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", 0x1000, 0x5, 0x0, 0x2, r2}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000002600)="df9638776bbbf1abe4ca3a8cf24d8b8ad8012ddf98e819dd1ebf47241e29d43b81fb31708645d7045d48b4b72e5bae45972b04cf89eb26cf445e3ac9695a9a931189b978c647016d1599c3016b8a6bdff895f0cf27b4f67f90cc1a145613a2bb9cd90597a11c10436329548ae48df61226a1510784d40668ce27b99f5e50766ae92b8d0a07689fa1888f1375885863d68f4b892f5deb1e9829d47c6b7c83f28d37dd4a6508ded0caf5a0665f0c92c929ad0d", 0xb2, 0x6, 0x0, 0x2}, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x8, 0xff0a, r3, &(0x7f0000002540)="b2bd8fab4a2712dcb7a71aa6508d5c2ccc64695d53e82867d113331b334e058be1ce6c98cdc694a9f5f1b0c4c593fbdcc204672079693c0417b115113f98190f1022183b01c49c43ad5b85cc6bd832e9f9329753865cd512e1dcc173230a93", 0x5f, 0x5, 0x0, 0x2}, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x8, 0x400, r5, &(0x7f0000002780)="964f4e478a27e30771606e6aa62b403d1b3649643933034d5997b8d9e78951249eda65c4ed4db6af457f17722c9f767b6321915d1014c163a094196c6679015c926b3e993f07a7eb28c260addd0e1f77d0cd6206990b723c002e06827ee1771c3f81a575a5575f19d1e49072d44fb7f3213c32797be0980fe41bd1481187418d1b4d793dfc16cf5d9fb9e8177b4814ce54865eb7a33d61ef5da106ef9fbdc83363ec58ec98323eecf0507f539463cf59bf7a3d1c9d20b595d4ef80dbf9ba2066", 0xc0, 0x2, 0x0, 0x1, r7}]) r8 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000002c0)={{r8}, "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"}) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000100), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000180)=""/22, 0x0}, 0x58) 02:09:28 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x5, 0xfffffffd, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r3, 0x0, r4, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r5, 0x0, r6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000002840)=ANY=[@ANYBLOB="b2a4a12200000001080000863e0000000018", @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="000400002e2f660904000000b7a706b79809a67f0feb010f432bf63b0329e618be611dc2e7c6f4fb1df17bcec4e93b76ad3cb87c46f883c4fd632f40546fc4d966597048d70f66b9857ed37e4bbd22d33849361be18fd5f872cf03c85c9f04fb4a5de53d6ed5ffa4c13fb4a5520f13ffb88bfba284d9e3bde63c7445d483d44b684be67da15445d1fead5ff742c1fd4e49bd2f037ea791e0616f492dadfd708858709e8f"]) io_submit(0x0, 0x8, &(0x7f0000002740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f00000001c0)="5c0e8399901c5d93ad600c879096a327b816696e0014349d0672bb9f657797a76f64485ff7faff33028dd05827c5e4405da4940f92e07ab444a963ea174e679c3182e29bf7d8ed0a5cc45d6b302c729d56c7e3bc101a33abaa800763bf70db907bbd525e8056df2feabef9cccbee78d72db4cfc0129e7a880f63b5b3", 0x7c, 0x9, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xd07f, r2, &(0x7f00000012c0)="17f62e9d8e705d3499dc723e5d3e13474dad612ef4011697b1ffc48136f921180300000000000000bcc5d27dab7606093344e448ab31189551894af27fa3b409982819c84dd8a113186f859609aed98eab623873365926d89ec074e03e86401ba4126966b50500795f0b5364e9944e6b192ed7944c8061f0f266f8c686315a92eb351a470344d07174af7ca728fae06a4f6fcdf5d182e7de3fb078e1639b5fd7", 0xa0, 0x6, 0x0, 0x1}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x2, 0xffc0, 0xffffffffffffffff, &(0x7f0000001380)="52c7d70d6587f3ec76003abab6b5946639efa6bc587e6d5a66e9643be3cde85a5c2ada44406472f469d5fe16219834da152d084d8bfa48dcdbcc", 0x3a, 0x200, 0x0, 0x3, r2}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000001400)="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", 0x1000, 0x5, 0x0, 0x2, r2}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000002600)="df9638776bbbf1abe4ca3a8cf24d8b8ad8012ddf98e819dd1ebf47241e29d43b81fb31708645d7045d48b4b72e5bae45972b04cf89eb26cf445e3ac9695a9a931189b978c647016d1599c3016b8a6bdff895f0cf27b4f67f90cc1a145613a2bb9cd90597a11c10436329548ae48df61226a1510784d40668ce27b99f5e50766ae92b8d0a07689fa1888f1375885863d68f4b892f5deb1e9829d47c6b7c83f28d37dd4a6508ded0caf5a0665f0c92c929ad0d", 0xb2, 0x6, 0x0, 0x2}, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x8, 0xff0a, r3, &(0x7f0000002540)="b2bd8fab4a2712dcb7a71aa6508d5c2ccc64695d53e82867d113331b334e058be1ce6c98cdc694a9f5f1b0c4c593fbdcc204672079693c0417b115113f98190f1022183b01c49c43ad5b85cc6bd832e9f9329753865cd512e1dcc173230a93", 0x5f, 0x5, 0x0, 0x2}, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x8, 0x400, r5, &(0x7f0000002780)="964f4e478a27e30771606e6aa62b403d1b3649643933034d5997b8d9e78951249eda65c4ed4db6af457f17722c9f767b6321915d1014c163a094196c6679015c926b3e993f07a7eb28c260addd0e1f77d0cd6206990b723c002e06827ee1771c3f81a575a5575f19d1e49072d44fb7f3213c32797be0980fe41bd1481187418d1b4d793dfc16cf5d9fb9e8177b4814ce54865eb7a33d61ef5da106ef9fbdc83363ec58ec98323eecf0507f539463cf59bf7a3d1c9d20b595d4ef80dbf9ba2066", 0xc0, 0x2, 0x0, 0x1, r7}]) r8 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000002c0)={{r8}, "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"}) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000100), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000180)=""/22, 0x0}, 0x58) 02:09:28 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r1, &(0x7f0000000200)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) r4 = getuid() syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0/file0\x00', 0xbd3, 0x6, &(0x7f0000000780)=[{&(0x7f00000003c0)="49f77992a3818e94a333020ab7a84f90d59e7705e1cc2dfdc719ad7506d042fa217ad4bf897fc91c971d6c2caf7949b132907f153e2534c0d66b2c37b1efc144778b19c96903ab72730d284e114038db5d8a00862d2611d7", 0x58, 0x5}, {&(0x7f0000000440)="338fb4100f8c233170aa394ebb7ed19391ee65198140a59c9e78a0cb8d2b2a0f5540a7664464d56ee044c955baf32a06cb8a64c38ba19fca2d4000adf12b33f14f0a5db22ae34e4f8c418f03e51a7808408076ea54c26e574d7ba681b15ed342b2a3000a34a2e1fd4259cc3e4e62280f12ec42f39f4963c0bac1752fb00311095e5cba6ce836c256c0ed5778da59751908293e87d4566ba8d8e86ea5dc6f170ca45088d75cbf6af0e8c590dbd58c50991d", 0xb1, 0xa432}, {&(0x7f0000000500)="0b361cdd5b362aad8e32a72e9ac8ca51b458ddf39bbeae8b0b8056a439b9186cf4f22c31fe0ec1c86a16edc39ddc5ab66ddbec969721eb1992ecf5d787a26eab0e26096b51a66d3693c33b", 0x4b, 0x5}, {&(0x7f0000000580)="c721dc09a44b8b01b7b7c3cfb9896a51476111592965483989b00e6a919aa63b0df312cff5bab7be2495395aa2d1ac903de6b726a3f71e7da3dffa40a0f8366d7edcbdb8f248a93c8a600b6d0fec54727918bdd70c66a30f99cf83a1513001c4f0", 0x61, 0xdd3c}, {&(0x7f0000000600)="5009a8ab084767ad6a59082bad58807056cfe5b8f8c149f88ba13c52e5f6a2e024e2e749c260c72cbad69cf5cbf89a9e1bfed25ae42c4458785a0505821787ab6873b79db1bf001512eb44cfb32c7faae2f153c7c7400afcdd326cb8b6c8928bb7a5962dcab03d723c2d3311d718141f64dd668c64ae08a3350b0fb72d650f533fff02daff", 0x85, 0x7f}, {&(0x7f00000006c0)="7bbaa47863b7769a40f01d72175ff1393380a44539e6a3c24356dd63d40acbd44ee13be539e39bf894a1d93ea36e6d4a877997c94b95fc516b9ee8be23ba6997084682f0e3ecc9184441272a25458f7a9d7edb8613b31fb16c71c801d4cc6dfa0b44bbcb6a25050b0723f08ea749ab3848236dde5b2cd34619d027f4d33b0f959049da0bfcd3b2d4d2cb", 0x8a, 0x10001}], 0x89004a, &(0x7f00000008c0)={[{@mode}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32, 0x6b, 0x67, 0x2d, 0x30, 0x25, 0x65, 0x74]}}, {@uid={'uid', 0x3d, r2}}, {@uid={'uid', 0x3d, r3}}, {@huge_within_size}, {@huge_advise}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_lt={'euid<', r4}}, {@appraise_type}]}) fspick(r1, &(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x8, 0x0, 0x40, 0x3f, 0x0, 0x1, 0x4, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x59140, 0x7ee3c4e0, 0x7, 0xb, 0x191c, 0x4, 0x7, 0x0, 0x6, 0x0, 0x978}) setxattr$system_posix_acl(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 02:09:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)=' ', 0x1, 0x99ad) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000180)=0x1, 0x0, 0x4) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x7, 0x100, 0xf774, 0x9, 0x0, 0x3f}) mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 02:09:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) [ 220.558935] Bluetooth: hci4: command 0x0406 tx timeout [ 220.561333] Bluetooth: hci1: command 0x0406 tx timeout [ 220.562509] Bluetooth: hci2: command 0x0406 tx timeout [ 220.563529] Bluetooth: hci6: command 0x0406 tx timeout [ 220.567154] Bluetooth: hci5: command 0x0406 tx timeout [ 220.570307] Bluetooth: hci7: command 0x0406 tx timeout [ 220.571734] Bluetooth: hci3: command 0x0406 tx timeout [ 220.573134] Bluetooth: hci0: command 0x0406 tx timeout 02:09:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)=' ', 0x1, 0x99ad) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000180)=0x1, 0x0, 0x4) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x7, 0x100, 0xf774, 0x9, 0x0, 0x3f}) 02:09:38 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r1, &(0x7f0000000200)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) r4 = getuid() syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0/file0\x00', 0xbd3, 0x6, &(0x7f0000000780)=[{&(0x7f00000003c0)="49f77992a3818e94a333020ab7a84f90d59e7705e1cc2dfdc719ad7506d042fa217ad4bf897fc91c971d6c2caf7949b132907f153e2534c0d66b2c37b1efc144778b19c96903ab72730d284e114038db5d8a00862d2611d7", 0x58, 0x5}, {&(0x7f0000000440)="338fb4100f8c233170aa394ebb7ed19391ee65198140a59c9e78a0cb8d2b2a0f5540a7664464d56ee044c955baf32a06cb8a64c38ba19fca2d4000adf12b33f14f0a5db22ae34e4f8c418f03e51a7808408076ea54c26e574d7ba681b15ed342b2a3000a34a2e1fd4259cc3e4e62280f12ec42f39f4963c0bac1752fb00311095e5cba6ce836c256c0ed5778da59751908293e87d4566ba8d8e86ea5dc6f170ca45088d75cbf6af0e8c590dbd58c50991d", 0xb1, 0xa432}, {&(0x7f0000000500)="0b361cdd5b362aad8e32a72e9ac8ca51b458ddf39bbeae8b0b8056a439b9186cf4f22c31fe0ec1c86a16edc39ddc5ab66ddbec969721eb1992ecf5d787a26eab0e26096b51a66d3693c33b", 0x4b, 0x5}, {&(0x7f0000000580)="c721dc09a44b8b01b7b7c3cfb9896a51476111592965483989b00e6a919aa63b0df312cff5bab7be2495395aa2d1ac903de6b726a3f71e7da3dffa40a0f8366d7edcbdb8f248a93c8a600b6d0fec54727918bdd70c66a30f99cf83a1513001c4f0", 0x61, 0xdd3c}, {&(0x7f0000000600)="5009a8ab084767ad6a59082bad58807056cfe5b8f8c149f88ba13c52e5f6a2e024e2e749c260c72cbad69cf5cbf89a9e1bfed25ae42c4458785a0505821787ab6873b79db1bf001512eb44cfb32c7faae2f153c7c7400afcdd326cb8b6c8928bb7a5962dcab03d723c2d3311d718141f64dd668c64ae08a3350b0fb72d650f533fff02daff", 0x85, 0x7f}, {&(0x7f00000006c0)="7bbaa47863b7769a40f01d72175ff1393380a44539e6a3c24356dd63d40acbd44ee13be539e39bf894a1d93ea36e6d4a877997c94b95fc516b9ee8be23ba6997084682f0e3ecc9184441272a25458f7a9d7edb8613b31fb16c71c801d4cc6dfa0b44bbcb6a25050b0723f08ea749ab3848236dde5b2cd34619d027f4d33b0f959049da0bfcd3b2d4d2cb", 0x8a, 0x10001}], 0x89004a, &(0x7f00000008c0)={[{@mode}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32, 0x6b, 0x67, 0x2d, 0x30, 0x25, 0x65, 0x74]}}, {@uid={'uid', 0x3d, r2}}, {@uid={'uid', 0x3d, r3}}, {@huge_within_size}, {@huge_advise}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_lt={'euid<', r4}}, {@appraise_type}]}) fspick(r1, &(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x8, 0x0, 0x40, 0x3f, 0x0, 0x1, 0x4, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x59140, 0x7ee3c4e0, 0x7, 0xb, 0x191c, 0x4, 0x7, 0x0, 0x6, 0x0, 0x978}) setxattr$system_posix_acl(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 02:09:38 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x1f, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x1277, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6cf498c3946d29f0713195d08f25c5228d4a8f96b728207a606675f9df9d971fcd1efeb1943a5d9f80c5c84e5c197633d513aa8e1e7d66b973757ed5563ba177", "ec659863872098cae90d16c9857ce5575761a487998a6f95781bdfbd1275bf97a883bc536f5770a2b3f80400d747c688e27143155ca0c6e2286c87fa09209302", "f2af2e994d8c408523a7cc17fd47da63d762e4a53dec39b4b353b5b248213bca"}) ioctl$FICLONE(r2, 0x40049409, r3) sendfile(r0, r1, 0x0, 0x8001) 02:09:38 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) socket$inet6_udplite(0xa, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:09:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:09:38 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:09:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:09:38 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000108000000000000", @ANYRES32=r0, @ANYBLOB="06000000000000002e2f66696c653000"]) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x787001, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x202000, 0xa4, 0x10}, 0x18) r7 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r7, r7, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000180)) r8 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r8, r8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000180)) io_submit(0x0, 0x7, &(0x7f0000000900)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0xff01, 0xffffffffffffffff, &(0x7f0000000140)="eec85486b77cc2e724d3f7351eaa7aa1b4f716745ea99d261d25b84a9d55c4ad1586f9653ca7a89553808ecb15a1aa2445c8b7f0f9bee9ad0d415ad8103b924bd4419484b93871", 0x47, 0x7, 0x0, 0x1, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x22, 0xffffffffffffffff, &(0x7f0000000200)="6081d92743b06e1d8933a57145aae064cdc35935fc7aab46bf32e2e3e600e0812cc1b3e731e5e22857a147441f667c0ebc8f0e7d23394ad96056032b80ae83f90a6f519a4fa3fd297ff83090331a02879e2c56e9b737fa5b25d1c0a3467b11e69d33eddcc9aa4c29d1d73231342590793f8452494b7b7023382262ea4438bb251d6b7386da149a59552de40fe39f4c", 0x8f, 0x20, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x3, r3, &(0x7f0000000340)="983d7e50cba7abd8f51961a62b09f09db7a399cae8fc1e92d20dd970b2d63bc9818d27dca774993061a292a15e1a46cebbe6b6b7bcbe19b3677a6fcc184216d2c88edf0adb5e2fa5106c091a043fa30f00cc1593f3b9d3f7fb164c735ec7aee6469896898c25a745bf960a76d6751ab901fa01e9e83e09afcf0033216b374a1de8", 0x81, 0x0, 0x0, 0x4f1706f464e8b68, r4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x8001, r0, &(0x7f0000000480)="41c9c48db84bd35ff546c8f4aec2a13cf1916361f39a0d5d8a5d2275f8e38f56819e75585c8b489cf703bbee6aa97b25f8d8b6a0766e339a0052c31958db67825ac7339c98e5e07050983769326c94d5df4356d601a7802bf89e0da9bc9cff428e2b988d6bbbca2a6508caa35bd5f3c27fea013a1cd2608ef6de41", 0x7b, 0x1, 0x0, 0x1, r5}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x1, r6, &(0x7f0000000600)="6b445a49f98d967abea04b3277beb211f4ae0ce619df06d16eba8883c313299df6a326a97152cd44a19236caca09cf5e22044329d73c5179931979c23743e1e757b48a6d72ecd30bf7e05413d90ab42207536950d2059babb8189231fc94a58cdaa6c3ec54a95b2737b3d73ce14ded08bda70de05f5ecc3e9d11f4392b2d48ea7d807e31f1f758d2b1bad85f1cbe498901f570d59695dc56147e1ed77776e95d300d267c9154ed7f00f69522e8573a456c04798b2c9fe4024bce3bbcfb908245bd599084c9cba06c273991efc8df2af3f3e11654cad109950c57fb9ef29244", 0xdf, 0xaa, 0x0, 0x3, r2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x2, r1, &(0x7f0000000740)="b998e7a0efab81d74d02cd8592900b13aaf926a4f8a98b38980cc124c56778305ff9decd2b98f78c0ee87b019c44d4b4a1011426b78dd2f0d10ae7aba5fffd080c8e25721362e7db66556636b8861729f3a3955fd9c05d39a40ccf93ae490c11e7ac3e5e6a1a93f1974c49ef231be6757979d3df506ab1421a3ee9bbefb496f5848facccbe43d90bc6cde8fa13c01c6354841496ff297863a46f96e79f6f6c59", 0xa0, 0x6, 0x0, 0x1, r7}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x8, r8, &(0x7f0000000840)="dd61f651205541aa1ed6e4c1a654c679bb91d3bc9b3ef4ab717f2c21de490e117d0d3a9528516f02d8d361c927300b7503eec19f511287bc364a34eed2252d11c81e82980b8444f76cb81fbd13835d0be40152ba58fd166fa2f2bcbe85bf389633ef8a9ea3695ed33652952e3138e2b1d745bdd2f4489b52a124", 0x7a, 0x7, 0x0, 0x1}]) pwritev2(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0x2e, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000000100)=""/5, 0x5, 0x3f) r9 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev2(r9, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 02:09:38 executing program 6: r0 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0xfff7, [0x7, 0x7fe, 0x9, 0x20, 0xfffffff8, 0x6, 0x1, 0xff]}, 0x5c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="90", 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/109, 0x6d}], 0x1}}], 0x1, 0x40000142, &(0x7f0000009100)) 02:09:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:09:38 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0xff, 0x3) lseek(r0, 0x80000001, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x1d, 0x1}, 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write(r4, &(0x7f0000000080)="917889887e7ca4d8ec8bba122df18026fc8ed4941c7d853e694cee6728df75c6da02d71beb556484fc5cb5adbb528090b61399166432", 0x36) 02:09:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x99ad) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x118, &(0x7f0000000180)=0x1, 0x0, 0x4) 02:09:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)=' ', 0x1, 0x99ad) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000180)=0x1, 0x0, 0x4) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x7, 0x100, 0xf774, 0x9, 0x0, 0x3f}) [ 229.373762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:38 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000108000000000000", @ANYRES32=r0, @ANYBLOB="06000000000000002e2f66696c653000"]) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x787001, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x202000, 0xa4, 0x10}, 0x18) r7 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r7, r7, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000180)) r8 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r8, r8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000180)) io_submit(0x0, 0x7, &(0x7f0000000900)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0xff01, 0xffffffffffffffff, &(0x7f0000000140)="eec85486b77cc2e724d3f7351eaa7aa1b4f716745ea99d261d25b84a9d55c4ad1586f9653ca7a89553808ecb15a1aa2445c8b7f0f9bee9ad0d415ad8103b924bd4419484b93871", 0x47, 0x7, 0x0, 0x1, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x22, 0xffffffffffffffff, &(0x7f0000000200)="6081d92743b06e1d8933a57145aae064cdc35935fc7aab46bf32e2e3e600e0812cc1b3e731e5e22857a147441f667c0ebc8f0e7d23394ad96056032b80ae83f90a6f519a4fa3fd297ff83090331a02879e2c56e9b737fa5b25d1c0a3467b11e69d33eddcc9aa4c29d1d73231342590793f8452494b7b7023382262ea4438bb251d6b7386da149a59552de40fe39f4c", 0x8f, 0x20, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x3, r3, &(0x7f0000000340)="983d7e50cba7abd8f51961a62b09f09db7a399cae8fc1e92d20dd970b2d63bc9818d27dca774993061a292a15e1a46cebbe6b6b7bcbe19b3677a6fcc184216d2c88edf0adb5e2fa5106c091a043fa30f00cc1593f3b9d3f7fb164c735ec7aee6469896898c25a745bf960a76d6751ab901fa01e9e83e09afcf0033216b374a1de8", 0x81, 0x0, 0x0, 0x4f1706f464e8b68, r4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x8001, r0, &(0x7f0000000480)="41c9c48db84bd35ff546c8f4aec2a13cf1916361f39a0d5d8a5d2275f8e38f56819e75585c8b489cf703bbee6aa97b25f8d8b6a0766e339a0052c31958db67825ac7339c98e5e07050983769326c94d5df4356d601a7802bf89e0da9bc9cff428e2b988d6bbbca2a6508caa35bd5f3c27fea013a1cd2608ef6de41", 0x7b, 0x1, 0x0, 0x1, r5}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x1, r6, &(0x7f0000000600)="6b445a49f98d967abea04b3277beb211f4ae0ce619df06d16eba8883c313299df6a326a97152cd44a19236caca09cf5e22044329d73c5179931979c23743e1e757b48a6d72ecd30bf7e05413d90ab42207536950d2059babb8189231fc94a58cdaa6c3ec54a95b2737b3d73ce14ded08bda70de05f5ecc3e9d11f4392b2d48ea7d807e31f1f758d2b1bad85f1cbe498901f570d59695dc56147e1ed77776e95d300d267c9154ed7f00f69522e8573a456c04798b2c9fe4024bce3bbcfb908245bd599084c9cba06c273991efc8df2af3f3e11654cad109950c57fb9ef29244", 0xdf, 0xaa, 0x0, 0x3, r2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x2, r1, &(0x7f0000000740)="b998e7a0efab81d74d02cd8592900b13aaf926a4f8a98b38980cc124c56778305ff9decd2b98f78c0ee87b019c44d4b4a1011426b78dd2f0d10ae7aba5fffd080c8e25721362e7db66556636b8861729f3a3955fd9c05d39a40ccf93ae490c11e7ac3e5e6a1a93f1974c49ef231be6757979d3df506ab1421a3ee9bbefb496f5848facccbe43d90bc6cde8fa13c01c6354841496ff297863a46f96e79f6f6c59", 0xa0, 0x6, 0x0, 0x1, r7}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x8, r8, &(0x7f0000000840)="dd61f651205541aa1ed6e4c1a654c679bb91d3bc9b3ef4ab717f2c21de490e117d0d3a9528516f02d8d361c927300b7503eec19f511287bc364a34eed2252d11c81e82980b8444f76cb81fbd13835d0be40152ba58fd166fa2f2bcbe85bf389633ef8a9ea3695ed33652952e3138e2b1d745bdd2f4489b52a124", 0x7a, 0x7, 0x0, 0x1}]) pwritev2(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0x2e, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000000100)=""/5, 0x5, 0x3f) r9 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev2(r9, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) [ 229.410292] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:09:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:09:38 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x30, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x30}}, 0x0) 02:09:38 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0xff, 0x3) lseek(r0, 0x80000001, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x1d, 0x1}, 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write(r4, &(0x7f0000000080)="917889887e7ca4d8ec8bba122df18026fc8ed4941c7d853e694cee6728df75c6da02d71beb556484fc5cb5adbb528090b61399166432", 0x36) [ 229.560141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = syz_open_procfs(0x0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) r4 = openat(r3, &(0x7f0000000200)='./file0\x00', 0x622000, 0x21) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000240)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r5, 0x0, r6, 0x0, 0x0, 0x0) fstat(r5, &(0x7f0000000100)) clone3(&(0x7f0000000080)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:09:47 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:09:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:09:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:09:47 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:09:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x99ad) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000000), 0x0, 0x4) 02:09:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x99ad) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x118, &(0x7f0000000180)=0x1, 0x0, 0x4) 02:09:47 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:09:48 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) truncate(&(0x7f0000000100)='./file0\x00', 0xe) preadv2(r1, &(0x7f0000000480)=[{&(0x7f0000000300)=""/70, 0x46}], 0x1, 0x0, 0x0, 0x0) 02:09:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r3, 0x0) 02:09:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:09:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x99ad) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x118, &(0x7f0000000180)=0x1, 0x0, 0x4) 02:09:48 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x44840}, 0x0, 0x4, 0xffffffffffffffff, 0x1) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xff, 0x4, 0xfc, 0x0, 0x0, 0x7b2adadc, 0x0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0xc01, 0x7f6, 0x40, 0x2, 0x0, 0x676, 0x5, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xc, r0, 0x1) llistxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) close(r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/51, 0x33) 02:09:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:09:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 02:09:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 02:09:48 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:09:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 02:09:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:09:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:09:56 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:09:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x99ad) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x118, &(0x7f0000000180)=0x1, 0x0, 0x4) 02:09:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:09:56 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:09:56 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:09:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:09:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:09:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:09:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:09:57 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) socket$inet6_udplite(0xa, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:09:57 