write_begin+0x323/0x570 [ 141.473830][ T6901] generic_perform_write+0x1b8/0x3e0 [ 141.479256][ T6901] ? ext4_da_write_begin+0x570/0x570 [ 141.484627][ T6901] ext4_buffered_write_iter+0x305/0x400 [ 141.490199][ T6901] ext4_file_write_iter+0xe79/0x11f0 [ 141.495664][ T6901] ? iov_iter_init+0xb1/0xf0 [ 141.500253][ T6901] vfs_write+0x7bc/0x900 [ 141.504563][ T6901] ksys_write+0xd9/0x190 [ 141.508795][ T6901] __x64_sys_write+0x3e/0x50 [ 141.513371][ T6901] do_syscall_64+0x44/0xa0 [ 141.517852][ T6901] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 141.523786][ T6901] RIP: 0033:0x7fb6f9ccda39 [ 141.528183][ T6901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 141.547776][ T6901] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.556178][ T6901] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 141.564132][ T6901] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 141.572083][ T6901] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 141.580171][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.588209][ T6901] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:43 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x211) 07:25:43 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x11}) 07:25:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 18) 07:25:43 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 141.885375][ T6917] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 141.923521][ T6915] FAULT_INJECTION: forcing a failure. [ 141.923521][ T6915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.936760][ T6915] CPU: 0 PID: 6915 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 141.945451][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.955512][ T6915] Call Trace: [ 141.958873][ T6915] dump_stack_lvl+0xd6/0x122 [ 141.963474][ T6915] dump_stack+0x11/0x1b [ 141.967861][ T6915] should_fail+0x23c/0x250 [ 141.972358][ T6915] should_fail_usercopy+0x16/0x20 [ 141.977400][ T6915] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 141.983121][ T6915] generic_perform_write+0x201/0x3e0 [ 141.988436][ T6915] ? ext4_da_write_begin+0x570/0x570 [ 141.993779][ T6915] ext4_buffered_write_iter+0x305/0x400 [ 141.999312][ T6915] ext4_file_write_iter+0xe79/0x11f0 [ 142.004582][ T6915] ? iov_iter_init+0xb1/0xf0 [ 142.009182][ T6915] vfs_write+0x7bc/0x900 [ 142.013407][ T6915] ksys_write+0xd9/0x190 [ 142.017630][ T6915] __x64_sys_write+0x3e/0x50 [ 142.022204][ T6915] do_syscall_64+0x44/0xa0 [ 142.026692][ T6915] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 142.032586][ T6915] RIP: 0033:0x7fb6f9ccda39 [ 142.036987][ T6915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 142.056575][ T6915] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.064983][ T6915] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 142.072950][ T6915] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 07:25:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x40087602, 0x0) 07:25:43 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x12}) 07:25:43 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 19) [ 142.080981][ T6915] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 142.088971][ T6915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.096938][ T6915] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 [ 142.121895][ T6924] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:43 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x13}) 07:25:43 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 142.199849][ T6931] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 142.206081][ T6928] FAULT_INJECTION: forcing a failure. [ 142.206081][ T6928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.224247][ T6928] CPU: 1 PID: 6928 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 142.232926][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.242976][ T6928] Call Trace: [ 142.246243][ T6928] dump_stack_lvl+0xd6/0x122 [ 142.250842][ T6928] dump_stack+0x11/0x1b [ 142.255339][ T6928] should_fail+0x23c/0x250 [ 142.259739][ T6928] should_fail_usercopy+0x16/0x20 [ 142.264771][ T6928] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 142.270488][ T6928] generic_perform_write+0x201/0x3e0 [ 142.275757][ T6928] ? ext4_da_write_begin+0x570/0x570 [ 142.281054][ T6928] ext4_buffered_write_iter+0x305/0x400 [ 142.286584][ T6928] ext4_file_write_iter+0xe79/0x11f0 [ 142.291904][ T6928] ? iov_iter_init+0xb1/0xf0 [ 142.296556][ T6928] vfs_write+0x7bc/0x900 [ 142.300865][ T6928] ksys_write+0xd9/0x190 [ 142.305104][ T6928] __x64_sys_write+0x3e/0x50 [ 142.309728][ T6928] do_syscall_64+0x44/0xa0 [ 142.314141][ T6928] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 142.320020][ T6928] RIP: 0033:0x7fb6f9ccda39 [ 142.324453][ T6928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 142.344038][ T6928] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.352435][ T6928] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 142.360398][ T6928] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 142.368376][ T6928] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 142.376346][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.384301][ T6928] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:43 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20d) 07:25:43 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x14}) [ 142.460240][ T6937] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:44 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x212) 07:25:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 20) 07:25:44 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:44 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x15}) [ 142.736993][ T6945] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 142.767902][ T6943] FAULT_INJECTION: forcing a failure. [ 142.767902][ T6943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.781311][ T6943] CPU: 1 PID: 6943 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 142.790004][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.800129][ T6943] Call Trace: [ 142.803443][ T6943] dump_stack_lvl+0xd6/0x122 [ 142.808023][ T6943] dump_stack+0x11/0x1b [ 142.812211][ T6943] should_fail+0x23c/0x250 [ 142.816637][ T6943] __alloc_pages+0x102/0x320 [ 142.821221][ T6943] alloc_pages+0x382/0x3d0 [ 142.825759][ T6943] __page_cache_alloc+0x4d/0xf0 [ 142.830690][ T6943] pagecache_get_page+0x5fe/0x910 [ 142.835731][ T6943] grab_cache_page_write_begin+0x3f/0x70 [ 142.841348][ T6943] ext4_da_write_begin+0x323/0x570 [ 142.846557][ T6943] generic_perform_write+0x1b8/0x3e0 [ 142.851912][ T6943] ? ext4_da_write_begin+0x570/0x570 [ 142.857341][ T6943] ext4_buffered_write_iter+0x305/0x400 [ 142.862866][ T6943] ext4_file_write_iter+0xe79/0x11f0 [ 142.868155][ T6943] ? iov_iter_init+0xb1/0xf0 [ 142.872812][ T6943] vfs_write+0x7bc/0x900 [ 142.877035][ T6943] ksys_write+0xd9/0x190 [ 142.881269][ T6943] __x64_sys_write+0x3e/0x50 [ 142.885853][ T6943] do_syscall_64+0x44/0xa0 [ 142.890275][ T6943] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 142.896154][ T6943] RIP: 0033:0x7fb6f9ccda39 [ 142.900553][ T6943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 142.920191][ T6943] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.928710][ T6943] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 07:25:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x401c5820, 0x0) 07:25:44 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x16}) 07:25:44 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 21) [ 142.936664][ T6943] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 142.944635][ T6943] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 142.952675][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.960625][ T6943] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:44 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x17}) [ 143.049586][ T6956] FAULT_INJECTION: forcing a failure. [ 143.049586][ T6956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.062838][ T6956] CPU: 1 PID: 6956 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 143.071515][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.081568][ T6956] Call Trace: [ 143.084841][ T6956] dump_stack_lvl+0xd6/0x122 [ 143.089521][ T6956] dump_stack+0x11/0x1b [ 143.093667][ T6956] should_fail+0x23c/0x250 [ 143.098120][ T6956] should_fail_usercopy+0x16/0x20 [ 143.103280][ T6956] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 143.108989][ T6956] generic_perform_write+0x201/0x3e0 [ 143.114267][ T6956] ? ext4_da_write_begin+0x570/0x570 [ 143.119726][ T6956] ext4_buffered_write_iter+0x305/0x400 [ 143.125448][ T6956] ext4_file_write_iter+0xe79/0x11f0 [ 143.130729][ T6956] ? iov_iter_init+0xb1/0xf0 [ 143.135311][ T6956] vfs_write+0x7bc/0x900 [ 143.139645][ T6956] ksys_write+0xd9/0x190 [ 143.143887][ T6956] __x64_sys_write+0x3e/0x50 [ 143.148463][ T6956] do_syscall_64+0x44/0xa0 [ 143.152861][ T6956] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 143.158804][ T6956] RIP: 0033:0x7fb6f9ccda39 [ 143.163376][ T6956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 143.183079][ T6956] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.191476][ T6956] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 07:25:44 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 143.199508][ T6956] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 143.207479][ T6956] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 143.215442][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.223430][ T6956] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:44 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80a00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008, 0x410, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x80c00, 0x1}, 0x4875c398) 07:25:44 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x18}) 07:25:44 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x222) 07:25:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 22) 07:25:44 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:44 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x19}) [ 143.619152][ T6974] FAULT_INJECTION: forcing a failure. [ 143.619152][ T6974] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 143.632615][ T6974] CPU: 1 PID: 6974 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 143.641317][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.651482][ T6974] Call Trace: [ 143.654756][ T6974] dump_stack_lvl+0xd6/0x122 [ 143.659334][ T6974] dump_stack+0x11/0x1b [ 143.663477][ T6974] should_fail+0x23c/0x250 [ 143.667894][ T6974] __alloc_pages+0x102/0x320 [ 143.672515][ T6974] alloc_pages+0x382/0x3d0 [ 143.676935][ T6974] __page_cache_alloc+0x4d/0xf0 [ 143.681773][ T6974] pagecache_get_page+0x5fe/0x910 [ 143.686825][ T6974] grab_cache_page_write_begin+0x3f/0x70 [ 143.692487][ T6974] ext4_da_write_begin+0x323/0x570 [ 143.697744][ T6974] generic_perform_write+0x1b8/0x3e0 [ 143.703028][ T6974] ? ext4_da_write_begin+0x570/0x570 [ 143.708416][ T6974] ext4_buffered_write_iter+0x305/0x400 [ 143.714034][ T6974] ext4_file_write_iter+0xe79/0x11f0 [ 143.719309][ T6974] ? iov_iter_init+0xb1/0xf0 [ 143.723894][ T6974] vfs_write+0x7bc/0x900 [ 143.728140][ T6974] ksys_write+0xd9/0x190 [ 143.732446][ T6974] __x64_sys_write+0x3e/0x50 [ 143.737105][ T6974] do_syscall_64+0x44/0xa0 [ 143.741561][ T6974] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 143.747445][ T6974] RIP: 0033:0x7fb6f9ccda39 [ 143.751886][ T6974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 143.771787][ T6974] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.780194][ T6974] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 143.788177][ T6974] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 143.796177][ T6974] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 143.804131][ T6974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.812082][ T6974] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x4020940d, 0x0) 07:25:45 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) mmap(&(0x7f00007f6000/0x2000)=nil, 0x2000, 0x5, 0x8010, r1, 0x2857000) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/103, 0x67}, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000005840), 0x0, 0x40894) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'sit0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000059c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000005a80)={'ip6_vti0\x00', &(0x7f0000005a00)={'syztnl0\x00', r3, 0x2f, 0x3, 0x9, 0x9, 0x41, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x20, 0x8, 0x1, 0x1}}) 07:25:45 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x22}) 07:25:45 