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x99ad) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000000), 0x0, 0x4) 02:09:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:09:57 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:09:57 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:09:57 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x99ad) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r3, 0x0) 02:09:57 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) socket$inet6_udplite(0xa, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:09:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:10:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:07 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:07 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:10:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:07 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) socket$inet6_udplite(0xa, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:07 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) socket$inet6_udplite(0xa, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:07 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:10:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:07 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:07 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="bd1216c4590c6795ad000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653100"]) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:17 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:17 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:10:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:17 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:17 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:17 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:18 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) 02:10:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:26 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:26 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:26 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:26 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) 02:10:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:26 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:26 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:26 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) 02:10:26 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:26 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:10:26 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:10:26 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:26 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:26 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:26 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:10:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:10:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:37 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:37 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:37 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:37 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:10:38 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:10:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:46 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:46 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:46 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:46 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:55 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:10:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:55 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:55 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:10:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:10:55 executing program 7: dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:10:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:10:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:11:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:11:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:11:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:04 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:04 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:04 executing program 7: dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) 02:11:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:11:04 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) 02:11:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:05 executing program 7: dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:11:05 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) 02:11:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup3(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:11:15 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:15 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:15 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 02:11:15 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) 02:11:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 02:11:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 02:11:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 02:11:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 02:11:25 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup3(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:11:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:25 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40), 0x0, 0x0, 0x0) 02:11:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 02:11:25 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:25 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40), 0x0, 0x0, 0x0) 02:11:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:25 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:25 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:25 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40), 0x0, 0x0, 0x0) 02:11:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup3(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:11:34 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:34 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:34 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:34 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) dup2(r0, r0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:34 executing program 6: pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:34 executing program 5: pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:34 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:34 executing program 6: pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:34 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) dup2(r0, r0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:34 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) dup2(r0, r0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:34 executing program 6: pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:34 executing program 5: pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:35 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:35 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:35 executing program 5: pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:11:44 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:44 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:44 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:44 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:44 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:44 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:44 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) dup2(r0, r0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:44 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:11:44 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:44 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:44 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:44 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) mq_notify(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:44 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:53 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:53 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:53 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) mq_notify(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:53 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:53 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:53 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:11:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:11:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 02:11:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:11:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 02:12:04 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:04 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) mq_notify(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:04 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:04 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:04 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 02:12:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:04 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:04 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40), 0x0, 0x0, 0x0) 02:12:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:04 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:04 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:04 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40), 0x0, 0x0, 0x0) 02:12:04 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:13 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:13 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:13 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40), 0x0, 0x0, 0x0) 02:12:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:13 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:13 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:13 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:22 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:22 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mq_notify(r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:22 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:22 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:22 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) mq_notify(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:22 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:22 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:22 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) dup2(r0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:22 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mq_notify(r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:23 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:23 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:23 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) socket$inet6_udplite(0xa, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:23 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) mq_notify(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:23 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 398.734161] kworker/u10:0 (26) used greatest stack depth: 23888 bytes left 02:12:33 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:33 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:33 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) mq_notify(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:33 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:33 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16=r3], 0x28}}], 0x2, 0x4008004) socket$inet6_udplite(0xa, 0x2, 0x88) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:33 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mq_notify(r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:41 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:41 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:41 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:41 executing program 2: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:41 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:41 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:41 executing program 2: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:41 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:41 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:41 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:41 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:41 executing program 2: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:41 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(0x0, 0x0) 02:12:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:49 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:49 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:49 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(0x0, 0x0) 02:12:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:49 executing program 0: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:49 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:49 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:49 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(0x0, 0x0) 02:12:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:50 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:50 executing program 4: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:58 executing program 4: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:58 executing program 0: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:58 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:58 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x0, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:58 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:58 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:58 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x0, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:58 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:59 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:12:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:12:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:07 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:07 executing program 0: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:07 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:07 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:07 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x0, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 1) 02:13:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) [ 438.605141] FAULT_INJECTION: forcing a failure. [ 438.605141] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 438.606263] CPU: 0 UID: 0 PID: 5398 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 438.606280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 438.606287] Call Trace: [ 438.606291] [ 438.606296] dump_stack_lvl+0xfa/0x120 [ 438.606340] should_fail_ex+0x4d7/0x5e0 [ 438.606356] _copy_from_user+0x30/0xd0 [ 438.606370] copy_msghdr_from_user+0x88/0x150 [ 438.606393] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 438.606411] ? perf_trace_lock_acquire+0xc9/0x700 [ 438.606431] ? __lock_acquire+0x694/0x1b70 [ 438.606450] ___sys_recvmsg+0xbb/0x190 [ 438.606467] ? __pfx____sys_recvmsg+0x10/0x10 [ 438.606484] ? lock_acquire+0x15e/0x2f0 [ 438.606497] ? __fget_files+0x34/0x3b0 [ 438.606513] ? find_held_lock+0x2b/0x80 [ 438.606530] ? __fget_files+0x203/0x3b0 [ 438.606543] ? lock_release+0xc8/0x290 [ 438.606559] ? __fget_files+0x20d/0x3b0 [ 438.606579] do_recvmmsg+0x2c5/0x6f0 [ 438.606600] ? __pfx_do_recvmmsg+0x10/0x10 [ 438.606616] ? ksys_write+0x187/0x240 [ 438.606632] ? lock_release+0xc8/0x290 [ 438.606648] ? __mutex_unlock_slowpath+0x157/0x750 [ 438.606666] ? kernel_write+0x5e3/0x660 [ 438.606682] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 438.606701] ? __fget_files+0x20d/0x3b0 [ 438.606720] __x64_sys_recvmmsg+0x211/0x260 [ 438.606738] ? ksys_write+0x1a3/0x240 [ 438.606753] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 438.606777] do_syscall_64+0xbf/0x390 [ 438.606797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.606810] RIP: 0033:0x7ff705a3db19 [ 438.606819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 438.606830] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 438.606842] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 438.606850] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 438.606857] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 438.606865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.606871] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 438.606888] 02:13:07 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:07 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:07 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0}, 0x58) 02:13:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 2) 02:13:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 1) [ 438.848718] FAULT_INJECTION: forcing a failure. [ 438.848718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.849703] CPU: 0 UID: 0 PID: 5414 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 438.849720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 438.849727] Call Trace: [ 438.849732] [ 438.849737] dump_stack_lvl+0xfa/0x120 [ 438.849763] should_fail_ex+0x4d7/0x5e0 [ 438.849780] _copy_from_user+0x30/0xd0 [ 438.849794] copy_msghdr_from_user+0x88/0x150 [ 438.849816] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 438.849837] ? kfree+0x231/0x550 [ 438.849850] ? perf_trace_lock_acquire+0xc9/0x700 [ 438.849870] ___sys_recvmsg+0xbb/0x190 [ 438.849888] ? __pfx____sys_recvmsg+0x10/0x10 [ 438.849906] ? __fget_files+0x34/0x3b0 [ 438.849925] ? lock_acquire+0x15e/0x2f0 [ 438.849939] ? __might_fault+0xe0/0x190 [ 438.849955] ? find_held_lock+0x2b/0x80 [ 438.849973] ? __might_fault+0x138/0x190 [ 438.849995] do_recvmmsg+0x2c5/0x6f0 [ 438.850016] ? __pfx_do_recvmmsg+0x10/0x10 [ 438.850032] ? ksys_write+0x187/0x240 [ 438.850048] ? lock_release+0xc8/0x290 [ 438.850064] ? __mutex_unlock_slowpath+0x157/0x750 [ 438.850082] ? kernel_write+0x5e3/0x660 [ 438.850102] ? __fget_files+0x20d/0x3b0 [ 438.850120] __x64_sys_recvmmsg+0x211/0x260 [ 438.850139] ? ksys_write+0x1a3/0x240 [ 438.850154] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 438.850173] ? do_user_addr_fault+0x43a/0x12b0 [ 438.850190] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 438.850212] do_syscall_64+0xbf/0x390 [ 438.850234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.850247] RIP: 0033:0x7ff705a3db19 [ 438.850256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 438.850267] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 438.850279] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 438.850287] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 438.850294] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 438.850301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.850308] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 438.850326] 02:13:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) [ 438.919254] FAULT_INJECTION: forcing a failure. [ 438.919254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.920221] CPU: 0 UID: 0 PID: 5417 Comm: syz-executor.0 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 438.920237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 438.920244] Call Trace: [ 438.920248] [ 438.920253] dump_stack_lvl+0xfa/0x120 [ 438.920276] should_fail_ex+0x4d7/0x5e0 [ 438.920292] _copy_from_user+0x30/0xd0 [ 438.920306] copy_msghdr_from_user+0x88/0x150 [ 438.920327] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 438.920344] ? perf_trace_lock_acquire+0xc9/0x700 [ 438.920363] ? __lock_acquire+0x694/0x1b70 [ 438.920382] ___sys_recvmsg+0xbb/0x190 [ 438.920399] ? __pfx____sys_recvmsg+0x10/0x10 [ 438.920416] ? lock_acquire+0x15e/0x2f0 [ 438.920429] ? __fget_files+0x34/0x3b0 [ 438.920444] ? find_held_lock+0x2b/0x80 [ 438.920461] ? __fget_files+0x203/0x3b0 [ 438.920475] ? lock_release+0xc8/0x290 [ 438.920491] ? __fget_files+0x20d/0x3b0 [ 438.920520] do_recvmmsg+0x2c5/0x6f0 [ 438.920542] ? __pfx_do_recvmmsg+0x10/0x10 [ 438.920558] ? ksys_write+0x187/0x240 [ 438.920574] ? lock_release+0xc8/0x290 [ 438.920589] ? __mutex_unlock_slowpath+0x157/0x750 [ 438.920607] ? kernel_write+0x5e3/0x660 [ 438.920623] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 438.920642] ? __fget_files+0x20d/0x3b0 [ 438.920661] __x64_sys_recvmmsg+0x211/0x260 [ 438.920680] ? ksys_write+0x1a3/0x240 [ 438.920695] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 438.920713] ? do_user_addr_fault+0x43a/0x12b0 [ 438.920730] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 438.920747] do_syscall_64+0xbf/0x390 [ 438.920766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.920779] RIP: 0033:0x7f3fbcd52b19 [ 438.920787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 438.920799] RSP: 002b:00007f3fba2c8188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 438.920810] RAX: ffffffffffffffda RBX: 00007f3fbce65f60 RCX: 00007f3fbcd52b19 [ 438.920818] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 438.920826] RBP: 00007f3fba2c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 438.920833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.920840] R13: 00007ffd31e8a6ef R14: 00007f3fba2c8300 R15: 0000000000022000 [ 438.920858] 02:13:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) (fail_nth: 1) 02:13:08 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0}, 0x58) 02:13:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 2) [ 439.156681] FAULT_INJECTION: forcing a failure. [ 439.156681] name failslab, interval 1, probability 0, space 0, times 1 [ 439.156737] CPU: 0 UID: 0 PID: 5426 Comm: syz-executor.1 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 439.156754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 439.156762] Call Trace: [ 439.156767] [ 439.156773] dump_stack_lvl+0xfa/0x120 [ 439.156802] should_fail_ex+0x4d7/0x5e0 [ 439.156825] should_failslab+0xc2/0x120 [ 439.156846] __kmalloc_cache_noprof+0x73/0x6a0 [ 439.156860] ? __mutex_unlock_slowpath+0x157/0x750 [ 439.156882] ? kobject_uevent_env+0x22e/0xf90 [ 439.156896] ? __pfx___mutex_lock+0x10/0x10 [ 439.156925] ? kobject_uevent_env+0x22e/0xf90 [ 439.156942] kobject_uevent_env+0x22e/0xf90 [ 439.156964] ? bus_to_subsys+0x10e/0x150 [ 439.156993] device_del+0x80a/0xd20 [ 439.157016] ? __pfx_device_del+0x10/0x10 [ 439.157047] device_destroy+0x99/0xe0 [ 439.157062] ? __pfx_device_destroy+0x10/0x10 [ 439.157074] ? lock_release+0xc8/0x290 [ 439.157108] vcs_remove_sysfs+0x21/0x50 [ 439.157129] vc_deallocate+0x147/0x490 [ 439.157144] ? __pfx_vc_deallocate+0x10/0x10 [ 439.157176] vt_disallocate_all+0x24b/0x410 [ 439.157203] ? __pfx_vt_disallocate_all+0x10/0x10 [ 439.157253] ? avc_has_perm_noaudit+0x11b/0x3d0 [ 439.157272] ? lock_release+0xc8/0x290 [ 439.157295] ? avc_has_perm_noaudit+0x150/0x3d0 [ 439.157319] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 439.157342] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 439.157360] ? avc_has_extended_perms+0x107/0xf20 [ 439.157381] ? avc_has_extended_perms+0x23b/0xf20 [ 439.157397] ? lock_release+0xc3/0x290 [ 439.157422] ? cap_capable+0xdb/0x3b0 [ 439.157442] ? security_capable+0x2f/0x90 [ 439.157471] vt_ioctl+0x2376/0x2e60 [ 439.157496] ? __pfx_vt_ioctl+0x10/0x10 [ 439.157512] ? perf_trace_run_bpf_submit+0xef/0x180 [ 439.157543] ? perf_trace_lock+0x337/0x5d0 [ 439.157575] ? perf_trace_run_bpf_submit+0xef/0x180 [ 439.157594] ? perf_trace_run_bpf_submit+0xef/0x180 [ 439.157610] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 439.157634] ? __pfx_vt_ioctl+0x10/0x10 [ 439.157655] tty_ioctl+0x78b/0x1810 [ 439.157679] ? __pfx_tty_ioctl+0x10/0x10 [ 439.157697] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 