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 23) 07:25:45 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x300}) [ 143.935400][ T22] audit: type=1400 audit(1634541945.254:278): avc: denied { accept } for pid=6981 comm="syz-executor.1" path="socket:[22595]" dev="sockfs" ino=22595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.970627][ T6989] FAULT_INJECTION: forcing a failure. [ 143.970627][ T6989] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 143.983972][ T6989] CPU: 0 PID: 6989 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 143.992683][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.002856][ T6989] Call Trace: [ 144.006138][ T6989] dump_stack_lvl+0xd6/0x122 [ 144.010738][ T6989] dump_stack+0x11/0x1b [ 144.014896][ T6989] should_fail+0x23c/0x250 [ 144.019380][ T6989] __alloc_pages+0x102/0x320 [ 144.024093][ T6989] alloc_pages+0x382/0x3d0 [ 144.028509][ T6989] __page_cache_alloc+0x4d/0xf0 07:25:45 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x700}) 07:25:45 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 144.033367][ T6989] pagecache_get_page+0x5fe/0x910 [ 144.038467][ T6989] grab_cache_page_write_begin+0x3f/0x70 [ 144.044113][ T6989] ext4_da_write_begin+0x323/0x570 [ 144.049237][ T6989] generic_perform_write+0x1b8/0x3e0 [ 144.054545][ T6989] ? ext4_da_write_begin+0x570/0x570 [ 144.059859][ T6989] ext4_buffered_write_iter+0x305/0x400 [ 144.065441][ T6989] ext4_file_write_iter+0xe79/0x11f0 [ 144.070850][ T6989] ? iov_iter_init+0xb1/0xf0 [ 144.075480][ T6989] vfs_write+0x7bc/0x900 [ 144.079727][ T6989] ksys_write+0xd9/0x190 [ 144.084040][ T6989] __x64_sys_write+0x3e/0x50 [ 144.088636][ T6989] do_syscall_64+0x44/0xa0 [ 144.093120][ T6989] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 144.099075][ T6989] RIP: 0033:0x7fb6f9ccda39 [ 144.103522][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 144.123139][ T6989] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.131554][ T6989] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 144.139527][ T6989] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 144.147502][ T6989] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 144.155476][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.163455][ T6989] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:45 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x225) 07:25:45 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x900}) 07:25:45 executing program 1: close(0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000028c0)={&(0x7f0000002480)={0x70, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000180}, 0x65015a4850abb66e) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x41, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000009, 0x30, r0, 0x505ef000) clock_gettime(0x0, &(0x7f00000046c0)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000004540)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000023c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/251, 0xfb}, {&(0x7f00000012c0)=""/93, 0x5d}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/117, 0x75}], 0x6, &(0x7f0000002800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000002500)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000002580)=""/69, 0x45}], 0x1, &(0x7f0000002640)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000002780), 0x6e, &(0x7f0000003b80), 0x0, &(0x7f0000003c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003c40), 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000003cc0)=""/253, 0xfd}], 0x1, &(0x7f0000003e00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003f00), 0x6e, &(0x7f0000004340), 0x0, &(0x7f00000043c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000004440), 0x6e, &(0x7f0000004500)=[{&(0x7f00000044c0)=""/32, 0x20}], 0x1}}], 0x6, 0x40002140, &(0x7f0000004700)={r1, r2+60000000}) fallocate(r4, 0x10, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x20, 0x0, 0x8, 0x5}}) sendfile(r3, r5, 0x0, 0xc4) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000000000020000006077db1f3bf210196b0b7a45e7390af26d0b83", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="040000000000000008000000", @ANYRES32=0xee01, @ANYBLOB="10000000000000002000000000000000"], 0x1c, 0x0) 