439.157716] ? __mutex_unlock_slowpath+0x151/0x750 [ 439.157737] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 439.157760] ? down_read_killable_nested+0x3f8/0x4f0 [ 439.157778] ? __fget_files+0x34/0x3b0 [ 439.157795] ? find_held_lock+0x2b/0x80 [ 439.157814] ? __fget_files+0x203/0x3b0 [ 439.157830] ? lock_release+0xc8/0x290 [ 439.157859] ? selinux_file_ioctl+0xb9/0x280 [ 439.157883] ? __pfx_tty_ioctl+0x10/0x10 [ 439.157905] __x64_sys_ioctl+0x18f/0x210 [ 439.157925] do_syscall_64+0xbf/0x390 [ 439.157949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.157962] RIP: 0033:0x7f2af196ab19 [ 439.157972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 439.157984] RSP: 002b:00007f2aeeee0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.157996] RAX: ffffffffffffffda RBX: 00007f2af1a7df60 RCX: 00007f2af196ab19 [ 439.158004] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000005 [ 439.158011] RBP: 00007f2aeeee01d0 R08: 0000000000000000 R09: 0000000000000000 [ 439.158019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.158025] R13: 00007ffcb635d21f R14: 00007f2aeeee0300 R15: 0000000000022000 [ 439.158060] [ 439.938840] FAULT_INJECTION: forcing a failure. [ 439.938840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.940069] CPU: 0 UID: 0 PID: 5424 Comm: syz-executor.0 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 439.940088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 439.940098] Call Trace: [ 439.940103] [ 439.940109] dump_stack_lvl+0xfa/0x120 [ 439.940139] should_fail_ex+0x4d7/0x5e0 [ 439.940159] _copy_from_user+0x30/0xd0 [ 439.940176] copy_msghdr_from_user+0x88/0x150 [ 439.940206] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 439.940232] ? kfree+0x231/0x550 [ 439.940247] ? perf_trace_lock_acquire+0xc9/0x700 [ 439.940272] ___sys_recvmsg+0xbb/0x190 [ 439.940293] ? __pfx____sys_recvmsg+0x10/0x10 [ 439.940315] ? __fget_files+0x34/0x3b0 [ 439.940338] ? lock_acquire+0x15e/0x2f0 [ 439.940355] ? __might_fault+0xe0/0x190 [ 439.940375] ? find_held_lock+0x2b/0x80 [ 439.940396] ? __might_fault+0x138/0x190 [ 439.940423] do_recvmmsg+0x2c5/0x6f0 [ 439.940448] ? __pfx_do_recvmmsg+0x10/0x10 [ 439.940468] ? ksys_write+0x187/0x240 [ 439.940487] ? lock_release+0xc8/0x290 [ 439.940506] ? __mutex_unlock_slowpath+0x157/0x750 [ 439.940537] ? kernel_write+0x5e3/0x660 [ 439.940561] ? __fget_files+0x20d/0x3b0 [ 439.940584] __x64_sys_recvmmsg+0x211/0x260 [ 439.940606] ? ksys_write+0x1a3/0x240 [ 439.940624] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 439.940647] ? do_user_addr_fault+0x43a/0x12b0 [ 439.940667] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 439.940688] do_syscall_64+0xbf/0x390 [ 439.940712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.940728] RIP: 0033:0x7f3fbcd52b19 [ 439.940739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 439.940752] RSP: 002b:00007f3fba2c8188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 439.940767] RAX: ffffffffffffffda RBX: 00007f3fbce65f60 RCX: 00007f3fbcd52b19 [ 439.940777] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 439.940785] RBP: 00007f3fba2c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 439.940794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.940802] R13: 00007ffd31e8a6ef R14: 00007f3fba2c8300 R15: 0000000000022000 [ 439.940823] 02:13:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:13:17 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) (fail_nth: 2) 02:13:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 3) 02:13:17 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0}, 0x58) 02:13:17 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 448.009983] FAULT_INJECTION: forcing a failure. [ 448.009983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.010992] CPU: 0 UID: 0 PID: 5437 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 448.011008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 448.011015] Call Trace: [ 448.011019] [ 448.011024] dump_stack_lvl+0xfa/0x120 [ 448.011049] should_fail_ex+0x4d7/0x5e0 [ 448.011065] _copy_from_user+0x30/0xd0 [ 448.011079] copy_msghdr_from_user+0x88/0x150 [ 448.011099] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 448.011120] ? kfree+0x231/0x550 [ 448.011133] ? perf_trace_lock_acquire+0xc9/0x700 [ 448.011152] ___sys_recvmsg+0xbb/0x190 [ 448.011170] ? __pfx____sys_recvmsg+0x10/0x10 [ 448.011188] ? __fget_files+0x34/0x3b0 [ 448.011210] ? lock_acquire+0x15e/0x2f0 [ 448.011224] ? __might_fault+0xe0/0x190 [ 448.011240] ? find_held_lock+0x2b/0x80 [ 448.011258] ? __might_fault+0x138/0x190 [ 448.011279] do_recvmmsg+0x2c5/0x6f0 [ 448.011300] ? __pfx_do_recvmmsg+0x10/0x10 [ 448.011316] ? ksys_write+0x187/0x240 [ 448.011332] ? lock_release+0xc8/0x290 [ 448.011348] ? __mutex_unlock_slowpath+0x157/0x750 [ 448.011365] ? kernel_write+0x5e3/0x660 [ 448.011385] ? __fget_files+0x20d/0x3b0 [ 448.011404] __x64_sys_recvmmsg+0x211/0x260 [ 448.011422] ? ksys_write+0x1a3/0x240 [ 448.011436] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 448.011455] ? do_user_addr_fault+0x43a/0x12b0 [ 448.011472] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 448.011489] do_syscall_64+0xbf/0x390 [ 448.011508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.011521] RIP: 0033:0x7ff705a3db19 [ 448.011530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 448.011541] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 448.011552] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 448.011560] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 448.011567] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 448.011574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.011581] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 448.011598] 02:13:17 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0}, 0x58) [ 448.087519] FAULT_INJECTION: forcing a failure. [ 448.087519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.089403] CPU: 1 UID: 0 PID: 5447 Comm: syz-executor.1 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 448.089434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 448.089448] Call Trace: [ 448.089456] [ 448.089465] dump_stack_lvl+0xfa/0x120 [ 448.089510] should_fail_ex+0x4d7/0x5e0 [ 448.089541] _copy_from_user+0x30/0xd0 [ 448.089568] kstrtouint_from_user+0xbd/0x180 [ 448.089600] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 448.089632] ? __lock_acquire+0xc65/0x1b70 [ 448.089681] proc_fail_nth_write+0x7b/0x220 [ 448.089716] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 448.089753] ? lock_is_held_type+0x9e/0x120 [ 448.089793] vfs_write+0x2b7/0x1150 [ 448.089821] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 448.089862] ? __pfx_vfs_write+0x10/0x10 [ 448.089895] ? lock_release+0xc8/0x290 [ 448.089929] ? __fget_files+0x20d/0x3b0 [ 448.089973] ksys_write+0x121/0x240 [ 448.090003] ? __pfx_ksys_write+0x10/0x10 [ 448.090035] ? fput+0x6a/0x100 [ 448.090079] do_syscall_64+0xbf/0x390 [ 448.090119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.090143] RIP: 0033:0x7f2af191d5ff [ 448.090161] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 448.090182] RSP: 002b:00007f2aeeee0170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 448.090212] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2af191d5ff [ 448.090227] RDX: 0000000000000001 RSI: 00007f2aeeee01e0 RDI: 0000000000000006 [ 448.090241] RBP: 00007f2aeeee01d0 R08: 0000000000000000 R09: 0000000000000000 [ 448.090255] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 448.090268] R13: 00007ffcb635d21f R14: 00007f2aeeee0300 R15: 0000000000022000 [ 448.090306] 02:13:17 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 4) 02:13:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:13:26 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:26 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0}, 0x58) 02:13:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:26 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5608) [ 457.547506] FAULT_INJECTION: forcing a failure. [ 457.547506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.549474] CPU: 0 UID: 0 PID: 5471 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 457.549504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 457.549517] Call Trace: [ 457.549524] [ 457.549532] dump_stack_lvl+0xfa/0x120 [ 457.549572] should_fail_ex+0x4d7/0x5e0 [ 457.549599] _copy_from_user+0x30/0xd0 [ 457.549624] copy_msghdr_from_user+0x88/0x150 [ 457.549659] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 457.549699] ? kfree+0x231/0x550 [ 457.549720] ? perf_trace_lock_acquire+0xc9/0x700 [ 457.549755] ___sys_recvmsg+0xbb/0x190 [ 457.549787] ? __pfx____sys_recvmsg+0x10/0x10 [ 457.549821] ? __fget_files+0x34/0x3b0 [ 457.549853] ? lock_acquire+0x15e/0x2f0 [ 457.549878] ? __might_fault+0xe0/0x190 [ 457.549908] ? find_held_lock+0x2b/0x80 [ 457.549940] ? __might_fault+0x138/0x190 [ 457.549981] do_recvmmsg+0x2c5/0x6f0 [ 457.550019] ? __pfx_do_recvmmsg+0x10/0x10 [ 457.550050] ? ksys_write+0x187/0x240 [ 457.550078] ? lock_release+0xc8/0x290 [ 457.550108] ? __mutex_unlock_slowpath+0x157/0x750 [ 457.550139] ? kernel_write+0x5e3/0x660 [ 457.550176] ? __fget_files+0x20d/0x3b0 [ 457.550219] __x64_sys_recvmmsg+0x211/0x260 [ 457.550253] ? ksys_write+0x1a3/0x240 [ 457.550280] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 457.550314] ? do_user_addr_fault+0x43a/0x12b0 [ 457.550344] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 457.550374] do_syscall_64+0xbf/0x390 [ 457.550410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.550432] RIP: 0033:0x7ff705a3db19 [ 457.550448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 457.550469] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 457.550490] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 457.550504] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 457.550517] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 457.550530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.550543] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 457.550575] 02:13:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:26 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0}, 0x58) 02:13:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:26 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0, 0x0}, 0x58) 02:13:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 5) 02:13:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x2) 02:13:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) [ 457.850586] FAULT_INJECTION: forcing a failure. [ 457.850586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.852480] CPU: 0 UID: 0 PID: 5487 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 457.852513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 457.852527] Call Trace: [ 457.852535] [ 457.852544] dump_stack_lvl+0xfa/0x120 [ 457.852588] should_fail_ex+0x4d7/0x5e0 [ 457.852618] _copy_from_user+0x30/0xd0 [ 457.852646] copy_msghdr_from_user+0x88/0x150 [ 457.852685] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 457.852751] ? kfree+0x231/0x550 [ 457.852782] ? perf_trace_lock_acquire+0xc9/0x700 [ 457.852833] ___sys_recvmsg+0xbb/0x190 [ 457.852880] ? __pfx____sys_recvmsg+0x10/0x10 [ 457.852931] ? __fget_files+0x34/0x3b0 [ 457.852972] ? lock_acquire+0x15e/0x2f0 [ 457.853000] ? __might_fault+0xe0/0x190 [ 457.853033] ? find_held_lock+0x2b/0x80 [ 457.853069] ? __might_fault+0x138/0x190 [ 457.853114] do_recvmmsg+0x2c5/0x6f0 [ 457.853158] ? __pfx_do_recvmmsg+0x10/0x10 [ 457.853192] ? ksys_write+0x187/0x240 [ 457.853232] ? lock_release+0xc8/0x290 [ 457.853265] ? __mutex_unlock_slowpath+0x157/0x750 [ 457.853300] ? kernel_write+0x5e3/0x660 [ 457.853341] ? __fget_files+0x20d/0x3b0 [ 457.853381] __x64_sys_recvmmsg+0x211/0x260 [ 457.853419] ? ksys_write+0x1a3/0x240 [ 457.853449] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 457.853501] do_syscall_64+0xbf/0x390 [ 457.853540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.853565] RIP: 0033:0x7ff705a3db19 [ 457.853584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 457.853607] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 457.853630] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 457.853646] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 457.853661] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 457.853676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.853690] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 457.853726] 02:13:36 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x4, 0x0}}], 0x50a, 0x0, 0x0) 02:13:36 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0, 0x0}, 0x58) 02:13:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b2f) 02:13:36 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 6) 02:13:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) [ 467.664747] FAULT_INJECTION: forcing a failure. [ 467.664747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.665771] CPU: 0 UID: 0 PID: 5506 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 467.665787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 467.665794] Call Trace: [ 467.665798] [ 467.665802] dump_stack_lvl+0xfa/0x120 [ 467.665828] should_fail_ex+0x4d7/0x5e0 [ 467.665843] _copy_from_user+0x30/0xd0 [ 467.665857] copy_msghdr_from_user+0x88/0x150 [ 467.665877] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 467.665898] ? kfree+0x231/0x550 [ 467.665910] ? perf_trace_lock_acquire+0xc9/0x700 [ 467.665930] ___sys_recvmsg+0xbb/0x190 [ 467.665948] ? __pfx____sys_recvmsg+0x10/0x10 [ 467.665966] ? __fget_files+0x34/0x3b0 [ 467.665984] ? lock_acquire+0x15e/0x2f0 [ 467.665998] ? __might_fault+0xe0/0x190 [ 467.666014] ? find_held_lock+0x2b/0x80 [ 467.666031] ? __might_fault+0x138/0x190 [ 467.666053] do_recvmmsg+0x2c5/0x6f0 [ 467.666074] ? __pfx_do_recvmmsg+0x10/0x10 [ 467.666090] ? ksys_write+0x187/0x240 [ 467.666105] ? lock_release+0xc8/0x290 [ 467.666121] ? __mutex_unlock_slowpath+0x157/0x750 [ 467.666139] ? kernel_write+0x5e3/0x660 [ 467.666158] ? __fget_files+0x20d/0x3b0 [ 467.666177] __x64_sys_recvmmsg+0x211/0x260 [ 467.666199] ? ksys_write+0x1a3/0x240 [ 467.666214] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 467.666233] ? do_user_addr_fault+0x43a/0x12b0 [ 467.666253] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 467.666270] do_syscall_64+0xbf/0x390 [ 467.666290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.666302] RIP: 0033:0x7ff705a3db19 [ 467.666311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 467.666322] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 467.666333] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 467.666341] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 467.666348] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 467.666355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.666362] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 467.666379] 02:13:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 7) 02:13:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b30) 02:13:37 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 467.917191] FAULT_INJECTION: forcing a failure. [ 467.917191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.919379] CPU: 1 UID: 0 PID: 5526 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 467.919412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 467.919426] Call Trace: [ 467.919434] [ 467.919443] dump_stack_lvl+0xfa/0x120 [ 467.919487] should_fail_ex+0x4d7/0x5e0 [ 467.919518] _copy_from_user+0x30/0xd0 [ 467.919545] copy_msghdr_from_user+0x88/0x150 [ 467.919584] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 467.919629] ? kfree+0x231/0x550 [ 467.919652] ? perf_trace_lock_acquire+0xc9/0x700 [ 467.919692] ___sys_recvmsg+0xbb/0x190 [ 467.919729] ? __pfx____sys_recvmsg+0x10/0x10 [ 467.919767] ? __fget_files+0x34/0x3b0 [ 467.919803] ? lock_acquire+0x15e/0x2f0 [ 467.919831] ? __might_fault+0xe0/0x190 [ 467.919865] ? find_held_lock+0x2b/0x80 [ 467.919901] ? __might_fault+0x138/0x190 [ 467.919947] do_recvmmsg+0x2c5/0x6f0 [ 467.919991] ? __pfx_do_recvmmsg+0x10/0x10 [ 467.920025] ? ksys_write+0x187/0x240 [ 467.920057] ? lock_release+0xc8/0x290 [ 467.920090] ? __mutex_unlock_slowpath+0x157/0x750 [ 467.920125] ? kernel_write+0x5e3/0x660 [ 467.920166] ? __fget_files+0x20d/0x3b0 [ 467.920214] __x64_sys_recvmmsg+0x211/0x260 [ 467.920252] ? ksys_write+0x1a3/0x240 [ 467.920282] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 467.920322] ? do_user_addr_fault+0x43a/0x12b0 [ 467.920355] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 467.920389] do_syscall_64+0xbf/0x390 [ 467.920429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.920454] RIP: 0033:0x7ff705a3db19 [ 467.920473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 467.920496] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 467.920519] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 467.920536] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 467.920550] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 467.920565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.920579] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 467.920614] 02:13:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:37 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0, 0x0}, 0x58) 02:13:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b31) 02:13:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x40000, 0x0}}], 0x50a, 0x0, 0x0) 02:13:47 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 8) 02:13:47 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:47 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) [ 478.713757] FAULT_INJECTION: forcing a failure. [ 478.713757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.716000] CPU: 1 UID: 0 PID: 5547 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 478.716035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 478.716049] Call Trace: [ 478.716058] [ 478.716067] dump_stack_lvl+0xfa/0x120 [ 478.716114] should_fail_ex+0x4d7/0x5e0 [ 478.716146] _copy_from_user+0x30/0xd0 [ 478.716174] copy_msghdr_from_user+0x88/0x150 [ 478.716224] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 478.716272] ? kfree+0x231/0x550 [ 478.716297] ? perf_trace_lock_acquire+0xc9/0x700 [ 478.716338] ___sys_recvmsg+0xbb/0x190 [ 478.716377] ? __pfx____sys_recvmsg+0x10/0x10 [ 478.716418] ? __fget_files+0x34/0x3b0 [ 478.716456] ? lock_acquire+0x15e/0x2f0 [ 478.716485] ? __might_fault+0xe0/0x190 [ 478.716520] ? find_held_lock+0x2b/0x80 [ 478.716559] ? __might_fault+0x138/0x190 [ 478.716607] do_recvmmsg+0x2c5/0x6f0 [ 478.716653] ? __pfx_do_recvmmsg+0x10/0x10 [ 478.716689] ? ksys_write+0x187/0x240 [ 478.716723] ? lock_release+0xc8/0x290 [ 478.716759] ? __mutex_unlock_slowpath+0x157/0x750 [ 478.716796] ? kernel_write+0x5e3/0x660 [ 478.716839] ? __fget_files+0x20d/0x3b0 [ 478.716881] __x64_sys_recvmmsg+0x211/0x260 [ 478.716921] ? ksys_write+0x1a3/0x240 [ 478.716974] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 478.717016] ? do_user_addr_fault+0x43a/0x12b0 [ 478.717051] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 478.717086] do_syscall_64+0xbf/0x390 [ 478.717128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.717155] RIP: 0033:0x7ff705a3db19 [ 478.717174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 478.717199] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 478.717224] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 478.717241] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 02:13:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) [ 478.717256] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 478.717272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.717286] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 478.717324] 02:13:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 9) 02:13:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b32) 02:13:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) [ 478.888093] FAULT_INJECTION: forcing a failure. [ 478.888093] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 478.889946] CPU: 0 UID: 0 PID: 5565 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 478.889973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 478.889982] Call Trace: [ 478.889988] [ 478.889994] dump_stack_lvl+0xfa/0x120 [ 478.890026] should_fail_ex+0x4d7/0x5e0 [ 478.890047] should_fail_alloc_page+0xe0/0x110 [ 478.890072] prepare_alloc_pages+0x1af/0x500 [ 478.890100] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 478.890117] ? __kernel_text_address+0xd/0x40 [ 478.890137] ? perf_trace_lock_acquire+0xc9/0x700 [ 478.890158] ? arch_stack_walk+0x9c/0xf0 [ 478.890178] ? perf_trace_lock_acquire+0xc9/0x700 [ 478.890207] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 478.890224] ? perf_trace_lock+0xb5/0x5d0 [ 478.890248] ? __pfx_perf_trace_lock+0x10/0x10 [ 478.890271] ? lock_acquire+0x15e/0x2f0 [ 478.890289] ? __is_insn_slot_addr+0x2e/0x290 [ 478.890304] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 478.890326] ? policy_nodemask+0xeb/0x4e0 [ 478.890346] alloc_pages_mpol+0xed/0x340 [ 478.890363] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 478.890382] ? __pfx_perf_trace_lock+0x10/0x10 [ 478.890400] ? get_vma_policy+0x23b/0x350 [ 478.890421] vma_alloc_folio_noprof+0xe9/0x440 [ 478.890440] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 478.890458] ? find_held_lock+0x2b/0x80 [ 478.890481] ? do_wp_page+0x359/0x3430 [ 478.890506] ? lock_release+0xc8/0x290 [ 478.890528] do_wp_page+0x13fe/0x3430 [ 478.890560] ? __pfx_do_wp_page+0x10/0x10 [ 478.890585] ? do_raw_spin_lock+0x123/0x260 [ 478.890607] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 478.890629] ? ___pte_offset_map+0x176/0x370 [ 478.890657] __handle_mm_fault+0xe05/0x3320 [ 478.890671] ? mt_find+0x645/0x870 [ 478.890696] ? __pfx_mt_find+0x10/0x10 [ 478.890720] ? __pfx___handle_mm_fault+0x10/0x10 [ 478.890751] ? find_vma+0xbf/0x140 [ 478.890772] ? __pfx_find_vma+0x10/0x10 [ 478.890797] handle_mm_fault+0x2c3/0x9b0 [ 478.890813] ? access_error+0x17d/0x380 [ 478.890831] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 478.890854] do_user_addr_fault+0x3cc/0x12b0 [ 478.890882] exc_page_fault+0xb0/0x180 [ 478.890906] asm_exc_page_fault+0x26/0x30 [ 478.890921] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 478.890946] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 17 e7 02 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 f1 e6 02 00 90 90 90 90 90 90 90 90 90 90 [ 478.890961] RSP: 0018:ffff88804a1efa00 EFLAGS: 00050216 [ 478.890974] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000020003030 [ 478.890983] RDX: 0000000000040000 RSI: ffffffff83be5e3b RDI: 0000000000000005 [ 478.890993] RBP: ffff88804a1efda0 R08: 0000000000000001 R09: 0000000000000001 [ 478.891002] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 478.891011] R13: 0000000020003030 R14: 0000000000000000 R15: 0000000000000000 [ 478.891029] ? ____sys_recvmsg+0x2eb/0x670 [ 478.891052] ____sys_recvmsg+0x2f6/0x670 [ 478.891076] ? __pfx_____sys_recvmsg+0x10/0x10 [ 478.891095] ? copy_msghdr_from_user+0xfb/0x150 [ 478.891119] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 478.891149] ? kfree+0x231/0x550 [ 478.891163] ? perf_trace_lock_acquire+0xc9/0x700 [ 478.891188] ___sys_recvmsg+0xf1/0x190 [ 478.891212] ? __pfx____sys_recvmsg+0x10/0x10 [ 478.891244] ? lock_acquire+0x15e/0x2f0 [ 478.891261] ? __might_fault+0xe0/0x190 [ 478.891282] ? find_held_lock+0x2b/0x80 [ 478.891305] ? __might_fault+0x138/0x190 [ 478.891336] do_recvmmsg+0x2c5/0x6f0 [ 478.891366] ? __pfx_do_recvmmsg+0x10/0x10 [ 478.891387] ? ksys_write+0x187/0x240 [ 478.891408] ? lock_release+0xc8/0x290 [ 478.891430] ? __mutex_unlock_slowpath+0x157/0x750 [ 478.891452] ? kernel_write+0x5e3/0x660 [ 478.891480] ? __fget_files+0x20d/0x3b0 [ 478.891508] __x64_sys_recvmmsg+0x211/0x260 [ 478.891533] ? ksys_write+0x1a3/0x240 [ 478.891554] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 478.891579] ? do_user_addr_fault+0x43a/0x12b0 [ 478.891599] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 478.891622] do_syscall_64+0xbf/0x390 [ 