07:25:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 24) [ 144.483146][ T7005] FAULT_INJECTION: forcing a failure. [ 144.483146][ T7005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.496307][ T7005] CPU: 0 PID: 7005 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 144.504976][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.515033][ T7005] Call Trace: [ 144.518303][ T7005] dump_stack_lvl+0xd6/0x122 [ 144.522964][ T7005] dump_stack+0x11/0x1b [ 144.527112][ T7005] should_fail+0x23c/0x250 [ 144.531541][ T7005] should_fail_usercopy+0x16/0x20 [ 144.536547][ T7005] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 144.542307][ T7005] generic_perform_write+0x201/0x3e0 [ 144.547574][ T7005] ? ext4_da_write_begin+0x570/0x570 [ 144.552843][ T7005] ext4_buffered_write_iter+0x305/0x400 [ 144.558370][ T7005] ext4_file_write_iter+0xe79/0x11f0 [ 144.563641][ T7005] ? iov_iter_init+0xb1/0xf0 [ 144.568285][ T7005] vfs_write+0x7bc/0x900 [ 144.572552][ T7005] ksys_write+0xd9/0x190 [ 144.576800][ T7005] __x64_sys_write+0x3e/0x50 [ 144.581388][ T7005] do_syscall_64+0x44/0xa0 [ 144.585799][ T7005] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 144.591687][ T7005] RIP: 0033:0x7fb6f9ccda39 [ 144.596082][ T7005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 144.615822][ T7005] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.624236][ T7005] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 144.632218][ T7005] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 144.640180][ T7005] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 144.648141][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.656198][ T7005] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x80045432, 0x0) 07:25:46 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f390", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:46 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0xc00}) 07:25:46 executing program 1: perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x5, 0x4) preadv(r1, &(0x7f00000017c0), 0x1d0, 0x6c000000, 0x0) 07:25:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 25) 07:25:46 executing program 1: unshare(0x4a060480) r0 = open(&(0x7f0000000000)='./file0\x00', 0x14280, 0x20) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = syz_io_uring_setup(0x2e4b, &(0x7f0000000080), &(0x7f0000702000/0x2000)=nil, &(0x7f000031b000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) 07:25:46 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0xd00}) 07:25:46 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0xe00}) [ 144.892513][ T7022] FAULT_INJECTION: forcing a failure. [ 144.892513][ T7022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.905809][ T7022] CPU: 0 PID: 7022 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 144.914571][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.924647][ T7022] Call Trace: [ 144.927988][ T7022] dump_stack_lvl+0xd6/0x122 [ 144.932587][ T7022] dump_stack+0x11/0x1b [ 144.936813][ T7022] should_fail+0x23c/0x250 [ 144.941237][ T7022] should_fail_usercopy+0x16/0x20 [ 144.946271][ T7022] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 144.951999][ T7022] generic_perform_write+0x201/0x3e0 [ 144.957448][ T7022] ? ext4_da_write_begin+0x570/0x570 [ 144.962751][ T7022] ext4_buffered_write_iter+0x305/0x400 [ 144.968319][ T7022] ext4_file_write_iter+0xe79/0x11f0 [ 144.973619][ T7022] ? iov_iter_init+0xb1/0xf0 [ 144.980171][ T7022] vfs_write+0x7bc/0x900 [ 144.984455][ T7022] ksys_write+0xd9/0x190 [ 144.988786][ T7022] __x64_sys_write+0x3e/0x50 [ 144.993372][ T7022] do_syscall_64+0x44/0xa0 [ 144.997853][ T7022] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 145.003822][ T7022] RIP: 0033:0x7fb6f9ccda39 [ 145.008235][ T7022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 145.027920][ T7022] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.036389][ T7022] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 145.044346][ T7022] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 145.052298][ T7022] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 145.060251][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.068275][ T7022] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:46 