478.891647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.891662] RIP: 0033:0x7ff705a3db19 [ 478.891674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 478.891688] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 478.891702] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 478.891712] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 478.891721] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 478.891730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.891739] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 478.891764] 02:13:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b33) 02:13:48 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 10) [ 479.146535] FAULT_INJECTION: forcing a failure. [ 479.146535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.147667] CPU: 0 UID: 0 PID: 5578 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 479.147685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 479.147693] Call Trace: [ 479.147698] [ 479.147703] dump_stack_lvl+0xfa/0x120 [ 479.147729] should_fail_ex+0x4d7/0x5e0 [ 479.147748] _copy_from_user+0x30/0xd0 [ 479.147765] copy_msghdr_from_user+0x88/0x150 [ 479.147787] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 479.147810] ? kfree+0x231/0x550 [ 479.147824] ? perf_trace_lock_acquire+0xc9/0x700 [ 479.147845] ___sys_recvmsg+0xbb/0x190 [ 479.147864] ? __pfx____sys_recvmsg+0x10/0x10 [ 479.147884] ? __fget_files+0x34/0x3b0 [ 479.147903] ? lock_acquire+0x15e/0x2f0 [ 479.147918] ? __might_fault+0xe0/0x190 [ 479.147936] ? find_held_lock+0x2b/0x80 [ 479.147955] ? __might_fault+0x138/0x190 [ 479.147978] do_recvmmsg+0x2c5/0x6f0 [ 479.148001] ? __pfx_do_recvmmsg+0x10/0x10 [ 479.148019] ? ksys_write+0x187/0x240 [ 479.148036] ? lock_release+0xc8/0x290 [ 479.148053] ? __mutex_unlock_slowpath+0x157/0x750 [ 479.148072] ? kernel_write+0x5e3/0x660 [ 479.148093] ? __fget_files+0x20d/0x3b0 [ 479.148113] __x64_sys_recvmmsg+0x211/0x260 [ 479.148133] ? ksys_write+0x1a3/0x240 [ 479.148149] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 479.148169] ? do_user_addr_fault+0x43a/0x12b0 [ 479.148186] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 479.148209] do_syscall_64+0xbf/0x390 [ 479.148230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.148243] RIP: 0033:0x7ff705a3db19 [ 479.148253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 479.148265] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 479.148278] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 479.148287] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 479.148295] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 479.148302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 479.148309] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 479.148328] 02:13:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x1000000, 0x0}}], 0x50a, 0x0, 0x0) 02:13:58 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:58 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b34) 02:13:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:58 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 11) [ 489.166680] FAULT_INJECTION: forcing a failure. [ 489.166680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.168295] CPU: 0 UID: 0 PID: 5600 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 489.168324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 489.168336] Call Trace: [ 489.168343] [ 489.168351] dump_stack_lvl+0xfa/0x120 [ 489.168391] should_fail_ex+0x4d7/0x5e0 [ 489.168418] _copy_from_user+0x30/0xd0 [ 489.168442] copy_msghdr_from_user+0x88/0x150 [ 489.168478] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 489.168519] ? kfree+0x231/0x550 [ 489.168540] ? perf_trace_lock_acquire+0xc9/0x700 [ 489.168575] ___sys_recvmsg+0xbb/0x190 [ 489.168609] ? __pfx____sys_recvmsg+0x10/0x10 [ 489.168645] ? __fget_files+0x34/0x3b0 [ 489.168679] ? lock_acquire+0x15e/0x2f0 [ 489.168706] ? __might_fault+0xe0/0x190 [ 489.168737] ? find_held_lock+0x2b/0x80 [ 489.168771] ? __might_fault+0x138/0x190 [ 489.168812] do_recvmmsg+0x2c5/0x6f0 [ 489.168855] ? __pfx_do_recvmmsg+0x10/0x10 [ 489.168888] ? ksys_write+0x187/0x240 [ 489.168920] ? lock_release+0xc8/0x290 [ 489.168951] ? __mutex_unlock_slowpath+0x157/0x750 [ 489.168985] ? kernel_write+0x5e3/0x660 [ 489.169026] ? __fget_files+0x20d/0x3b0 [ 489.169078] __x64_sys_recvmmsg+0x211/0x260 [ 489.169115] ? ksys_write+0x1a3/0x240 [ 489.169145] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 489.169184] ? do_user_addr_fault+0x43a/0x12b0 [ 489.169224] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 489.169257] do_syscall_64+0xbf/0x390 [ 489.169295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.169320] RIP: 0033:0x7ff705a3db19 [ 489.169337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 489.169360] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 489.169382] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 489.169398] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 489.169412] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 489.169426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.169440] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 489.169476] 02:13:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b35) 02:13:58 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:13:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 12) 02:13:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) [ 489.485728] FAULT_INJECTION: forcing a failure. [ 489.485728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.487637] CPU: 1 UID: 0 PID: 5610 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 489.487666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 489.487679] Call Trace: [ 489.487686] [ 489.487694] dump_stack_lvl+0xfa/0x120 [ 489.487733] should_fail_ex+0x4d7/0x5e0 [ 489.487760] _copy_from_user+0x30/0xd0 [ 489.487783] copy_msghdr_from_user+0x88/0x150 [ 489.487818] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 489.487858] ? kfree+0x231/0x550 [ 489.487879] ? perf_trace_lock_acquire+0xc9/0x700 [ 489.487913] ___sys_recvmsg+0xbb/0x190 [ 489.487946] ? __pfx____sys_recvmsg+0x10/0x10 [ 489.487980] ? __fget_files+0x34/0x3b0 [ 489.488012] ? lock_acquire+0x15e/0x2f0 [ 489.488037] ? __might_fault+0xe0/0x190 [ 489.488066] ? find_held_lock+0x2b/0x80 [ 489.488098] ? __might_fault+0x138/0x190 [ 489.488139] do_recvmmsg+0x2c5/0x6f0 [ 489.488178] ? __pfx_do_recvmmsg+0x10/0x10 [ 489.488215] ? ksys_write+0x187/0x240 [ 489.488243] ? lock_release+0xc8/0x290 [ 489.488273] ? __mutex_unlock_slowpath+0x157/0x750 [ 489.488304] ? kernel_write+0x5e3/0x660 [ 489.488340] ? __fget_files+0x20d/0x3b0 [ 489.488375] __x64_sys_recvmmsg+0x211/0x260 [ 489.488409] ? ksys_write+0x1a3/0x240 [ 489.488436] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 489.488470] ? do_user_addr_fault+0x43a/0x12b0 [ 489.488500] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 489.488530] do_syscall_64+0xbf/0x390 [ 489.488565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.488587] RIP: 0033:0x7ff705a3db19 [ 489.488603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 489.488623] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 489.488644] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 489.488659] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 489.488671] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 489.488684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.488697] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 489.488728] 02:13:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:13:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:09 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b31) 02:14:09 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b36) 02:14:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 13) 02:14:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x4}}], 0x50a, 0x0, 0x0) 02:14:09 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b1", 0x7d, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 500.414814] FAULT_INJECTION: forcing a failure. [ 500.414814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.414857] CPU: 0 UID: 0 PID: 5639 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 500.414880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 500.414890] Call Trace: [ 500.414896] [ 500.414904] dump_stack_lvl+0xfa/0x120 [ 500.414938] should_fail_ex+0x4d7/0x5e0 [ 500.414966] _copy_from_user+0x30/0xd0 [ 500.414996] copy_msghdr_from_user+0x88/0x150 [ 500.415042] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 500.415077] ? kfree+0x231/0x550 [ 500.415095] ? perf_trace_lock_acquire+0xc9/0x700 [ 500.415124] ___sys_recvmsg+0xbb/0x190 02:14:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 14) [ 500.415150] ? __pfx____sys_recvmsg+0x10/0x10 [ 500.415177] ? __fget_files+0x34/0x3b0 [ 500.415204] ? lock_acquire+0x15e/0x2f0 [ 500.415224] ? __might_fault+0xe0/0x190 [ 500.415247] ? find_held_lock+0x2b/0x80 [ 500.415273] ? __might_fault+0x138/0x190 [ 500.415306] do_recvmmsg+0x2c5/0x6f0 [ 500.415337] ? __pfx_do_recvmmsg+0x10/0x10 [ 500.415361] ? ksys_write+0x187/0x240 [ 500.415385] ? lock_release+0xc8/0x290 [ 500.415410] ? __mutex_unlock_slowpath+0x157/0x750 [ 500.415435] ? kernel_write+0x5e3/0x660 [ 500.415464] ? __fget_files+0x20d/0x3b0 [ 500.415493] __x64_sys_recvmmsg+0x211/0x260 [ 500.415520] ? ksys_write+0x1a3/0x240 [ 500.415542] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 500.415572] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 500.415597] do_syscall_64+0xbf/0x390 [ 500.415626] entry_SYSCALL_64_after_hwframe+0x77/0x7f 02:14:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x50a, 0x0, 0x0) [ 500.415644] RIP: 0033:0x7ff705a3db19 [ 500.415657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 500.415674] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 500.415691] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 500.415703] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 500.415713] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.415723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.415733] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 500.415759] [ 500.555265] FAULT_INJECTION: forcing a failure. [ 500.555265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.556691] CPU: 0 UID: 0 PID: 5647 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 500.556714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 500.556723] Call Trace: [ 500.556729] [ 500.556735] dump_stack_lvl+0xfa/0x120 [ 500.556766] should_fail_ex+0x4d7/0x5e0 [ 500.556788] _copy_from_user+0x30/0xd0 [ 500.556806] copy_msghdr_from_user+0x88/0x150 [ 500.556833] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 500.556863] ? kfree+0x231/0x550 [ 500.556880] ? perf_trace_lock_acquire+0xc9/0x700 [ 500.556907] ___sys_recvmsg+0xbb/0x190 [ 500.556931] ? __pfx____sys_recvmsg+0x10/0x10 [ 500.556962] ? __pfx_perf_trace_lock+0x10/0x10 [ 500.556999] ? lock_acquire+0x15e/0x2f0 [ 500.557021] ? __might_fault+0xe0/0x190 [ 500.557043] ? find_held_lock+0x2b/0x80 [ 500.557067] ? __might_fault+0x138/0x190 [ 500.557098] do_recvmmsg+0x2c5/0x6f0 [ 500.557128] ? __pfx_do_recvmmsg+0x10/0x10 [ 500.557150] ? ksys_write+0x187/0x240 [ 500.557172] ? lock_release+0xc8/0x290 [ 500.557212] ? __mutex_unlock_slowpath+0x157/0x750 [ 500.557235] ? kernel_write+0x5e3/0x660 [ 500.557264] ? __fget_files+0x20d/0x3b0 [ 500.557292] __x64_sys_recvmmsg+0x211/0x260 [ 500.557317] ? ksys_write+0x1a3/0x240 [ 500.557337] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 500.557363] ? do_user_addr_fault+0x43a/0x12b0 [ 500.557385] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 500.557408] do_syscall_64+0xbf/0x390 [ 500.557435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.557451] RIP: 0033:0x7ff705a3db19 02:14:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) [ 500.557464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 500.557479] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 500.557494] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 500.557505] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 500.557515] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.557524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.557533] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 500.557559] 02:14:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:09 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b1", 0x7d, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b37) 02:14:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:14:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 15) [ 500.883724] FAULT_INJECTION: forcing a failure. [ 500.883724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.884809] CPU: 0 UID: 0 PID: 5665 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 500.884827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 500.884835] Call Trace: [ 500.884840] [ 500.884845] dump_stack_lvl+0xfa/0x120 [ 500.884870] should_fail_ex+0x4d7/0x5e0 [ 500.884887] _copy_from_user+0x30/0xd0 [ 500.884902] copy_msghdr_from_user+0x88/0x150 [ 500.884923] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 500.884946] ? kfree+0x231/0x550 [ 500.884964] ? perf_trace_lock_acquire+0xc9/0x700 [ 500.884996] ___sys_recvmsg+0xbb/0x190 [ 500.885023] ? __pfx____sys_recvmsg+0x10/0x10 [ 500.885043] ? __fget_files+0x34/0x3b0 [ 500.885062] ? lock_acquire+0x15e/0x2f0 [ 500.885077] ? __might_fault+0xe0/0x190 [ 500.885094] ? find_held_lock+0x2b/0x80 [ 500.885113] ? __might_fault+0x138/0x190 [ 500.885136] do_recvmmsg+0x2c5/0x6f0 [ 500.885159] ? __pfx_do_recvmmsg+0x10/0x10 [ 500.885176] ? ksys_write+0x187/0x240 [ 500.885208] ? lock_release+0xc8/0x290 [ 500.885225] ? __mutex_unlock_slowpath+0x157/0x750 [ 500.885243] ? kernel_write+0x5e3/0x660 [ 500.885265] ? __fget_files+0x20d/0x3b0 [ 500.885285] __x64_sys_recvmmsg+0x211/0x260 [ 500.885304] ? ksys_write+0x1a3/0x240 [ 500.885320] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 500.885340] ? do_user_addr_fault+0x43a/0x12b0 [ 500.885357] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 500.885375] do_syscall_64+0xbf/0x390 [ 500.885397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.885411] RIP: 0033:0x7ff705a3db19 [ 500.885420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 500.885433] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 500.885445] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 500.885454] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 500.885461] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.885469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.885476] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 500.885494] 02:14:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 16) 02:14:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:18 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b1", 0x7d, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x1000000}}], 0x50a, 0x0, 0x0) 02:14:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:18 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3b) [ 509.151082] FAULT_INJECTION: forcing a failure. [ 509.151082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.153006] CPU: 1 UID: 0 PID: 5688 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 509.153037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 509.153050] Call Trace: [ 509.153058] [ 509.153067] dump_stack_lvl+0xfa/0x120 [ 509.153109] should_fail_ex+0x4d7/0x5e0 [ 509.153139] _copy_from_user+0x30/0xd0 [ 509.153165] copy_msghdr_from_user+0x88/0x150 [ 509.153210] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 509.153255] ? kfree+0x231/0x550 [ 509.153278] ? perf_trace_lock_acquire+0xc9/0x700 [ 509.153327] ___sys_recvmsg+0xbb/0x190 [ 509.153363] ? __pfx____sys_recvmsg+0x10/0x10 [ 509.153401] ? __pfx_perf_trace_lock+0x10/0x10 [ 509.153436] ? lock_acquire+0x15e/0x2f0 [ 509.153463] ? __might_fault+0xe0/0x190 [ 509.153495] ? find_held_lock+0x2b/0x80 [ 509.153530] ? __might_fault+0x138/0x190 [ 509.153576] do_recvmmsg+0x2c5/0x6f0 [ 509.153620] ? __pfx_do_recvmmsg+0x10/0x10 [ 509.153652] ? ksys_write+0x187/0x240 [ 509.153683] ? lock_release+0xc8/0x290 [ 509.153717] ? __mutex_unlock_slowpath+0x157/0x750 [ 509.153750] ? kernel_write+0x5e3/0x660 [ 509.153792] ? __fget_files+0x20d/0x3b0 [ 509.153833] __x64_sys_recvmmsg+0x211/0x260 [ 509.153869] ? ksys_write+0x1a3/0x240 [ 509.153898] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 509.153936] ? do_user_addr_fault+0x43a/0x12b0 [ 509.153968] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 509.154001] do_syscall_64+0xbf/0x390 [ 509.154040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.154064] RIP: 0033:0x7ff705a3db19 [ 509.154082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 509.154104] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 509.154126] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 509.154142] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 509.154155] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 509.154169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 509.154182] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 509.154220] 02:14:18 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:14:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x4000000000000}}], 0x50a, 0x0, 0x0) 02:14:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:18 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:14:18 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0", 0xbc, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3c) 02:14:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 17) 02:14:18 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) [ 509.604012] FAULT_INJECTION: forcing a failure. [ 509.604012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.605924] CPU: 1 UID: 0 PID: 5715 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 509.605955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 509.605968] Call Trace: [ 509.605977] [ 509.605986] dump_stack_lvl+0xfa/0x120 [ 509.606029] should_fail_ex+0x4d7/0x5e0 [ 509.606058] _copy_from_user+0x30/0xd0 [ 509.606084] copy_msghdr_from_user+0x88/0x150 [ 509.606122] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 509.606165] ? kfree+0x231/0x550 [ 509.606187] ? perf_trace_lock_acquire+0xc9/0x700 [ 509.606232] ___sys_recvmsg+0xbb/0x190 [ 509.606266] ? __pfx____sys_recvmsg+0x10/0x10 [ 509.606303] ? __fget_files+0x34/0x3b0 [ 509.606337] ? lock_acquire+0x15e/0x2f0 [ 509.606364] ? __might_fault+0xe0/0x190 [ 509.606395] ? find_held_lock+0x2b/0x80 [ 509.606430] ? __might_fault+0x138/0x190 [ 509.606473] do_recvmmsg+0x2c5/0x6f0 [ 509.606515] ? __pfx_do_recvmmsg+0x10/0x10 [ 509.606547] ? ksys_write+0x187/0x240 [ 509.606577] ? lock_release+0xc8/0x290 [ 509.606609] ? __mutex_unlock_slowpath+0x157/0x750 [ 509.606642] ? kernel_write+0x5e3/0x660 [ 509.606681] ? __fget_files+0x20d/0x3b0 [ 509.606719] __x64_sys_recvmmsg+0x211/0x260 [ 509.606755] ? ksys_write+0x1a3/0x240 [ 509.606784] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 509.606822] ? do_user_addr_fault+0x43a/0x12b0 [ 509.606853] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 509.606885] do_syscall_64+0xbf/0x390 [ 509.606923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.606947] RIP: 0033:0x7ff705a3db19 [ 509.606965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 509.606987] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 509.607009] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 509.607025] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 509.607039] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 509.607053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 509.607066] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 509.607100] 02:14:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x100000000000000}}], 0x50a, 0x0, 0x0) 02:14:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 18) 02:14:27 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0", 0xbc, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3d) 02:14:27 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x99ad) 02:14:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:27 executing program 7: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b3a) 02:14:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x99ad) 02:14:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x99ad) [ 518.202058] FAULT_INJECTION: forcing a failure. [ 518.202058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.204024] CPU: 1 UID: 0 PID: 5736 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 518.204055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 518.204067] Call Trace: [ 518.204075] [ 518.204084] dump_stack_lvl+0xfa/0x120 [ 518.204130] should_fail_ex+0x4d7/0x5e0 [ 518.204157] _copy_from_user+0x30/0xd0 [ 518.204182] copy_msghdr_from_user+0x88/0x150 [ 518.204226] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 518.204264] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 518.204289] ? kfree+0x231/0x550 [ 518.204309] ? perf_trace_lock_acquire+0xc9/0x700 [ 518.204343] ___sys_recvmsg+0xbb/0x190 [ 518.204376] ? __pfx____sys_recvmsg+0x10/0x10 [ 518.204418] ? lock_acquire+0x15e/0x2f0 [ 518.204443] ? __might_fault+0xe0/0x190 [ 518.204472] ? find_held_lock+0x2b/0x80 [ 518.204505] ? __might_fault+0x138/0x190 [ 518.204545] do_recvmmsg+0x2c5/0x6f0 [ 518.204584] ? __pfx_do_recvmmsg+0x10/0x10 [ 518.204614] ? ksys_write+0x187/0x240 [ 518.204642] ? lock_release+0xc8/0x290 [ 518.204672] ? __mutex_unlock_slowpath+0x157/0x750 [ 518.204703] ? kernel_write+0x5e3/0x660 [ 518.204739] ? __fget_files+0x20d/0x3b0 [ 518.204775] __x64_sys_recvmmsg+0x211/0x260 [ 518.204809] ? ksys_write+0x1a3/0x240 [ 518.204836] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 518.204870] ? do_user_addr_fault+0x43a/0x12b0 [ 518.204900] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 518.204929] do_syscall_64+0xbf/0x390 [ 518.204964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.204987] RIP: 0033:0x7ff705a3db19 [ 518.205003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 518.205024] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 518.205045] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 518.205060] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 518.205073] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 518.205085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.205098] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 518.205129] 02:14:35 executing program 7: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b3a) 02:14:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:14:35 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b40) 02:14:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x99ad) 02:14:35 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0", 0xbc, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 19) 02:14:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x50a, 0x0, 0x0) [ 526.826520] FAULT_INJECTION: forcing a failure. [ 526.826520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.827562] CPU: 0 UID: 0 PID: 5754 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 526.827579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 526.827587] Call Trace: [ 526.827591] [ 526.827596] dump_stack_lvl+0xfa/0x120 [ 526.827622] should_fail_ex+0x4d7/0x5e0 [ 526.827638] _copy_from_user+0x30/0xd0 [ 526.827652] copy_msghdr_from_user+0x88/0x150 [ 526.827672] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 526.827693] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 526.827707] ? kfree+0x231/0x550 [ 526.827719] ? perf_trace_lock_acquire+0xc9/0x700 [ 526.827739] ___sys_recvmsg+0xbb/0x190 [ 526.827757] ? __pfx____sys_recvmsg+0x10/0x10 [ 526.827780] ? lock_acquire+0x15e/0x2f0 [ 526.827794] ? __might_fault+0xe0/0x190 [ 526.827811] ? find_held_lock+0x2b/0x80 [ 526.827828] ? __might_fault+0x138/0x190 [ 526.827850] do_recvmmsg+0x2c5/0x6f0 [ 526.827872] ? __pfx_do_recvmmsg+0x10/0x10 [ 526.827889] ? ksys_write+0x187/0x240 [ 526.827906] ? lock_release+0xc8/0x290 [ 526.827922] ? __mutex_unlock_slowpath+0x157/0x750 [ 526.827939] ? kernel_write+0x5e3/0x660 [ 526.827959] ? __fget_files+0x20d/0x3b0 [ 526.827980] __x64_sys_recvmmsg+0x211/0x260 [ 526.827999] ? ksys_write+0x1a3/0x240 [ 526.828013] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 526.828032] ? do_user_addr_fault+0x43a/0x12b0 [ 526.828049] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 526.828065] do_syscall_64+0xbf/0x390 [ 526.828087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.828100] RIP: 0033:0x7ff705a3db19 [ 526.828109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 526.828120] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 526.828132] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 526.828140] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 526.828147] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 526.828154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 526.828161] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 526.828178] 02:14:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 20) 02:14:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x99ad) 02:14:36 executing program 7: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b3a) 02:14:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x99ad) [ 526.921548] FAULT_INJECTION: forcing a failure. [ 526.921548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.922577] CPU: 1 UID: 0 PID: 5767 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 526.922603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 526.922616] Call Trace: [ 526.922620] [ 526.922625] dump_stack_lvl+0xfa/0x120 [ 526.922652] should_fail_ex+0x4d7/0x5e0 [ 526.922674] _copy_from_user+0x30/0xd0 [ 526.922694] copy_msghdr_from_user+0x88/0x150 [ 526.922714] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 526.922737] ? kfree+0x231/0x550 [ 526.922750] ? perf_trace_lock_acquire+0xc9/0x700 [ 526.922773] ___sys_recvmsg+0xbb/0x190 [ 526.922800] ? __pfx____sys_recvmsg+0x10/0x10 [ 526.922824] ? __fget_files+0x34/0x3b0 [ 526.922849] ? lock_acquire+0x15e/0x2f0 [ 526.922870] ? __might_fault+0xe0/0x190 [ 526.922900] ? find_held_lock+0x2b/0x80 [ 526.922925] ? __might_fault+0x138/0x190 [ 526.922954] do_recvmmsg+0x2c5/0x6f0 [ 526.922980] ? __pfx_do_recvmmsg+0x10/0x10 [ 526.923010] ? ksys_write+0x187/0x240 [ 526.923034] ? lock_release+0xc8/0x290 [ 526.923057] ? __mutex_unlock_slowpath+0x157/0x750 [ 526.923075] ? kernel_write+0x5e3/0x660 [ 526.923096] ? __fget_files+0x20d/0x3b0 [ 526.923115] __x64_sys_recvmmsg+0x211/0x260 [ 526.923136] ? ksys_write+0x1a3/0x240 [ 526.923151] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 526.923170] ? do_user_addr_fault+0x43a/0x12b0 [ 526.923193] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 526.923211] do_syscall_64+0xbf/0x390 [ 526.923232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.923246] RIP: 0033:0x7ff705a3db19 [ 526.923255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 526.923268] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 526.923280] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 526.923289] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 526.923296] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 526.923303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 526.923310] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 526.923328] 02:14:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b41) 02:14:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 21) 02:14:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x99ad) 02:14:36 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:14:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x99ad) 02:14:36 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 527.059548] FAULT_INJECTION: forcing a failure. [ 527.059548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.060580] CPU: 1 UID: 0 PID: 5778 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 527.060596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 527.060603] Call Trace: [ 527.060607] [ 527.060611] dump_stack_lvl+0xfa/0x120 [ 527.060636] should_fail_ex+0x4d7/0x5e0 [ 527.060651] _copy_from_user+0x30/0xd0 [ 527.060664] copy_msghdr_from_user+0x88/0x150 [ 527.060685] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 527.060705] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 527.060719] ? kfree+0x231/0x550 [ 527.060731] ? perf_trace_lock_acquire+0xc9/0x700 [ 527.060751] ___sys_recvmsg+0xbb/0x190 [ 527.060768] ? __pfx____sys_recvmsg+0x10/0x10 [ 527.060791] ? lock_acquire+0x15e/0x2f0 [ 527.060805] ? __might_fault+0xe0/0x190 [ 527.060821] ? find_held_lock+0x2b/0x80 [ 527.060838] ? __might_fault+0x138/0x190 [ 527.060860] do_recvmmsg+0x2c5/0x6f0 [ 527.060880] ? __pfx_do_recvmmsg+0x10/0x10 [ 527.060897] ? ksys_write+0x187/0x240 [ 527.060913] ? lock_release+0xc8/0x290 [ 527.060929] ? __mutex_unlock_slowpath+0x157/0x750 [ 527.060948] ? kernel_write+0x5e3/0x660 [ 527.060967] ? __fget_files+0x20d/0x3b0 [ 527.060988] __x64_sys_recvmmsg+0x211/0x260 [ 527.061006] ? ksys_write+0x1a3/0x240 [ 527.061020] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 527.061039] ? do_user_addr_fault+0x43a/0x12b0 [ 527.061055] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 527.061071] do_syscall_64+0xbf/0x390 [ 527.061090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.061103] RIP: 0033:0x7ff705a3db19 [ 527.061112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 527.061124] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 527.061136] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 527.061144] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 527.061151] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 527.061158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.061164] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 527.061181] 02:14:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x50a, 0x0, 0x0) 02:14:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 22) 02:14:44 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x99ad) 02:14:44 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f9", 0xdb, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:44 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:14:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b44) 02:14:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x99ad) 02:14:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) [ 535.744601] FAULT_INJECTION: forcing a failure. [ 535.744601] name fail_usercopy, interval 1, probability 0, space 0, times 0 02:14:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x99ad) [ 535.745625] CPU: 0 UID: 0 PID: 5810 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 535.745643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 535.745651] Call Trace: [ 535.745655] [ 535.745660] dump_stack_lvl+0xfa/0x120 [ 535.745685] should_fail_ex+0x4d7/0x5e0 [ 535.745701] _copy_from_user+0x30/0xd0 [ 535.745715] copy_msghdr_from_user+0x88/0x150 [ 535.745736] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 535.745757] ? kfree+0x231/0x550 [ 535.745769] ? perf_trace_lock_acquire+0xc9/0x700 [ 535.745789] ___sys_recvmsg+0xbb/0x190 [ 535.745807] ? __pfx____sys_recvmsg+0x10/0x10 [ 535.745829] ? lock_acquire+0x15e/0x2f0 [ 535.745843] ? __might_fault+0xe0/0x190 [ 535.745860] ? find_held_lock+0x2b/0x80 [ 535.745878] ? __might_fault+0x138/0x190 [ 535.745899] do_recvmmsg+0x2c5/0x6f0 [ 535.745920] ? __pfx_do_recvmmsg+0x10/0x10 [ 535.745936] ? ksys_write+0x187/0x240 [ 535.745953] ? lock_release+0xc8/0x290 [ 535.745969] ? __mutex_unlock_slowpath+0x157/0x750 [ 535.745987] ? kernel_write+0x5e3/0x660 [ 535.746007] ? __fget_files+0x20d/0x3b0 [ 535.746027] __x64_sys_recvmmsg+0x211/0x260 [ 535.746046] ? ksys_write+0x1a3/0x240 [ 535.746060] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 535.746079] ? do_user_addr_fault+0x43a/0x12b0 [ 535.746096] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 535.746113] do_syscall_64+0xbf/0x390 [ 535.746133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.746145] RIP: 0033:0x7ff705a3db19 [ 535.746155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 535.746166] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 535.746178] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 535.746186] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 535.746198] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 535.746205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.746212] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 535.746229] 02:14:45 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:14:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 23) 02:14:45 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x99ad) 02:14:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) 02:14:45 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x4b3a) [ 536.016557] FAULT_INJECTION: forcing a failure. [ 536.016557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.018519] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 536.018555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 536.018568] Call Trace: [ 536.018575] [ 536.018583] dump_stack_lvl+0xfa/0x120 [ 536.018623] should_fail_ex+0x4d7/0x5e0 [ 536.018651] _copy_from_user+0x30/0xd0 [ 536.018675] copy_msghdr_from_user+0x88/0x150 [ 536.018709] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 536.018749] ? kfree+0x231/0x550 [ 536.018770] ? perf_trace_lock_acquire+0xc9/0x700 [ 536.018805] ___sys_recvmsg+0xbb/0x190 [ 536.018838] ? __pfx____sys_recvmsg+0x10/0x10 [ 536.018871] ? __fget_files+0x34/0x3b0 [ 536.018904] ? lock_acquire+0x15e/0x2f0 [ 536.018935] ? __might_fault+0xe0/0x190 [ 536.018965] ? find_held_lock+0x2b/0x80 [ 536.018997] ? __might_fault+0x138/0x190 [ 536.019037] do_recvmmsg+0x2c5/0x6f0 [ 536.019076] ? __pfx_do_recvmmsg+0x10/0x10 [ 536.019106] ? ksys_write+0x187/0x240 [ 536.019133] ? lock_release+0xc8/0x290 [ 536.019163] ? __mutex_unlock_slowpath+0x157/0x750 [ 536.019205] ? kernel_write+0x5e3/0x660 [ 536.019242] ? __fget_files+0x20d/0x3b0 [ 536.019277] __x64_sys_recvmmsg+0x211/0x260 [ 536.019311] ? ksys_write+0x1a3/0x240 [ 536.019337] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 536.019372] ? do_user_addr_fault+0x43a/0x12b0 [ 536.019401] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 536.019431] do_syscall_64+0xbf/0x390 [ 536.019466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.019489] RIP: 0033:0x7ff705a3db19 [ 536.019505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 536.019525] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 536.019546] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 536.019560] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 536.019573] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 536.019586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.019598] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 536.019630] 02:14:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 24) 02:14:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 02:14:54 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f9", 0xdb, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x99ad) 02:14:54 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:14:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b46) 02:14:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x50a, 0x0, 0x0) 02:14:54 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x4b3a) [ 544.999382] FAULT_INJECTION: forcing a failure. [ 544.999382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.006430] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 545.006469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 545.006484] Call Trace: [ 545.006492] [ 545.006502] dump_stack_lvl+0xfa/0x120 [ 545.006550] should_fail_ex+0x4d7/0x5e0 [ 545.006582] _copy_from_user+0x30/0xd0 [ 545.006610] copy_msghdr_from_user+0x88/0x150 [ 545.006652] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 545.006694] ? strlen+0x5e/0xa0 [ 545.006720] ? kfree+0x231/0x550 [ 545.006745] ? perf_trace_lock_acquire+0xc9/0x700 [ 545.006787] ___sys_recvmsg+0xbb/0x190 [ 545.006826] ? __pfx____sys_recvmsg+0x10/0x10 [ 545.006867] ? __fget_files+0x34/0x3b0 [ 545.006905] ? lock_acquire+0x15e/0x2f0 [ 545.006935] ? __might_fault+0xe0/0x190 [ 545.006970] ? find_held_lock+0x2b/0x80 [ 545.007009] ? __might_fault+0x138/0x190 [ 545.007057] do_recvmmsg+0x2c5/0x6f0 [ 545.007104] ? __pfx_do_recvmmsg+0x10/0x10 [ 545.007140] ? ksys_write+0x187/0x240 [ 545.007174] ? lock_release+0xc8/0x290 [ 545.007218] ? __mutex_unlock_slowpath+0x157/0x750 [ 545.007255] ? kernel_write+0x5e3/0x660 [ 545.007299] ? __fget_files+0x20d/0x3b0 [ 545.007341] __x64_sys_recvmmsg+0x211/0x260 [ 545.007381] ? ksys_write+0x1a3/0x240 [ 545.007414] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 545.007455] ? do_user_addr_fault+0x43a/0x12b0 [ 545.007491] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 545.007527] do_syscall_64+0xbf/0x390 [ 545.007569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.007595] RIP: 0033:0x7ff705a3db19 [ 545.007615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 545.007640] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 545.007665] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 545.007683] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 545.007699] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 545.007714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 545.007729] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 545.007767] 02:14:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 02:14:54 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x4b3a) 02:14:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 02:14:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 25) 02:14:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b47) 02:14:54 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(0x0, 0x0) 02:14:54 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f9", 0xdb, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 545.352683] FAULT_INJECTION: forcing a failure. [ 545.352683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.354736] CPU: 1 UID: 0 PID: 5864 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 545.354767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 545.354780] Call Trace: [ 545.354788] [ 545.354796] dump_stack_lvl+0xfa/0x120 [ 545.354837] should_fail_ex+0x4d7/0x5e0 [ 545.354865] _copy_from_user+0x30/0xd0 [ 545.354889] copy_msghdr_from_user+0x88/0x150 [ 545.354924] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 545.354964] ? kfree+0x231/0x550 [ 545.354985] ? perf_trace_lock_acquire+0xc9/0x700 [ 545.355020] ___sys_recvmsg+0xbb/0x190 [ 545.355053] ? __pfx____sys_recvmsg+0x10/0x10 [ 545.355086] ? __fget_files+0x34/0x3b0 [ 545.355118] ? lock_acquire+0x15e/0x2f0 [ 545.355144] ? __might_fault+0xe0/0x190 [ 545.355173] ? find_held_lock+0x2b/0x80 [ 545.355213] ? __might_fault+0x138/0x190 [ 545.355253] do_recvmmsg+0x2c5/0x6f0 [ 545.355292] ? __pfx_do_recvmmsg+0x10/0x10 [ 545.355322] ? ksys_write+0x187/0x240 [ 545.355350] ? lock_release+0xc8/0x290 [ 545.355380] ? __mutex_unlock_slowpath+0x157/0x750 [ 545.355410] ? kernel_write+0x5e3/0x660 [ 545.355447] ? __fget_files+0x20d/0x3b0 [ 545.355482] __x64_sys_recvmmsg+0x211/0x260 [ 545.355515] ? ksys_write+0x1a3/0x240 [ 545.355542] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 545.355577] ? do_user_addr_fault+0x43a/0x12b0 [ 545.355606] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 545.355636] do_syscall_64+0xbf/0x390 [ 545.355672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.355694] RIP: 0033:0x7ff705a3db19 [ 545.355711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 545.355731] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 545.355753] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 545.355767] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 545.355780] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 545.355793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 545.355805] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 545.355836] 02:14:54 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:14:54 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(0x0, 0x0) 02:14:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) 02:14:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 02:14:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b48) 02:15:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 26) 02:15:04 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(0x0, 0x0) 02:15:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x50a, 0x0, 0x0) 02:15:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b49) 02:15:04 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:15:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 02:15:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) 02:15:04 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a4", 0xeb, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 555.146088] FAULT_INJECTION: forcing a failure. [ 555.146088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.147093] CPU: 1 UID: 0 PID: 5891 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 555.147109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 555.147117] Call Trace: [ 555.147121] [ 555.147125] dump_stack_lvl+0xfa/0x120 [ 555.147149] should_fail_ex+0x4d7/0x5e0 [ 555.147165] _copy_from_user+0x30/0xd0 [ 555.147178] copy_msghdr_from_user+0x88/0x150 [ 555.147202] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 555.147224] ? kfree+0x231/0x550 [ 555.147236] ? perf_trace_lock_acquire+0xc9/0x700 [ 555.147256] ___sys_recvmsg+0xbb/0x190 [ 555.147273] ? __pfx____sys_recvmsg+0x10/0x10 [ 555.147291] ? __fget_files+0x34/0x3b0 [ 555.147310] ? lock_acquire+0x15e/0x2f0 [ 555.147324] ? __might_fault+0xe0/0x190 [ 555.147340] ? find_held_lock+0x2b/0x80 [ 555.147358] ? __might_fault+0x138/0x190 [ 555.147379] do_recvmmsg+0x2c5/0x6f0 [ 555.147400] ? __pfx_do_recvmmsg+0x10/0x10 [ 555.147416] ? ksys_write+0x187/0x240 [ 555.147432] ? lock_release+0xc8/0x290 [ 555.147448] ? __mutex_unlock_slowpath+0x157/0x750 [ 555.147466] ? kernel_write+0x5e3/0x660 [ 555.147485] ? __fget_files+0x20d/0x3b0 [ 555.147504] __x64_sys_recvmmsg+0x211/0x260 [ 555.147522] ? ksys_write+0x1a3/0x240 [ 555.147536] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 555.147555] ? do_user_addr_fault+0x43a/0x12b0 [ 555.147572] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 555.147589] do_syscall_64+0xbf/0x390 [ 555.147608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.147621] RIP: 0033:0x7ff705a3db19 [ 555.147630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.147642] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 555.147653] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 555.147661] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 555.147668] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.147675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.147681] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 555.147698] 02:15:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 27) 02:15:04 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:15:04 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x0, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:15:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b4a) [ 555.285279] FAULT_INJECTION: forcing a failure. [ 555.285279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.286306] CPU: 1 UID: 0 PID: 5907 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 555.286322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 555.286330] Call Trace: [ 555.286334] [ 555.286339] dump_stack_lvl+0xfa/0x120 [ 555.286363] should_fail_ex+0x4d7/0x5e0 [ 555.286380] _copy_from_user+0x30/0xd0 [ 555.286393] copy_msghdr_from_user+0x88/0x150 [ 555.286414] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 555.286435] ? kfree+0x231/0x550 [ 555.286448] ? perf_trace_lock_acquire+0xc9/0x700 [ 555.286467] ___sys_recvmsg+0xbb/0x190 [ 555.286485] ? __pfx____sys_recvmsg+0x10/0x10 [ 555.286503] ? __fget_files+0x34/0x3b0 [ 555.286521] ? lock_acquire+0x15e/0x2f0 [ 555.286535] ? __might_fault+0xe0/0x190 [ 555.286551] ? find_held_lock+0x2b/0x80 [ 555.286569] ? __might_fault+0x138/0x190 [ 555.286590] do_recvmmsg+0x2c5/0x6f0 [ 555.286611] ? __pfx_do_recvmmsg+0x10/0x10 [ 555.286627] ? ksys_write+0x187/0x240 [ 555.286643] ? lock_release+0xc8/0x290 [ 555.286659] ? __mutex_unlock_slowpath+0x157/0x750 [ 555.286676] ? kernel_write+0x5e3/0x660 [ 555.286696] ? __fget_files+0x20d/0x3b0 [ 555.286715] __x64_sys_recvmmsg+0x211/0x260 [ 555.286733] ? ksys_write+0x1a3/0x240 [ 555.286747] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 555.286766] ? do_user_addr_fault+0x43a/0x12b0 [ 555.286782] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 555.286799] do_syscall_64+0xbf/0x390 [ 555.286819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.286831] RIP: 0033:0x7ff705a3db19 [ 555.286841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.286852] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 555.286864] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 555.286872] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 555.286879] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.286886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.286892] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 555.286909] 02:15:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 28) 02:15:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) [ 555.363891] FAULT_INJECTION: forcing a failure. [ 555.363891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.364877] CPU: 1 UID: 0 PID: 5909 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 555.364894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 555.364901] Call Trace: [ 555.364905] [ 555.364909] dump_stack_lvl+0xfa/0x120 [ 555.364933] should_fail_ex+0x4d7/0x5e0 [ 555.364948] _copy_from_user+0x30/0xd0 [ 555.364961] copy_msghdr_from_user+0x88/0x150 [ 555.364981] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 555.365002] ? kfree+0x231/0x550 [ 555.365014] ? perf_trace_lock_acquire+0xc9/0x700 [ 555.365034] ___sys_recvmsg+0xbb/0x190 [ 555.365051] ? __pfx____sys_recvmsg+0x10/0x10 [ 555.365070] ? __fget_files+0x34/0x3b0 [ 555.365088] ? lock_acquire+0x15e/0x2f0 [ 555.365102] ? __might_fault+0xe0/0x190 [ 555.365118] ? find_held_lock+0x2b/0x80 [ 555.365136] ? __might_fault+0x138/0x190 [ 555.365157] do_recvmmsg+0x2c5/0x6f0 [ 555.365178] ? __pfx_do_recvmmsg+0x10/0x10 [ 555.365198] ? ksys_write+0x187/0x240 [ 555.365214] ? lock_release+0xc8/0x290 [ 555.365230] ? __mutex_unlock_slowpath+0x157/0x750 [ 555.365247] ? kernel_write+0x5e3/0x660 [ 555.365267] ? __fget_files+0x20d/0x3b0 [ 555.365286] __x64_sys_recvmmsg+0x211/0x260 [ 555.365304] ? ksys_write+0x1a3/0x240 [ 555.365318] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 555.365337] ? do_user_addr_fault+0x43a/0x12b0 [ 555.365354] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 555.365371] do_syscall_64+0xbf/0x390 [ 555.365390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.365403] RIP: 0033:0x7ff705a3db19 [ 555.365412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.365423] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 555.365434] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 555.365442] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 555.365449] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.365456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.365463] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 555.365479] 02:15:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x99ad) 02:15:04 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:15:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 29) 02:15:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b4b) [ 555.584498] FAULT_INJECTION: forcing a failure. [ 555.584498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.586580] CPU: 0 UID: 0 PID: 5926 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 