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x248) 07:25:46 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0xf00}) 07:25:46 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f390", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 26) [ 145.393183][ T7040] FAULT_INJECTION: forcing a failure. [ 145.393183][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.406408][ T7040] CPU: 0 PID: 7040 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 145.415093][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.425154][ T7040] Call Trace: [ 145.428437][ T7040] dump_stack_lvl+0xd6/0x122 [ 145.433155][ T7040] dump_stack+0x11/0x1b [ 145.437327][ T7040] should_fail+0x23c/0x250 [ 145.441854][ T7040] should_fail_usercopy+0x16/0x20 [ 145.446952][ T7040] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 145.452689][ T7040] generic_perform_write+0x201/0x3e0 [ 145.458064][ T7040] ? ext4_da_write_begin+0x570/0x570 [ 145.463371][ T7040] ext4_buffered_write_iter+0x305/0x400 [ 145.468942][ T7040] ext4_file_write_iter+0xe79/0x11f0 [ 145.474247][ T7040] ? iov_iter_init+0xb1/0xf0 [ 145.478854][ T7040] vfs_write+0x7bc/0x900 [ 145.483115][ T7040] ksys_write+0xd9/0x190 [ 145.487415][ T7040] __x64_sys_write+0x3e/0x50 [ 145.492024][ T7040] do_syscall_64+0x44/0xa0 [ 145.496455][ T7040] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 145.502401][ T7040] RIP: 0033:0x7fb6f9ccda39 [ 145.506913][ T7040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 145.526881][ T7040] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.535302][ T7040] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 145.543325][ T7040] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 145.551303][ T7040] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 145.559312][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.567378][ T7040] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x80045440, 0x0) 07:25:47 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x1100}) 07:25:47 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f390", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 27) 07:25:47 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x1200}) [ 145.720430][ T7051] EXT4-fs warning: 12 callbacks suppressed [ 145.720442][ T7051] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:47 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x1300}) [ 145.772169][ T7055] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 145.793560][ T7049] FAULT_INJECTION: forcing a failure. [ 145.793560][ T7049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.806863][ T7049] CPU: 1 PID: 7049 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 145.815546][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.816247][ T7058] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 145.825599][ T7049] Call Trace: [ 145.825610][ T7049] dump_stack_lvl+0xd6/0x122 [ 145.825636][ T7049] dump_stack+0x11/0x1b [ 145.848874][ T7049] should_fail+0x23c/0x250 [ 145.853283][ T7049] should_fail_usercopy+0x16/0x20 [ 145.858319][ T7049] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 145.864137][ T7049] generic_perform_write+0x201/0x3e0 [ 145.869539][ T7049] ? ext4_da_write_begin+0x570/0x570 [ 145.874841][ T7049] ext4_buffered_write_iter+0x305/0x400 [ 145.880416][ T7049] ext4_file_write_iter+0xe79/0x11f0 [ 145.885829][ T7049] ? iov_iter_init+0xb1/0xf0 [ 145.890872][ T7049] vfs_write+0x7bc/0x900 [ 145.895165][ T7049] ksys_write+0xd9/0x190 [ 145.899445][ T7049] __x64_sys_write+0x3e/0x50 [ 145.904090][ T7049] do_syscall_64+0x44/0xa0 [ 145.908521][ T7049] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 145.914482][ T7049] RIP: 0033:0x7fb6f9ccda39 07:25:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000007880)={&(0x7f0000001400)=ANY=[@ANYBLOB="c41e000002c903"], 0x1ec4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r2, 0x87368c1dad5bf3c3, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81023940}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040004}, 0x4040005) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r3 = memfd_create(&(0x7f0000000640)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xd7\x00\xef\xff\x7f\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xaeC>\xaf\x05\x00\x00\x00\x00\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x95\x05\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0#\xc3\xfd\x0e\"\x0f\vy(q~|\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\a\x00\f{\xb5\x82q\x19\xacS\x88|\x99\xd2v\x9b\xa4\xd5z\xfd\x9eS\x80\xcb\x14G%?