555.586610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 555.586623] Call Trace: [ 555.586630] [ 555.586639] dump_stack_lvl+0xfa/0x120 [ 555.586679] should_fail_ex+0x4d7/0x5e0 [ 555.586707] _copy_from_user+0x30/0xd0 [ 555.586732] copy_msghdr_from_user+0x88/0x150 [ 555.586767] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 555.586807] ? kfree+0x231/0x550 [ 555.586828] ? perf_trace_lock_acquire+0xc9/0x700 [ 555.586864] ___sys_recvmsg+0xbb/0x190 [ 555.586897] ? __pfx____sys_recvmsg+0x10/0x10 [ 555.586931] ? __fget_files+0x34/0x3b0 [ 555.586963] ? lock_acquire+0x15e/0x2f0 [ 555.586989] ? __might_fault+0xe0/0x190 [ 555.587018] ? find_held_lock+0x2b/0x80 [ 555.587051] ? __might_fault+0x138/0x190 [ 555.587092] do_recvmmsg+0x2c5/0x6f0 [ 555.587130] ? __pfx_do_recvmmsg+0x10/0x10 [ 555.587161] ? ksys_write+0x187/0x240 [ 555.587197] ? lock_release+0xc8/0x290 [ 555.587227] ? __mutex_unlock_slowpath+0x157/0x750 [ 555.587258] ? kernel_write+0x5e3/0x660 [ 555.587295] ? __fget_files+0x20d/0x3b0 [ 555.587330] __x64_sys_recvmmsg+0x211/0x260 [ 555.587363] ? ksys_write+0x1a3/0x240 [ 555.587390] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 555.587425] ? do_user_addr_fault+0x43a/0x12b0 [ 555.587455] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 555.587486] do_syscall_64+0xbf/0x390 [ 555.587522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.587545] RIP: 0033:0x7ff705a3db19 [ 555.587562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.587582] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 555.587603] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 555.587617] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 555.587630] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.587643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.587655] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 555.587686] 02:15:14 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b4a) 02:15:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b4c) 02:15:14 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a4", 0xeb, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:15:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 30) 02:15:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x50a, 0x0, 0x0) 02:15:14 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x0, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:15:14 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b45) 02:15:14 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) [ 565.124900] FAULT_INJECTION: forcing a failure. [ 565.124900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.126988] CPU: 1 UID: 0 PID: 5949 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 565.127019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 565.127031] Call Trace: [ 565.127039] [ 565.127048] dump_stack_lvl+0xfa/0x120 [ 565.127089] should_fail_ex+0x4d7/0x5e0 [ 565.127118] _copy_from_user+0x30/0xd0 [ 565.127143] copy_msghdr_from_user+0x88/0x150 [ 565.127179] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 565.127228] ? kfree+0x231/0x550 [ 565.127250] ? perf_trace_lock_acquire+0xc9/0x700 [ 565.127286] ___sys_recvmsg+0xbb/0x190 [ 565.127320] ? __pfx____sys_recvmsg+0x10/0x10 [ 565.127355] ? __pfx_perf_trace_lock+0x10/0x10 [ 565.127388] ? lock_acquire+0x15e/0x2f0 [ 565.127413] ? __might_fault+0xe0/0x190 [ 565.127443] ? find_held_lock+0x2b/0x80 [ 565.127475] ? __might_fault+0x138/0x190 [ 565.127518] do_recvmmsg+0x2c5/0x6f0 [ 565.127559] ? __pfx_do_recvmmsg+0x10/0x10 [ 565.127589] ? ksys_write+0x187/0x240 [ 565.127618] ? lock_release+0xc8/0x290 [ 565.127649] ? __mutex_unlock_slowpath+0x157/0x750 [ 565.127680] ? kernel_write+0x5e3/0x660 [ 565.127719] ? __fget_files+0x20d/0x3b0 [ 565.127757] __x64_sys_recvmmsg+0x211/0x260 [ 565.127791] ? ksys_write+0x1a3/0x240 [ 565.127818] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 565.127854] ? do_user_addr_fault+0x43a/0x12b0 [ 565.127884] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 565.127915] do_syscall_64+0xbf/0x390 [ 565.127951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.127974] RIP: 0033:0x7ff705a3db19 [ 565.127991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 565.128011] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 565.128032] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 565.128047] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 565.128059] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 565.128072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 565.128085] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 565.128120] 02:15:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:15:25 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:15:25 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a4", 0xeb, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:15:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 31) 02:15:25 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b45) 02:15:25 executing program 6: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0", 0xbc, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:15:25 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x0, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:15:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b4d) [ 576.009447] FAULT_INJECTION: forcing a failure. [ 576.009447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.011321] CPU: 1 UID: 0 PID: 5970 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 576.011351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 576.011365] Call Trace: [ 576.011373] [ 576.011382] dump_stack_lvl+0xfa/0x120 [ 576.011423] should_fail_ex+0x4d7/0x5e0 [ 576.011453] _copy_from_user+0x30/0xd0 [ 576.011478] copy_msghdr_from_user+0x88/0x150 [ 576.011514] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 576.011553] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 576.011578] ? kfree+0x231/0x550 [ 576.011600] ? perf_trace_lock_acquire+0xc9/0x700 [ 576.011636] ___sys_recvmsg+0xbb/0x190 [ 576.011669] ? __pfx____sys_recvmsg+0x10/0x10 [ 576.011704] ? __pfx_perf_trace_lock+0x10/0x10 [ 576.011737] ? lock_acquire+0x15e/0x2f0 [ 576.011762] ? __might_fault+0xe0/0x190 [ 576.011792] ? find_held_lock+0x2b/0x80 [ 576.011824] ? __might_fault+0x138/0x190 02:15:25 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) [ 576.011867] do_recvmmsg+0x2c5/0x6f0 [ 576.011908] ? __pfx_do_recvmmsg+0x10/0x10 [ 576.011938] ? ksys_write+0x187/0x240 [ 576.011966] ? lock_release+0xc8/0x290 [ 576.011997] ? __mutex_unlock_slowpath+0x157/0x750 [ 576.012028] ? kernel_write+0x5e3/0x660 [ 576.012067] ? __fget_files+0x20d/0x3b0 [ 576.012105] __x64_sys_recvmmsg+0x211/0x260 02:15:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 32) [ 576.012138] ? ksys_write+0x1a3/0x240 [ 576.012166] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 576.012209] ? do_user_addr_fault+0x43a/0x12b0 [ 576.012239] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 576.012269] do_syscall_64+0xbf/0x390 [ 576.012305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.012327] RIP: 0033:0x7ff705a3db19 [ 576.012344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 576.012364] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 576.012385] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 576.012399] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 576.012412] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 576.012425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.012437] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 576.012472] [ 576.126918] FAULT_INJECTION: forcing a failure. [ 576.126918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.128019] CPU: 0 UID: 0 PID: 5981 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 576.128045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 576.128053] Call Trace: [ 576.128057] [ 576.128062] dump_stack_lvl+0xfa/0x120 [ 576.128091] should_fail_ex+0x4d7/0x5e0 [ 576.128108] _copy_from_user+0x30/0xd0 [ 576.128125] copy_msghdr_from_user+0x88/0x150 [ 576.128150] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 576.128172] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 576.128194] ? kfree+0x231/0x550 [ 576.128207] ? perf_trace_lock_acquire+0xc9/0x700 [ 576.128230] ___sys_recvmsg+0xbb/0x190 [ 576.128260] ? __pfx____sys_recvmsg+0x10/0x10 [ 576.128290] ? lock_acquire+0x15e/0x2f0 [ 576.128309] ? __might_fault+0xe0/0x190 [ 576.128328] ? find_held_lock+0x2b/0x80 [ 576.128358] ? __might_fault+0x138/0x190 [ 576.128392] do_recvmmsg+0x2c5/0x6f0 [ 576.128423] ? __pfx_do_recvmmsg+0x10/0x10 [ 576.128451] ? ksys_write+0x187/0x240 [ 576.128479] ? lock_release+0xc8/0x290 [ 576.128517] ? __mutex_unlock_slowpath+0x157/0x750 [ 576.128541] ? kernel_write+0x5e3/0x660 [ 576.128564] ? __fget_files+0x20d/0x3b0 [ 576.128587] __x64_sys_recvmmsg+0x211/0x260 [ 576.128614] ? ksys_write+0x1a3/0x240 [ 576.128632] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 576.128657] ? do_user_addr_fault+0x43a/0x12b0 [ 576.128676] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 576.128694] do_syscall_64+0xbf/0x390 [ 576.128718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.128735] RIP: 0033:0x7ff705a3db19 [ 576.128746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 576.128762] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 576.128774] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 576.128784] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 576.128791] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 576.128800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.128807] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 576.128825] 02:15:25 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b45) 02:15:25 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0}, 0x58) 02:15:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b4e) 02:15:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 33) 02:15:25 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad", 0xf3, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 576.269128] FAULT_INJECTION: forcing a failure. [ 576.269128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.270260] CPU: 0 UID: 0 PID: 5990 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 576.270277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 576.270285] Call Trace: [ 576.270289] [ 576.270294] dump_stack_lvl+0xfa/0x120 [ 576.270319] should_fail_ex+0x4d7/0x5e0 [ 576.270335] _copy_from_user+0x30/0xd0 [ 576.270349] copy_msghdr_from_user+0x88/0x150 [ 576.270369] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 576.270392] ? kfree+0x231/0x550 [ 576.270404] ? perf_trace_lock_acquire+0xc9/0x700 [ 576.270424] ___sys_recvmsg+0xbb/0x190 [ 576.270442] ? __pfx____sys_recvmsg+0x10/0x10 [ 576.270460] ? __fget_files+0x34/0x3b0 [ 576.270483] ? lock_acquire+0x15e/0x2f0 [ 576.270504] ? __might_fault+0xe0/0x190 [ 576.270525] ? find_held_lock+0x2b/0x80 [ 576.270543] ? __might_fault+0x138/0x190 [ 576.270565] do_recvmmsg+0x2c5/0x6f0 [ 576.270586] ? __pfx_do_recvmmsg+0x10/0x10 [ 576.270603] ? ksys_write+0x187/0x240 [ 576.270619] ? lock_release+0xc8/0x290 [ 576.270635] ? __mutex_unlock_slowpath+0x157/0x750 [ 576.270653] ? kernel_write+0x5e3/0x660 [ 576.270673] ? __fget_files+0x20d/0x3b0 [ 576.270693] __x64_sys_recvmmsg+0x211/0x260 [ 576.270711] ? ksys_write+0x1a3/0x240 [ 576.270726] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 576.270747] ? do_user_addr_fault+0x43a/0x12b0 [ 576.270763] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 576.270781] do_syscall_64+0xbf/0x390 [ 576.270801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.270814] RIP: 0033:0x7ff705a3db19 [ 576.270822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 576.270834] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 576.270845] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 576.270853] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 576.270860] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 576.270867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.270874] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 576.270891] 02:15:25 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0}, 0x58) 02:15:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 34) 02:15:34 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad", 0xf3, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:15:34 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:15:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x50a, 0x0, 0x0) 02:15:34 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0}, 0x58) 02:15:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b52) 02:15:34 executing program 6: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0", 0xbc, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:15:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) [ 585.679771] FAULT_INJECTION: forcing a failure. [ 585.679771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.681099] CPU: 0 UID: 0 PID: 6015 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 585.681121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.681131] Call Trace: [ 585.681137] [ 585.681143] dump_stack_lvl+0xfa/0x120 [ 585.681176] should_fail_ex+0x4d7/0x5e0 [ 585.681202] _copy_from_user+0x30/0xd0 [ 585.681222] copy_msghdr_from_user+0x88/0x150 [ 585.681249] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 585.681278] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 585.681297] ? kfree+0x231/0x550 [ 585.681312] ? perf_trace_lock_acquire+0xc9/0x700 [ 585.681340] ___sys_recvmsg+0xbb/0x190 [ 585.681364] ? __pfx____sys_recvmsg+0x10/0x10 [ 585.681390] ? __pfx_perf_trace_lock+0x10/0x10 [ 585.681414] ? lock_acquire+0x15e/0x2f0 [ 585.681433] ? __might_fault+0xe0/0x190 [ 585.681455] ? find_held_lock+0x2b/0x80 [ 585.681479] ? __might_fault+0x138/0x190 [ 585.681510] do_recvmmsg+0x2c5/0x6f0 [ 585.681540] ? __pfx_do_recvmmsg+0x10/0x10 [ 585.681562] ? ksys_write+0x187/0x240 [ 585.681584] ? lock_release+0xc8/0x290 [ 585.681606] ? __mutex_unlock_slowpath+0x157/0x750 [ 585.681629] ? kernel_write+0x5e3/0x660 [ 585.681658] ? __fget_files+0x20d/0x3b0 [ 585.681686] __x64_sys_recvmmsg+0x211/0x260 [ 585.681711] ? ksys_write+0x1a3/0x240 [ 585.681731] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 585.681757] ? do_user_addr_fault+0x43a/0x12b0 [ 585.681781] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 585.681803] do_syscall_64+0xbf/0x390 [ 585.681830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.681847] RIP: 0033:0x7ff705a3db19 [ 585.681860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 585.681875] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 585.681890] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 585.681901] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 585.681911] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 585.681920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.681930] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 585.681955] 02:15:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) 02:15:34 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0}, 0x58) 02:15:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b62) 02:15:35 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:15:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 35) 02:15:35 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad", 0xf3, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:15:35 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0}, 0x58) 02:15:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) [ 585.931967] FAULT_INJECTION: forcing a failure. [ 585.931967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.933113] CPU: 0 UID: 0 PID: 6033 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 585.933133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.933141] Call Trace: [ 585.933147] [ 585.933153] dump_stack_lvl+0xfa/0x120 [ 585.933186] should_fail_ex+0x4d7/0x5e0 [ 585.933209] _copy_from_user+0x30/0xd0 [ 585.933231] copy_msghdr_from_user+0x88/0x150 [ 585.933258] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 585.933283] ? kfree+0x231/0x550 [ 585.933298] ? perf_trace_lock_acquire+0xc9/0x700 [ 585.933321] ___sys_recvmsg+0xbb/0x190 [ 585.933342] ? __pfx____sys_recvmsg+0x10/0x10 [ 585.933363] ? __fget_files+0x34/0x3b0 [ 585.933385] ? lock_acquire+0x15e/0x2f0 02:15:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b63) [ 585.933402] ? __might_fault+0xe0/0x190 [ 585.933422] ? find_held_lock+0x2b/0x80 [ 585.933446] ? __might_fault+0x138/0x190 [ 585.933472] do_recvmmsg+0x2c5/0x6f0 [ 585.933498] ? __pfx_do_recvmmsg+0x10/0x10 [ 585.933518] ? ksys_write+0x187/0x240 [ 585.933537] ? lock_release+0xc8/0x290 [ 585.933557] ? __mutex_unlock_slowpath+0x157/0x750 [ 585.933577] ? kernel_write+0x5e3/0x660 [ 585.933600] ? __fget_files+0x20d/0x3b0 [ 585.933623] __x64_sys_recvmmsg+0x211/0x260 [ 585.933645] ? ksys_write+0x1a3/0x240 [ 585.933662] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 585.933684] ? do_user_addr_fault+0x43a/0x12b0 [ 585.933704] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 585.933724] do_syscall_64+0xbf/0x390 [ 585.933747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.933762] RIP: 0033:0x7ff705a3db19 [ 585.933772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 585.933785] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 585.933799] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 585.933808] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 585.933817] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 585.933825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.933833] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 585.933853] 02:15:44 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0}, 0x58) 02:15:44 executing program 7: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x4b3a) 02:15:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x4b45) 02:15:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 36) 02:15:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b64) 02:15:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x50a, 0x0, 0x0) 02:15:44 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) [ 595.313282] FAULT_INJECTION: forcing a failure. [ 595.313282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.314313] CPU: 1 UID: 0 PID: 6051 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 595.314329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 595.314336] Call Trace: [ 595.314341] [ 595.314345] dump_stack_lvl+0xfa/0x120 [ 595.314371] should_fail_ex+0x4d7/0x5e0 [ 595.314386] _copy_from_user+0x30/0xd0 [ 595.314399] copy_msghdr_from_user+0x88/0x150 [ 595.314420] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 595.314441] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 595.314455] ? kfree+0x231/0x550 [ 595.314467] ? perf_trace_lock_acquire+0xc9/0x700 [ 595.314487] ___sys_recvmsg+0xbb/0x190 [ 595.314504] ? __pfx____sys_recvmsg+0x10/0x10 02:15:44 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73a", 0xf7, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 595.314527] ? lock_acquire+0x15e/0x2f0 [ 595.314541] ? __might_fault+0xe0/0x190 [ 595.314557] ? find_held_lock+0x2b/0x80 [ 595.314575] ? __might_fault+0x138/0x190 [ 595.314596] do_recvmmsg+0x2c5/0x6f0 [ 595.314617] ? __pfx_do_recvmmsg+0x10/0x10 [ 595.314633] ? ksys_write+0x187/0x240 [ 595.314650] ? lock_release+0xc8/0x290 [ 595.314665] ? __mutex_unlock_slowpath+0x157/0x750 [ 595.314682] ? kernel_write+0x5e3/0x660 [ 595.314702] ? __fget_files+0x20d/0x3b0 [ 595.314727] __x64_sys_recvmmsg+0x211/0x260 [ 595.314745] ? ksys_write+0x1a3/0x240 [ 595.314759] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 595.314778] ? do_user_addr_fault+0x43a/0x12b0 [ 595.314794] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 595.314810] do_syscall_64+0xbf/0x390 [ 595.314829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.314842] RIP: 0033:0x7ff705a3db19 [ 595.314851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 595.314862] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 595.314873] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 595.314881] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 595.314888] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 595.314895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 595.314902] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 595.314919] 02:15:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 37) 02:15:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x4b45) 02:15:44 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:15:44 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0, 0x0}, 0x58) [ 595.441076] FAULT_INJECTION: forcing a failure. [ 595.441076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.442094] CPU: 1 UID: 0 PID: 6066 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 595.442110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 595.442118] Call Trace: [ 595.442122] [ 595.442127] dump_stack_lvl+0xfa/0x120 [ 595.442151] should_fail_ex+0x4d7/0x5e0 [ 595.442167] _copy_from_user+0x30/0xd0 [ 595.442181] copy_msghdr_from_user+0x88/0x150 [ 595.442205] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 595.442226] ? kfree+0x231/0x550 [ 595.442238] ? perf_trace_lock_acquire+0xc9/0x700 [ 595.442265] ___sys_recvmsg+0xbb/0x190 [ 595.442282] ? __pfx____sys_recvmsg+0x10/0x10 [ 595.442300] ? __fget_files+0x34/0x3b0 [ 595.442318] ? lock_acquire+0x15e/0x2f0 [ 595.442332] ? __might_fault+0xe0/0x190 [ 595.442348] ? find_held_lock+0x2b/0x80 [ 595.442366] ? __might_fault+0x138/0x190 [ 595.442387] do_recvmmsg+0x2c5/0x6f0 [ 595.442408] ? __pfx_do_recvmmsg+0x10/0x10 [ 595.442424] ? ksys_write+0x187/0x240 [ 595.442440] ? lock_release+0xc8/0x290 [ 595.442456] ? __mutex_unlock_slowpath+0x157/0x750 [ 595.442473] ? kernel_write+0x5e3/0x660 [ 595.442493] ? __fget_files+0x20d/0x3b0 [ 595.442512] __x64_sys_recvmmsg+0x211/0x260 [ 595.442530] ? ksys_write+0x1a3/0x240 [ 595.442545] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 595.442563] ? do_user_addr_fault+0x43a/0x12b0 [ 595.442580] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 595.442597] do_syscall_64+0xbf/0x390 [ 595.442616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.442629] RIP: 0033:0x7ff705a3db19 [ 595.442638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 595.442649] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 595.442661] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 595.442669] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 595.442676] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 595.442682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 595.442689] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 595.442706] 02:15:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b65) 02:15:44 executing program 7: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x4b3a) 02:15:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x4b45) 02:15:44 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:15:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 38) 02:15:44 executing program 6: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad", 0xf3, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:15:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) [ 595.631552] FAULT_INJECTION: forcing a failure. [ 595.631552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.634741] CPU: 0 UID: 0 PID: 6080 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 595.634774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 595.634787] Call Trace: [ 595.634795] [ 595.634803] dump_stack_lvl+0xfa/0x120 [ 595.634844] should_fail_ex+0x4d7/0x5e0 [ 595.634872] _copy_from_user+0x30/0xd0 [ 595.634898] copy_msghdr_from_user+0x88/0x150 [ 595.634936] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 595.634977] ? kfree+0x231/0x550 [ 595.634998] ? perf_trace_lock_acquire+0xc9/0x700 [ 595.635033] ___sys_recvmsg+0xbb/0x190 [ 595.635066] ? __pfx____sys_recvmsg+0x10/0x10 [ 