`/\xcck\t\xbe\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$e\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x00G\xa1\xaf\xe1\x95\xbc\xac\x18\xb3%QFf\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x1b\x8e\x10\xd2\xbf\xa3Q\xa2\xe4\xc5\xa7\x900\xa8\x1c3\xae\xdf_\xe4m\x01\xf9\xe9\xdc\xb7\xcc\x80\x97\xf1;\x1fa\xd0\xf0\xcbc\x80\xe4\xf8Z.9\xc7fg}\xcf!}\xe9\xe6R\xf0`\x15*\'\x8dLEc\xcb\xff\xd3\x929\xb6\x91\xf80\xc6\xd1tU\x1bT\x16\x9e\x99\xed~_\x99BW\x97\x06\xb0\x1aa\x11\xf0m\x00\x00\x00\x00\x00\x00\x00=\x14P\xf0\xc7\xafW\xf7\x1d\xa8\x10\xe6R\xf9\xb4s@iO0\x97G\x92\x01;\x19\xdc\xb8<\x1c0\xa1Rw\x13)\x06\xb0\xa4\f/\xee\xeb\x97h\xb9\xa0\xe8A\x1d\x88\xa8\x11\xf6=iu\x063\xd7LD26\x11Y\xb8\xb2\xc1\x93\xe7\xd1\x1a\xcc\xe5\x87Z\xba\xc0u\x1f\xa4&\xa5\xca\xdbW\xf7\"/\x9bF\xff\x9e_dI\x1f\xb7\xee+\xd1a\xd7r\x9b\xdf\xb2\xaa\xe6\x80\x82\x9b=\xb9\xccF\xb7\xbd\x06\xb9Y\x98u\xc0\xd9\xdat\x06P\xb1 \xeck\xf81\"P5\x0f\xbc\xd11\xe7\xcd\xba\xc7q\x86\x85\'K\t`\xf8!E\xf4\xe2\x9e2\x91:\xbeg\xf3;F\x84\x0e\xf7ui', 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x208e24b) fallocate(r3, 0x0, 0x0, 0x23ffffd) [ 145.918903][ T7049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 145.938571][ T7049] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.946988][ T7049] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 145.954971][ T7049] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 145.963117][ T7049] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 07:25:47 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x1400}) [ 145.971099][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.979194][ T7049] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 [ 146.044494][ T7066] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) 07:25:47 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x24c) 07:25:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 28) 07:25:47 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:47 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f390", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 146.224886][ T7068] FAULT_INJECTION: forcing a failure. [ 146.224886][ T7068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.238053][ T7068] CPU: 0 PID: 7068 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 146.246879][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.256948][ T7068] Call Trace: [ 146.260311][ T7068] dump_stack_lvl+0xd6/0x122 [ 146.265096][ T7068] dump_stack+0x11/0x1b [ 146.269256][ T7068] should_fail+0x23c/0x250 [ 146.273801][ T7068] should_fail_usercopy+0x16/0x20 [ 146.278816][ T7068] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 146.284527][ T7068] generic_perform_write+0x201/0x3e0 [ 146.289816][ T7068] ? ext4_da_write_begin+0x570/0x570 [ 146.295114][ T7068] ext4_buffered_write_iter+0x305/0x400 [ 146.300676][ T7068] ext4_file_write_iter+0xe79/0x11f0 [ 146.305965][ T7068] ? iov_iter_init+0xb1/0xf0 [ 146.311108][ T7068] vfs_write+0x7bc/0x900 [ 146.315367][ T7068] ksys_write+0xd9/0x190 [ 146.319618][ T7068] __x64_sys_write+0x3e/0x50 [ 146.324214][ T7068] do_syscall_64+0x44/0xa0 [ 146.328630][ T7068] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.334546][ T7068] RIP: 0033:0x7fb6f9ccda39 [ 146.338999][ T7068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 146.358597][ T7068] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.367016][ T7068] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 146.374974][ T7068] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 146.382926][ T7068] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 [ 146.390880][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.398938][ T7068] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 07:25:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSETD(r0, 0x80086601, 0x0) 07:25:47 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x1500}) 07:25:47 