595.635102] ? __fget_files+0x34/0x3b0 [ 595.635134] ? lock_acquire+0x15e/0x2f0 [ 595.635161] ? __might_fault+0xe0/0x190 [ 595.635199] ? find_held_lock+0x2b/0x80 [ 595.635235] ? __might_fault+0x138/0x190 [ 595.635275] do_recvmmsg+0x2c5/0x6f0 02:15:44 executing program 7: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x4b3a) [ 595.635318] ? __pfx_do_recvmmsg+0x10/0x10 [ 595.635351] ? ksys_write+0x187/0x240 [ 595.635381] ? lock_release+0xc8/0x290 [ 595.635422] ? __mutex_unlock_slowpath+0x157/0x750 [ 595.635466] ? kernel_write+0x5e3/0x660 [ 595.635519] ? __fget_files+0x20d/0x3b0 [ 595.635570] __x64_sys_recvmmsg+0x211/0x260 [ 595.635621] ? ksys_write+0x1a3/0x240 [ 595.635659] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 595.635709] ? do_user_addr_fault+0x43a/0x12b0 02:15:44 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73a", 0xf7, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 595.635752] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 595.635798] do_syscall_64+0xbf/0x390 [ 595.635853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.635883] RIP: 0033:0x7ff705a3db19 [ 595.635905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 595.635933] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 595.635962] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 595.635981] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 595.636000] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 595.636017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 595.636035] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 595.636080] 02:15:52 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73a", 0xf7, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:15:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b66) 02:15:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 39) 02:15:52 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0, 0x0}, 0x58) 02:15:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) 02:15:52 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b3a) 02:15:52 executing program 6: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:15:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x50a, 0x0, 0x0) [ 603.619852] FAULT_INJECTION: forcing a failure. [ 603.619852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.621764] CPU: 1 UID: 0 PID: 6115 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 603.621795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 603.621809] Call Trace: [ 603.621817] [ 603.621826] dump_stack_lvl+0xfa/0x120 [ 603.621868] should_fail_ex+0x4d7/0x5e0 [ 603.621897] _copy_from_user+0x30/0xd0 [ 603.621923] copy_msghdr_from_user+0x88/0x150 [ 603.621961] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 603.622004] ? kfree+0x231/0x550 [ 603.622026] ? perf_trace_lock_acquire+0xc9/0x700 [ 603.622063] ___sys_recvmsg+0xbb/0x190 [ 603.622098] ? __pfx____sys_recvmsg+0x10/0x10 [ 603.622134] ? __fget_files+0x34/0x3b0 [ 603.622169] ? lock_acquire+0x15e/0x2f0 [ 603.622203] ? __might_fault+0xe0/0x190 [ 603.622234] ? find_held_lock+0x2b/0x80 [ 603.622269] ? __might_fault+0x138/0x190 [ 603.622312] do_recvmmsg+0x2c5/0x6f0 [ 603.622366] ? __pfx_do_recvmmsg+0x10/0x10 [ 603.622398] ? ksys_write+0x187/0x240 [ 603.622429] ? lock_release+0xc8/0x290 [ 603.622460] ? __mutex_unlock_slowpath+0x157/0x750 [ 603.622493] ? kernel_write+0x5e3/0x660 [ 603.622533] ? __fget_files+0x20d/0x3b0 [ 603.622570] __x64_sys_recvmmsg+0x211/0x260 [ 603.622606] ? ksys_write+0x1a3/0x240 [ 603.622635] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 603.622672] ? do_user_addr_fault+0x43a/0x12b0 [ 603.622704] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 603.622737] do_syscall_64+0xbf/0x390 [ 603.622776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.622799] RIP: 0033:0x7ff705a3db19 [ 603.622817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 603.622838] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 603.622861] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 603.622876] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 603.622890] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 603.622904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 603.622917] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 603.622951] 02:15:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) 02:15:52 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b3a) 02:15:52 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0, 0x0}, 0x58) 02:15:52 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b3a) 02:15:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b67) 02:15:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) 02:15:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 40) 02:15:53 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b66) 02:15:53 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) (fail_nth: 1) [ 603.930640] FAULT_INJECTION: forcing a failure. [ 603.930640] name fail_usercopy, interval 1, probability 0, space 0, times 0 02:15:53 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac662", 0xf9, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 603.932614] CPU: 1 UID: 0 PID: 6136 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 603.932646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 603.932659] Call Trace: [ 603.932666] [ 603.932675] dump_stack_lvl+0xfa/0x120 [ 603.932718] should_fail_ex+0x4d7/0x5e0 [ 603.932748] _copy_from_user+0x30/0xd0 [ 603.932774] copy_msghdr_from_user+0x88/0x150 [ 603.932812] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 603.932857] ? kfree+0x231/0x550 [ 603.932880] ? perf_trace_lock_acquire+0xc9/0x700 [ 603.932918] ___sys_recvmsg+0xbb/0x190 [ 603.932954] ? __pfx____sys_recvmsg+0x10/0x10 [ 603.932992] ? __pfx_perf_trace_lock+0x10/0x10 [ 603.933027] ? lock_acquire+0x15e/0x2f0 [ 603.933054] ? __might_fault+0xe0/0x190 [ 603.933086] ? find_held_lock+0x2b/0x80 [ 603.933120] ? __might_fault+0x138/0x190 [ 603.933166] do_recvmmsg+0x2c5/0x6f0 [ 603.933218] ? __pfx_do_recvmmsg+0x10/0x10 [ 603.933250] ? ksys_write+0x187/0x240 [ 603.933281] ? lock_release+0xc8/0x290 [ 603.933314] ? __mutex_unlock_slowpath+0x157/0x750 [ 603.933347] ? kernel_write+0x5e3/0x660 [ 603.933388] ? __fget_files+0x20d/0x3b0 [ 603.933430] __x64_sys_recvmmsg+0x211/0x260 [ 603.933466] ? ksys_write+0x1a3/0x240 [ 603.933495] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 603.933533] ? do_user_addr_fault+0x43a/0x12b0 [ 603.933565] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 603.933598] do_syscall_64+0xbf/0x390 [ 603.933637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.933662] RIP: 0033:0x7ff705a3db19 [ 603.933680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 603.933701] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 603.933724] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 603.933739] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 603.933753] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 603.933767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 603.933780] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 603.933818] 02:15:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) 02:15:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b68) 02:15:53 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 1) 02:15:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) 02:15:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 41) [ 604.186110] FAULT_INJECTION: forcing a failure. [ 604.186110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.187236] CPU: 0 UID: 0 PID: 6151 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 604.187253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 604.187260] Call Trace: [ 604.187264] [ 604.187269] dump_stack_lvl+0xfa/0x120 [ 604.187294] should_fail_ex+0x4d7/0x5e0 [ 604.187310] _copy_from_user+0x30/0xd0 [ 604.187324] copy_msghdr_from_user+0x88/0x150 [ 604.187344] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 604.187367] ? kfree+0x231/0x550 [ 604.187379] ? perf_trace_lock_acquire+0xc9/0x700 [ 604.187400] ___sys_recvmsg+0xbb/0x190 [ 604.187417] ? __pfx____sys_recvmsg+0x10/0x10 [ 604.187441] ? lock_acquire+0x15e/0x2f0 [ 604.187455] ? __might_fault+0xe0/0x190 [ 604.187472] ? find_held_lock+0x2b/0x80 [ 604.187489] ? __might_fault+0x138/0x190 [ 604.187512] do_recvmmsg+0x2c5/0x6f0 [ 604.187534] ? __pfx_do_recvmmsg+0x10/0x10 [ 604.187550] ? ksys_write+0x187/0x240 [ 604.187567] ? lock_release+0xc8/0x290 [ 604.187583] ? __mutex_unlock_slowpath+0x157/0x750 [ 604.187601] ? kernel_write+0x5e3/0x660 [ 604.187622] ? __fget_files+0x20d/0x3b0 [ 604.187643] __x64_sys_recvmmsg+0x211/0x260 [ 604.187661] ? ksys_write+0x1a3/0x240 [ 604.187676] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 604.187695] ? do_user_addr_fault+0x43a/0x12b0 [ 604.187712] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 604.187729] do_syscall_64+0xbf/0x390 [ 604.187749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.187761] RIP: 0033:0x7ff705a3db19 [ 604.187770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 604.187782] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 604.187793] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 604.187801] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 604.187808] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 604.187815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 604.187822] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 604.187841] [ 604.211835] FAULT_INJECTION: forcing a failure. [ 604.211835] name failslab, interval 1, probability 0, space 0, times 0 [ 604.213922] CPU: 1 UID: 0 PID: 6148 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 604.213952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 604.213965] Call Trace: [ 604.213972] [ 604.213980] dump_stack_lvl+0xfa/0x120 [ 604.214020] should_fail_ex+0x4d7/0x5e0 [ 604.214046] ? jbd2__journal_start+0x193/0x6b0 [ 604.214071] should_failslab+0xc2/0x120 [ 604.214105] kmem_cache_alloc_noprof+0x72/0x680 [ 604.214141] ? jbd2__journal_start+0x193/0x6b0 [ 604.214164] jbd2__journal_start+0x193/0x6b0 [ 604.214202] __ext4_journal_start_sb+0x325/0x5d0 [ 604.214236] ? ext4_dirty_inode+0xa5/0x130 [ 604.214277] ext4_dirty_inode+0xa5/0x130 [ 604.214313] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 604.214359] __mark_inode_dirty+0x1b7/0xd00 [ 604.214399] generic_update_time+0xcb/0xf0 [ 604.214434] file_modified+0x1f0/0x230 [ 604.214472] ext4_buffered_write_iter+0xf4/0x430 [ 604.214508] ext4_file_write_iter+0x9df/0x1990 [ 604.214552] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 604.214582] ? __x64_sys_pwrite64+0x1f1/0x260 [ 604.214620] ? lock_is_held_type+0x9e/0x120 [ 604.214657] vfs_write+0xbe9/0x1150 [ 604.214688] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 604.214719] ? __fget_files+0x34/0x3b0 [ 604.214746] ? __pfx_vfs_write+0x10/0x10 [ 604.214802] __x64_sys_pwrite64+0x1f1/0x260 [ 604.214835] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 604.214868] ? do_user_addr_fault+0x43a/0x12b0 [ 604.214899] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 604.214931] do_syscall_64+0xbf/0x390 [ 604.214969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.214992] RIP: 0033:0x7f6220391b19 [ 604.215009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 604.215031] RSP: 002b:00007f621d907188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 604.215053] RAX: ffffffffffffffda RBX: 00007f62204a4f60 RCX: 00007f6220391b19 [ 604.215069] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 [ 604.215083] RBP: 00007f621d9071d0 R08: 0000000000000000 R09: 0000000000000000 [ 604.215096] R10: 00000000000099ad R11: 0000000000000246 R12: 0000000000000001 [ 604.215110] R13: 00007ffc26c62bef R14: 00007f621d907300 R15: 0000000000022000 [ 604.215145] 02:16:02 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac662", 0xf9, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:16:02 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:16:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:16:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 42) 02:16:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 2) 02:16:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b69) 02:16:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) 02:16:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b68) 02:16:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) 02:16:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 3) [ 613.018615] FAULT_INJECTION: forcing a failure. [ 613.018615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.018666] CPU: 1 UID: 0 PID: 6173 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 613.018696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 613.018709] Call Trace: [ 613.018717] [ 613.018726] dump_stack_lvl+0xfa/0x120 [ 613.018768] should_fail_ex+0x4d7/0x5e0 [ 613.018797] _copy_from_user+0x30/0xd0 [ 613.018822] copy_msghdr_from_user+0x88/0x150 [ 613.018860] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 613.018903] ? kfree+0x231/0x550 [ 613.018925] ? perf_trace_lock_acquire+0xc9/0x700 [ 613.018962] ___sys_recvmsg+0xbb/0x190 [ 613.018997] ? __pfx____sys_recvmsg+0x10/0x10 [ 613.019033] ? __fget_files+0x34/0x3b0 [ 613.019067] ? lock_acquire+0x15e/0x2f0 [ 613.019095] ? __might_fault+0xe0/0x190 [ 613.019126] ? find_held_lock+0x2b/0x80 [ 613.019160] ? __might_fault+0x138/0x190 [ 613.019204] do_recvmmsg+0x2c5/0x6f0 [ 613.019245] ? __pfx_do_recvmmsg+0x10/0x10 [ 613.019278] ? ksys_write+0x187/0x240 [ 613.019308] ? lock_release+0xc8/0x290 [ 613.019340] ? __mutex_unlock_slowpath+0x157/0x750 [ 613.019373] ? kernel_write+0x5e3/0x660 [ 613.019412] ? __fget_files+0x20d/0x3b0 [ 613.019449] __x64_sys_recvmmsg+0x211/0x260 02:16:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 4) 02:16:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 43) [ 613.019485] ? ksys_write+0x1a3/0x240 [ 613.019514] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 613.019552] ? do_user_addr_fault+0x43a/0x12b0 [ 613.019583] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 613.019616] do_syscall_64+0xbf/0x390 [ 613.019654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.019678] RIP: 0033:0x7ff705a3db19 [ 613.019696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 613.019717] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 613.019740] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 613.019756] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 613.019769] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 613.019783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 613.019796] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 613.019829] [ 613.079103] FAULT_INJECTION: forcing a failure. [ 613.079103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 613.079147] CPU: 0 UID: 0 PID: 6179 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 613.079162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 613.079169] Call Trace: [ 613.079173] [ 613.079178] dump_stack_lvl+0xfa/0x120 [ 613.079209] should_fail_ex+0x4d7/0x5e0 [ 613.079226] should_fail_alloc_page+0xe0/0x110 [ 613.079246] prepare_alloc_pages+0x1af/0x500 [ 613.079268] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 613.079280] ? arch_stack_walk+0x9c/0xf0 [ 613.079303] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 613.079315] ? stack_trace_save+0x8e/0xc0 [ 613.079331] ? stack_depot_save_flags+0x2c/0xa20 [ 613.079357] ? perf_trace_lock+0xb5/0x5d0 [ 613.079372] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 613.079390] ? policy_nodemask+0xeb/0x4e0 [ 613.079405] alloc_pages_mpol+0xed/0x340 [ 613.079418] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 613.079432] ? filemap_get_entry+0x1b1/0x3b0 [ 613.079445] ? lock_release+0xc8/0x290 [ 613.079463] folio_alloc_noprof+0x22/0x290 [ 613.079478] filemap_alloc_folio_noprof+0x376/0x420 [ 613.079493] ? perf_trace_lock_acquire+0xc9/0x700 [ 613.079510] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 613.079527] ? perf_trace_lock+0xb5/0x5d0 [ 613.079546] __filemap_get_folio+0x384/0x960 [ 613.079563] ext4_da_write_begin+0x3e1/0xb40 [ 613.079590] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 613.079609] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 613.079625] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 613.079643] generic_perform_write+0x391/0x810 [ 613.079669] ? __pfx_generic_perform_write+0x10/0x10 [ 613.079685] ? __mark_inode_dirty+0x254/0xd00 [ 613.079706] ? generic_update_time+0xcb/0xf0 [ 613.079723] ? mnt_put_write_access_file+0x45/0xe0 [ 613.079741] ext4_buffered_write_iter+0x11a/0x430 [ 613.079761] ext4_file_write_iter+0x9df/0x1990 [ 613.079784] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 613.079799] ? __x64_sys_pwrite64+0x1f1/0x260 [ 613.079819] ? lock_is_held_type+0x9e/0x120 [ 613.079840] vfs_write+0xbe9/0x1150 [ 613.079856] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 613.079872] ? __fget_files+0x34/0x3b0 [ 613.079886] ? __pfx_vfs_write+0x10/0x10 [ 613.079917] __x64_sys_pwrite64+0x1f1/0x260 [ 613.079933] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 613.079950] ? do_user_addr_fault+0x43a/0x12b0 [ 613.079967] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 613.079984] do_syscall_64+0xbf/0x390 [ 613.080004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.080017] RIP: 0033:0x7f6220391b19 [ 613.080026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 613.080037] RSP: 002b:00007f621d907188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 613.080049] RAX: ffffffffffffffda RBX: 00007f62204a4f60 RCX: 00007f6220391b19 [ 613.080057] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 [ 613.080064] RBP: 00007f621d9071d0 R08: 0000000000000000 R09: 0000000000000000 [ 613.080071] R10: 00000000000099ad R11: 0000000000000246 R12: 0000000000000001 [ 613.080078] R13: 00007ffc26c62bef R14: 00007f621d907300 R15: 0000000000022000 [ 613.080097] [ 613.234476] FAULT_INJECTION: forcing a failure. [ 613.234476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.253720] CPU: 0 UID: 0 PID: 6187 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 613.253736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 613.253744] Call Trace: [ 613.253748] [ 613.253753] dump_stack_lvl+0xfa/0x120 [ 613.253778] should_fail_ex+0x4d7/0x5e0 [ 613.253794] _copy_from_user+0x30/0xd0 [ 613.253808] copy_msghdr_from_user+0x88/0x150 [ 613.253829] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 613.253851] ? kfree+0x231/0x550 [ 613.253863] ? perf_trace_lock_acquire+0xc9/0x700 [ 613.253884] ___sys_recvmsg+0xbb/0x190 [ 613.253901] ? __pfx____sys_recvmsg+0x10/0x10 [ 613.253920] ? __pfx_perf_trace_lock+0x10/0x10 [ 613.253938] ? lock_acquire+0x15e/0x2f0 [ 613.253952] ? __might_fault+0xe0/0x190 [ 613.253969] ? find_held_lock+0x2b/0x80 [ 613.253986] ? __might_fault+0x138/0x190 [ 613.254009] do_recvmmsg+0x2c5/0x6f0 [ 613.254031] ? __pfx_do_recvmmsg+0x10/0x10 [ 613.254047] ? ksys_write+0x187/0x240 [ 613.254064] ? lock_release+0xc8/0x290 [ 613.254080] ? __mutex_unlock_slowpath+0x157/0x750 [ 613.254097] ? kernel_write+0x5e3/0x660 [ 613.254118] ? __fget_files+0x20d/0x3b0 [ 613.254140] __x64_sys_recvmmsg+0x211/0x260 [ 613.254158] ? ksys_write+0x1a3/0x240 [ 613.254172] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 613.254195] ? do_user_addr_fault+0x43a/0x12b0 [ 613.254212] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 613.254230] do_syscall_64+0xbf/0x390 [ 613.254250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.254263] RIP: 0033:0x7ff705a3db19 [ 613.254272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 613.254283] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 613.254295] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 613.254303] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 613.254310] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 613.254317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 613.254323] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 613.254342] 02:16:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x50a, 0x0, 0x0) 02:16:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b6a) 02:16:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 44) 02:16:13 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x5, 0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x48c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:16:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 5) 02:16:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) 02:16:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b68) 02:16:13 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac662", 0xf9, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 624.062054] FAULT_INJECTION: forcing a failure. [ 624.062054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.063992] CPU: 0 UID: 0 PID: 6198 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 624.064022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.064035] Call Trace: [ 624.064042] [ 624.064050] dump_stack_lvl+0xfa/0x120 [ 624.064090] should_fail_ex+0x4d7/0x5e0 [ 624.064117] _copy_from_user+0x30/0xd0 [ 624.064141] copy_msghdr_from_user+0x88/0x150 [ 624.064176] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 624.064223] ? kfree+0x231/0x550 [ 624.064244] ? perf_trace_lock_acquire+0xc9/0x700 [ 624.064279] ___sys_recvmsg+0xbb/0x190 [ 624.064312] ? __pfx____sys_recvmsg+0x10/0x10 [ 624.064345] ? __fget_files+0x34/0x3b0 [ 624.064378] ? lock_acquire+0x15e/0x2f0 [ 624.064403] ? __might_fault+0xe0/0x190 [ 624.064432] ? find_held_lock+0x2b/0x80 [ 624.064464] ? __might_fault+0x138/0x190 [ 624.064504] do_recvmmsg+0x2c5/0x6f0 [ 624.064543] ? __pfx_do_recvmmsg+0x10/0x10 [ 624.064573] ? ksys_write+0x187/0x240 [ 624.064601] ? lock_release+0xc8/0x290 [ 624.064630] ? __mutex_unlock_slowpath+0x157/0x750 [ 624.064661] ? kernel_write+0x5e3/0x660 [ 624.064698] ? __fget_files+0x20d/0x3b0 [ 624.064733] __x64_sys_recvmmsg+0x211/0x260 [ 624.064766] ? ksys_write+0x1a3/0x240 [ 624.064793] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 624.064828] ? do_user_addr_fault+0x43a/0x12b0 [ 624.064857] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 624.064892] do_syscall_64+0xbf/0x390 [ 624.064927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.064949] RIP: 0033:0x7ff705a3db19 [ 624.064965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 624.064985] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 624.065007] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 624.065021] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 624.065034] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.065047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 624.065059] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 624.065090] 02:16:13 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x4b45) 02:16:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 6) 02:16:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}, 0x40000}], 0x50a, 0x0, 0x0) 02:16:22 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 1) 02:16:22 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x0, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:16:22 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) 02:16:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b70) 02:16:22 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x4b45) 02:16:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 45) [ 633.424319] FAULT_INJECTION: forcing a failure. [ 633.424319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.426100] CPU: 1 UID: 0 PID: 6231 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 633.426131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.426143] Call Trace: [ 633.426150] [ 633.426159] dump_stack_lvl+0xfa/0x120 [ 633.426206] should_fail_ex+0x4d7/0x5e0 [ 633.426238] _copy_from_user+0x30/0xd0 [ 633.426263] copy_clone_args_from_user+0x14b/0x7e0 [ 633.426301] ? find_held_lock+0x2b/0x80 [ 633.426334] ? get_pid_task+0xfd/0x250 02:16:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 7) [ 633.426356] ? lock_release+0xc8/0x290 