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) 07:25:47 executing program 1: r0 = io_uring_setup(0x4783, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x8000000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) syz_io_uring_setup(0x3fa9, &(0x7f0000000180)={0x0, 0xe86a, 0x20, 0x1, 0x1da}, &(0x7f0000003000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000440), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000912000/0x4000)=nil, 0x4000, 0x2, 0x810, r1, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x5, 0x6, 0x81, 0x0, 0x4, 0x40000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x244, 0x3}, 0x0, 0x4, 0x5, 0x2, 0x7, 0x8001, 0x9, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xd) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)=[r2]}, 0x1) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x7f, 0x0, 0x6, 0x8, 0x0, 0xfff, 0xc4404, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0xad}, 0x10000, 0x5, 0x1, 0x0, 0x736e6181, 0x7, 0xcefe, 0x0, 0xfffeffff, 0x0, 0x8001}, r3, 0x8, 0xffffffffffffffff, 0x2) 07:25:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x3, "ab3980df7c6bb9"}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1f00, 0x40000) (fail_nth: 29) [ 146.658355][ T7082] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 146.704807][ T7084] FAULT_INJECTION: forcing a failure. [ 146.704807][ T7084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 146.718230][ T7084] CPU: 1 PID: 7084 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 146.726907][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.736970][ T7084] Call Trace: [ 146.740244][ T7084] dump_stack_lvl+0xd6/0x122 [ 146.744886][ T7084] dump_stack+0x11/0x1b [ 146.749047][ T7084] should_fail+0x23c/0x250 [ 146.753583][ T7084] __alloc_pages+0x102/0x320 [ 146.758182][ T7084] alloc_pages+0x382/0x3d0 [ 146.762614][ T7084] __page_cache_alloc+0x4d/0xf0 [ 146.767549][ T7084] pagecache_get_page+0x5fe/0x910 [ 146.772623][ T7084] grab_cache_page_write_begin+0x3f/0x70 [ 146.778304][ T7084] ext4_da_write_begin+0x323/0x570 [ 146.783479][ T7084] generic_perform_write+0x1b8/0x3e0 [ 146.788791][ T7084] ? ext4_da_write_begin+0x570/0x570 [ 146.794125][ T7084] ext4_buffered_write_iter+0x305/0x400 [ 146.799690][ T7084] ext4_file_write_iter+0xe79/0x11f0 07:25:48 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x0, 0xfffffffc}, {0x25, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x7ffffdc0}]}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000002c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r3, 0xfff, 0x8000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5, 0xffffffffffff2dca, 0xfffff000}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x5, 0xb0, 0x2, 0x8}, {0x9, 0x7f, 0x2, 0x9}, {0x7, 0x0, 0x0, 0xb906}]}) r6 = syz_io_uring_complete(0x0) mmap(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x2000003, 0x80010, r6, 0xa7c1f000) 07:25:48 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfeffff7f, 0x0, 0x1600}) [ 146.804993][ T7084] ? iov_iter_init+0xb1/0xf0 [ 146.809596][ T7084] vfs_write+0x7bc/0x900 [ 146.813854][ T7084] ksys_write+0xd9/0x190 [ 146.818187][ T7084] __x64_sys_write+0x3e/0x50 [ 146.822859][ T7084] do_syscall_64+0x44/0xa0 [ 146.827302][ T7084] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 146.833367][ T7084] RIP: 0033:0x7fb6f9ccda39 [ 146.837788][ T7084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 146.841898][ T7093] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4278189951 (only 8 groups) [ 146.857403][ T7084] RSP: 002b:00007fb6f7a44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.857427][ T7084] RAX: ffffffffffffffda RBX: 00007fb6f9dd0f60 RCX: 00007fb6f9ccda39 [ 146.857465][ T7084] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000006 [ 146.892933][ T7084] RBP: 00007fb6f7a441d0 R08: 0000000000000000 R09: 0000000000000000 07:25:48 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x1000, 0x3ff, 0x2, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1f00, 0x40000) [ 146.900889][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.908865][ T7084] R13: 00007ffd4eed217f R14: 00007fb6f7a44300 R15: 0000000000022000 [ 146.941037][ T689] ==================================================================