02:16:22 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 2) 02:16:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 46) [ 633.426380] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 633.426418] ? get_pid_task+0x107/0x250 [ 633.426439] ? proc_fail_nth_write+0x97/0x220 [ 633.426473] ? ksys_write+0x121/0x240 [ 633.426503] ? lock_is_held_type+0x9e/0x120 [ 633.426540] __do_sys_clone3+0x99/0x270 [ 633.426563] ? __pfx___do_sys_clone3+0x10/0x10 [ 633.426589] ? __mutex_unlock_slowpath+0x157/0x750 [ 633.426619] ? kernel_write+0x5e3/0x660 [ 633.426649] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 633.426701] ? __fget_files+0x20d/0x3b0 [ 633.426735] ? fput+0x6a/0x100 02:16:22 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r3, 0x0, r4, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f00000003c0)={{r1}, 0x0, 0x1c, @unused=[0x9, 0x3, 0x200], @name="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"}) ioctl$VT_DISALLOCATE(r2, 0x4b3a) [ 633.426768] ? ksys_write+0x1a3/0x240 [ 633.426794] ? __pfx_ksys_write+0x10/0x10 [ 633.426822] ? do_user_addr_fault+0x43a/0x12b0 [ 633.426851] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 633.426895] do_syscall_64+0xbf/0x390 [ 633.426944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.426967] RIP: 0033:0x7f78baaddb19 [ 633.426983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.427003] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 633.427025] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 633.427039] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 633.427052] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.427064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.427077] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 633.427108] [ 633.437548] FAULT_INJECTION: forcing a failure. [ 633.437548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.437590] CPU: 0 UID: 0 PID: 6234 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 633.437618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.437631] Call Trace: [ 633.437639] [ 633.437647] dump_stack_lvl+0xfa/0x120 [ 633.437692] should_fail_ex+0x4d7/0x5e0 [ 633.437721] _copy_from_user+0x30/0xd0 [ 633.437746] copy_msghdr_from_user+0x88/0x150 [ 633.437782] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 633.437830] ? kfree+0x231/0x550 [ 633.437851] ? perf_trace_lock_acquire+0xc9/0x700 [ 633.437888] ___sys_recvmsg+0xbb/0x190 [ 633.437921] ? __pfx____sys_recvmsg+0x10/0x10 [ 633.437954] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 633.437988] ? lock_acquire+0x15e/0x2f0 [ 633.438013] ? __might_fault+0xe0/0x190 [ 633.438044] ? find_held_lock+0x2b/0x80 [ 633.438077] ? __might_fault+0x138/0x190 [ 633.438117] do_recvmmsg+0x2c5/0x6f0 [ 633.438156] ? __pfx_do_recvmmsg+0x10/0x10 [ 633.438186] ? ksys_write+0x187/0x240 [ 633.438216] ? lock_release+0xc8/0x290 [ 633.438246] ? __mutex_unlock_slowpath+0x157/0x750 [ 633.438278] ? kernel_write+0x5e3/0x660 [ 633.438314] ? __fget_files+0x20d/0x3b0 [ 633.438351] __x64_sys_recvmmsg+0x211/0x260 [ 633.438385] ? ksys_write+0x1a3/0x240 [ 633.438412] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 633.438447] ? do_user_addr_fault+0x43a/0x12b0 [ 633.438479] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 633.438508] do_syscall_64+0xbf/0x390 [ 633.438546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.438570] RIP: 0033:0x7ff705a3db19 [ 633.438586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.438607] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 633.438628] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 633.438642] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 633.438655] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.438684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.438697] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 633.438728] [ 633.600570] FAULT_INJECTION: forcing a failure. [ 633.600570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.600612] CPU: 1 UID: 0 PID: 6243 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 633.600639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.600652] Call Trace: [ 633.600659] [ 633.600667] dump_stack_lvl+0xfa/0x120 [ 633.600708] should_fail_ex+0x4d7/0x5e0 [ 633.600744] _copy_from_user+0x30/0xd0 [ 633.600769] copy_clone_args_from_user+0x4f1/0x7e0 [ 633.600811] ? get_pid_task+0xfd/0x250 [ 633.600837] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 633.600902] ? ksys_write+0x121/0x240 [ 633.600940] ? lock_is_held_type+0x9e/0x120 [ 633.600977] __do_sys_clone3+0x99/0x270 [ 633.601000] ? __pfx___do_sys_clone3+0x10/0x10 [ 633.601043] ? __fget_files+0x20d/0x3b0 [ 633.601079] ? fput+0x6a/0x100 [ 633.601112] ? ksys_write+0x1a3/0x240 [ 633.601139] ? __pfx_ksys_write+0x10/0x10 [ 633.601167] ? do_user_addr_fault+0x43a/0x12b0 [ 633.601196] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 633.601228] do_syscall_64+0xbf/0x390 [ 633.601264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.601286] RIP: 0033:0x7f78baaddb19 [ 633.601302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.601323] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 633.601343] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 633.601358] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 633.601370] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.601383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.601396] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 633.601430] [ 633.637101] FAULT_INJECTION: forcing a failure. [ 633.637101] name failslab, interval 1, probability 0, space 0, times 0 [ 633.637280] CPU: 1 UID: 0 PID: 6245 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 633.637308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.637320] Call Trace: [ 633.637327] [ 633.637335] dump_stack_lvl+0xfa/0x120 [ 633.637371] should_fail_ex+0x4d7/0x5e0 [ 633.637403] ? __es_insert_extent+0xed2/0x1370 [ 633.637426] should_failslab+0xc2/0x120 [ 633.637458] kmem_cache_alloc_noprof+0x72/0x680 [ 633.637495] ? __es_insert_extent+0xed2/0x1370 [ 633.637518] __es_insert_extent+0xed2/0x1370 [ 633.637557] ? __es_tree_search.isra.0+0x1af/0x220 [ 633.637586] __es_remove_extent+0x74c/0x1570 [ 633.637625] ? __pfx___es_remove_extent+0x10/0x10 [ 633.637661] ? do_raw_write_lock+0x11c/0x3a0 [ 633.637694] ? __pfx_do_raw_write_lock+0x10/0x10 [ 633.637738] ext4_es_insert_delayed_extent+0x30a/0x8a0 [ 633.637772] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 633.637801] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 633.637838] ? find_held_lock+0x2b/0x80 [ 633.637879] ? ext4_da_reserve_space+0x1e0/0x430 [ 633.637921] ? lock_release+0xc8/0x290 [ 633.637964] ? do_raw_spin_unlock+0x53/0x220 [ 633.637997] ? _raw_spin_unlock+0x1e/0x40 [ 633.638023] ? ext4_da_reserve_space+0xf9/0x430 [ 633.638055] ext4_da_get_block_prep+0x8f6/0x1050 [ 633.638090] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 633.638122] ? find_held_lock+0x2b/0x80 [ 633.638154] ? create_empty_buffers+0x219/0x460 [ 633.638184] ? lock_release+0xc8/0x290 [ 633.638211] ? do_raw_spin_unlock+0x53/0x220 [ 633.638243] ? _raw_spin_unlock+0x1e/0x40 [ 633.638267] ? create_empty_buffers+0x219/0x460 [ 633.638300] ext4_block_write_begin+0x7d1/0xcd0 [ 633.638342] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 633.638375] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 633.638411] ? __filemap_get_folio+0x2bf/0x960 [ 633.638442] ext4_da_write_begin+0x4d5/0xb40 [ 633.638489] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 633.638525] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 633.638554] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 633.638586] generic_perform_write+0x391/0x810 [ 633.638634] ? __pfx_generic_perform_write+0x10/0x10 [ 633.638663] ? __mark_inode_dirty+0x254/0xd00 [ 633.638719] ? generic_update_time+0xcb/0xf0 [ 633.638749] ? mnt_put_write_access_file+0x45/0xe0 [ 633.638783] ext4_buffered_write_iter+0x11a/0x430 [ 633.638817] ext4_file_write_iter+0x9df/0x1990 [ 633.638866] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 633.638908] ? __x64_sys_pwrite64+0x1f1/0x260 [ 633.638951] ? lock_is_held_type+0x9e/0x120 [ 633.638987] vfs_write+0xbe9/0x1150 [ 633.639017] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 633.639046] ? __fget_files+0x34/0x3b0 [ 633.639072] ? __pfx_vfs_write+0x10/0x10 [ 633.639131] __x64_sys_pwrite64+0x1f1/0x260 [ 633.639162] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 633.639193] ? do_user_addr_fault+0x43a/0x12b0 [ 633.639223] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 633.639254] do_syscall_64+0xbf/0x390 [ 633.639290] entry_SYSCALL_64_after_hwframe+0x77/0x7f 02:16:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 8) 02:16:22 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 3) [ 633.639312] RIP: 0033:0x7f6220391b19 [ 633.639328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.639348] RSP: 002b:00007f621d907188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 633.639369] RAX: ffffffffffffffda RBX: 00007f62204a4f60 RCX: 00007f6220391b19 [ 633.639383] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 [ 633.639396] RBP: 00007f621d9071d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.639409] R10: 00000000000099ad R11: 0000000000000246 R12: 0000000000000001 [ 633.639421] R13: 00007ffc26c62bef R14: 00007f621d907300 R15: 0000000000022000 [ 633.639458] [ 633.658734] FAULT_INJECTION: forcing a failure. [ 633.658734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.778638] FAULT_INJECTION: forcing a failure. [ 633.778638] name failslab, interval 1, probability 0, space 0, times 0 [ 633.778809] CPU: 0 UID: 0 PID: 6247 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 633.778848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.778862] Call Trace: [ 633.778872] [ 633.778882] dump_stack_lvl+0xfa/0x120 [ 633.778930] should_fail_ex+0x4d7/0x5e0 [ 633.778962] _copy_from_user+0x30/0xd0 [ 633.778990] copy_msghdr_from_user+0x88/0x150 [ 633.779030] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 633.779076] ? kfree+0x231/0x550 [ 633.779099] ? perf_trace_lock_acquire+0xc9/0x700 [ 633.779140] ___sys_recvmsg+0xbb/0x190 [ 633.779176] ? __pfx____sys_recvmsg+0x10/0x10 [ 633.779224] ? __pfx_perf_trace_lock+0x10/0x10 [ 633.779260] ? lock_acquire+0x15e/0x2f0 [ 633.779288] ? __might_fault+0xe0/0x190 [ 633.779321] ? find_held_lock+0x2b/0x80 [ 633.779358] ? __might_fault+0x138/0x190 [ 633.779405] do_recvmmsg+0x2c5/0x6f0 [ 633.779452] ? __pfx_do_recvmmsg+0x10/0x10 [ 633.779486] ? ksys_write+0x187/0x240 [ 633.779518] ? lock_release+0xc8/0x290 [ 633.779552] ? __mutex_unlock_slowpath+0x157/0x750 [ 633.779586] ? kernel_write+0x5e3/0x660 [ 633.779630] ? __fget_files+0x20d/0x3b0 [ 633.779673] __x64_sys_recvmmsg+0x211/0x260 [ 633.779710] ? ksys_write+0x1a3/0x240 [ 633.779741] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 633.779784] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 633.779820] do_syscall_64+0xbf/0x390 [ 633.779860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.779885] RIP: 0033:0x7ff705a3db19 [ 633.779907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.779929] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 633.779953] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 633.779969] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 633.779984] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.779998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.780012] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 633.780051] [ 633.837548] CPU: 1 UID: 0 PID: 6251 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 633.837579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.837592] Call Trace: [ 633.837600] [ 633.837609] dump_stack_lvl+0xfa/0x120 [ 633.837650] should_fail_ex+0x4d7/0x5e0 [ 633.837678] should_failslab+0xc2/0x120 [ 633.837710] kmem_cache_alloc_node_noprof+0x79/0x6a0 [ 633.837736] ? copy_process+0x3da/0x7400 02:16:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 47) [ 633.837759] ? copy_process+0x459/0x7400 [ 633.837788] ? copy_process+0x459/0x7400 [ 633.837808] copy_process+0x459/0x7400 [ 633.837828] ? __pfx_perf_trace_lock+0x10/0x10 [ 633.837866] ? lock_acquire+0x15e/0x2f0 [ 633.837904] ? __might_fault+0xe0/0x190 [ 633.837946] ? __pfx_copy_process+0x10/0x10 [ 633.837969] ? __might_fault+0xe0/0x190 [ 633.838004] ? _copy_from_user+0x5b/0xd0 [ 633.838034] kernel_clone+0xea/0x7f0 [ 633.838060] ? __pfx_kernel_clone+0x10/0x10 [ 633.838096] ? ksys_write+0x121/0x240 [ 633.838124] ? lock_is_held_type+0x9e/0x120 [ 633.838161] __do_sys_clone3+0x1f2/0x270 [ 633.838183] ? __pfx___do_sys_clone3+0x10/0x10 [ 633.838234] ? __fget_files+0x20d/0x3b0 [ 633.838270] ? fput+0x6a/0x100 [ 633.838303] ? ksys_write+0x1a3/0x240 [ 633.838330] ? __pfx_ksys_write+0x10/0x10 [ 633.838362] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 633.838393] do_syscall_64+0xbf/0x390 [ 633.838428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.838450] RIP: 0033:0x7f78baaddb19 [ 633.838467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.838488] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 633.838509] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 633.838524] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 633.838536] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.838549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.838562] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 633.838596] [ 633.944854] FAULT_INJECTION: forcing a failure. [ 633.944854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.944899] CPU: 0 UID: 0 PID: 6257 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 633.944928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.944940] Call Trace: [ 633.944948] [ 633.944957] dump_stack_lvl+0xfa/0x120 [ 633.944999] should_fail_ex+0x4d7/0x5e0 [ 633.945028] _copy_from_user+0x30/0xd0 [ 633.945062] copy_msghdr_from_user+0x88/0x150 [ 633.945102] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 633.945143] ? kfree+0x231/0x550 [ 633.945165] ? perf_trace_lock_acquire+0xc9/0x700 [ 633.945203] ___sys_recvmsg+0xbb/0x190 [ 633.945236] ? __pfx____sys_recvmsg+0x10/0x10 [ 633.945271] ? __pfx_perf_trace_lock+0x10/0x10 [ 633.945304] ? lock_acquire+0x15e/0x2f0 [ 633.945329] ? __might_fault+0xe0/0x190 [ 633.945360] ? find_held_lock+0x2b/0x80 [ 633.945393] ? __might_fault+0x138/0x190 [ 633.945436] do_recvmmsg+0x2c5/0x6f0 [ 633.945476] ? __pfx_do_recvmmsg+0x10/0x10 [ 633.945506] ? ksys_write+0x187/0x240 [ 633.945536] ? lock_release+0xc8/0x290 [ 633.945567] ? __mutex_unlock_slowpath+0x157/0x750 [ 633.945598] ? kernel_write+0x5e3/0x660 [ 633.945637] ? __fget_files+0x20d/0x3b0 [ 633.945675] __x64_sys_recvmmsg+0x211/0x260 [ 633.945710] ? ksys_write+0x1a3/0x240 [ 633.945737] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 633.945772] ? do_user_addr_fault+0x43a/0x12b0 [ 633.945802] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 633.945834] do_syscall_64+0xbf/0x390 [ 633.945871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.945894] RIP: 0033:0x7ff705a3db19 [ 633.945911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.945931] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 633.945953] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 633.945968] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 633.945981] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.945994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.946006] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 633.946041] 02:16:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 9) 02:16:32 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 4) 02:16:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 48) 02:16:32 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x0, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:16:32 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x3}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:16:32 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x4b45) 02:16:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b71) 02:16:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}, 0x1000000}], 0x50a, 0x0, 0x0) [ 643.776839] FAULT_INJECTION: forcing a failure. [ 643.776839] name failslab, interval 1, probability 0, space 0, times 0 [ 643.778723] CPU: 1 UID: 0 PID: 6270 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 643.778753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 643.778765] Call Trace: [ 643.778772] [ 643.778780] dump_stack_lvl+0xfa/0x120 [ 643.778832] should_fail_ex+0x4d7/0x5e0 [ 643.778859] ? __es_insert_extent+0xed2/0x1370 [ 643.778883] should_failslab+0xc2/0x120 [ 643.778915] kmem_cache_alloc_noprof+0x72/0x680 [ 643.778942] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 643.778973] ? __es_insert_extent+0xed2/0x1370 [ 643.778995] __es_insert_extent+0xed2/0x1370 [ 643.779036] ext4_es_insert_delayed_extent+0x383/0x8a0 [ 643.779069] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 643.779099] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 643.779134] ? find_held_lock+0x2b/0x80 [ 643.779168] ? ext4_da_reserve_space+0x1e0/0x430 [ 643.779202] ? lock_release+0xc8/0x290 [ 643.779229] ? do_raw_spin_unlock+0x53/0x220 [ 643.779260] ? _raw_spin_unlock+0x1e/0x40 [ 643.779286] ? ext4_da_reserve_space+0xf9/0x430 [ 643.779317] ext4_da_get_block_prep+0x8f6/0x1050 [ 643.779350] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 643.779381] ? find_held_lock+0x2b/0x80 [ 643.779413] ? create_empty_buffers+0x219/0x460 [ 643.779443] ? lock_release+0xc8/0x290 [ 643.779469] ? do_raw_spin_unlock+0x53/0x220 [ 643.779500] ? _raw_spin_unlock+0x1e/0x40 [ 643.779524] ? create_empty_buffers+0x219/0x460 [ 643.779556] ext4_block_write_begin+0x7d1/0xcd0 [ 643.779596] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 643.779628] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 643.779663] ? __filemap_get_folio+0x2bf/0x960 [ 643.779693] ext4_da_write_begin+0x4d5/0xb40 [ 643.779739] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 643.779774] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 643.779802] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 643.779833] generic_perform_write+0x391/0x810 [ 643.779878] ? __pfx_generic_perform_write+0x10/0x10 [ 643.779908] ? __mark_inode_dirty+0x254/0xd00 [ 643.779944] ? generic_update_time+0xcb/0xf0 [ 643.779975] ? mnt_put_write_access_file+0x45/0xe0 [ 643.780006] ext4_buffered_write_iter+0x11a/0x430 [ 643.780040] ext4_file_write_iter+0x9df/0x1990 [ 643.780082] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 643.780109] ? __x64_sys_pwrite64+0x1f1/0x260 [ 643.780145] ? lock_is_held_type+0x9e/0x120 [ 643.780181] vfs_write+0xbe9/0x1150 [ 643.780210] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 643.780239] ? __fget_files+0x34/0x3b0 [ 643.780264] ? __pfx_vfs_write+0x10/0x10 [ 643.780318] __x64_sys_pwrite64+0x1f1/0x260 [ 643.780349] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 643.780379] ? do_user_addr_fault+0x43a/0x12b0 [ 643.780409] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 643.780440] do_syscall_64+0xbf/0x390 [ 643.780475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.780498] RIP: 0033:0x7f6220391b19 [ 643.780514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 643.780534] RSP: 002b:00007f621d907188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 643.780556] RAX: ffffffffffffffda RBX: 00007f62204a4f60 RCX: 00007f6220391b19 [ 643.780571] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 [ 643.780583] RBP: 00007f621d9071d0 R08: 0000000000000000 R09: 0000000000000000 [ 643.780596] R10: 00000000000099ad R11: 0000000000000246 R12: 0000000000000001 [ 643.780609] R13: 00007ffc26c62bef R14: 00007f621d907300 R15: 0000000000022000 [ 643.780642] [ 643.788596] FAULT_INJECTION: forcing a failure. [ 643.788596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.838184] CPU: 0 UID: 0 PID: 6277 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 643.838225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 643.838239] Call Trace: [ 643.838247] [ 643.838257] dump_stack_lvl+0xfa/0x120 [ 643.838303] should_fail_ex+0x4d7/0x5e0 [ 643.838333] _copy_from_user+0x30/0xd0 [ 643.838359] copy_msghdr_from_user+0x88/0x150 [ 643.838397] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 643.838439] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 643.838467] ? kfree+0x231/0x550 [ 643.838490] ? perf_trace_lock_acquire+0xc9/0x700 02:16:33 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 10) [ 643.838529] ___sys_recvmsg+0xbb/0x190 [ 643.838564] ? __pfx____sys_recvmsg+0x10/0x10 [ 643.838610] ? lock_acquire+0x15e/0x2f0 [ 643.838638] ? __might_fault+0xe0/0x190 [ 643.838671] ? find_held_lock+0x2b/0x80 [ 643.838706] ? __might_fault+0x138/0x190 [ 643.838750] do_recvmmsg+0x2c5/0x6f0 [ 643.838806] ? __pfx_do_recvmmsg+0x10/0x10 [ 643.838842] ? lock_acquire+0x15e/0x2f0 [ 643.838871] ? find_held_lock+0x2b/0x80 [ 643.838906] ? clockevents_program_event+0x14f/0x360 [ 643.838939] ? lock_release+0xc8/0x290 [ 643.838979] ? __pfx_lapic_next_deadline+0x10/0x10 [ 643.839008] ? clockevents_program_event+0x135/0x360 [ 643.839048] __x64_sys_recvmmsg+0x211/0x260 [ 643.839087] ? __pfx___x64_sys_recvmmsg+0x10/0x10 02:16:33 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x107000, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r2, 0x0, r3, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0x8, 0x9) ioctl$VT_DISALLOCATE(r1, 0x4b3a) [ 643.839137] do_syscall_64+0xbf/0x390 [ 643.839176] entry_SYSCALL_64_after_hwframe+0x77/0x7f 02:16:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b45) [ 643.839201] RIP: 0033:0x7ff705a3db19 [ 643.839219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 643.839242] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 643.839265] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 643.839281] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 643.839295] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 02:16:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 49) [ 643.839309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 643.839323] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 643.839357] 02:16:33 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 5) 02:16:33 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x0, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:16:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b45) [ 644.265257] FAULT_INJECTION: forcing a failure. [ 644.265257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.267097] CPU: 0 UID: 0 PID: 6295 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 644.267127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 644.267140] Call Trace: [ 644.267148] [ 644.267156] dump_stack_lvl+0xfa/0x120 [ 644.267204] should_fail_ex+0x4d7/0x5e0 [ 644.267232] _copy_from_user+0x30/0xd0 [ 644.267257] copy_msghdr_from_user+0x88/0x150 [ 644.267294] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 644.267334] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 644.267359] ? kfree+0x231/0x550 [ 644.267380] ? perf_trace_lock_acquire+0xc9/0x700 [ 644.267416] ___sys_recvmsg+0xbb/0x190 [ 644.267450] ? __pfx____sys_recvmsg+0x10/0x10 [ 644.267493] ? lock_acquire+0x15e/0x2f0 [ 644.267519] ? __might_fault+0xe0/0x190 [ 644.267549] ? find_held_lock+0x2b/0x80 [ 644.267582] ? __might_fault+0x138/0x190 [ 644.267624] do_recvmmsg+0x2c5/0x6f0 [ 644.267664] ? __pfx_do_recvmmsg+0x10/0x10 [ 644.267695] ? ksys_write+0x187/0x240 [ 644.267724] ? lock_release+0xc8/0x290 [ 644.267755] ? __mutex_unlock_slowpath+0x157/0x750 [ 644.267786] ? kernel_write+0x5e3/0x660 [ 644.267824] ? __fget_files+0x20d/0x3b0 [ 644.267861] __x64_sys_recvmmsg+0x211/0x260 [ 644.267896] ? ksys_write+0x1a3/0x240 [ 644.267924] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 644.267960] ? do_user_addr_fault+0x43a/0x12b0 [ 644.267990] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 644.268020] do_syscall_64+0xbf/0x390 [ 644.268056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.268079] RIP: 0033:0x7ff705a3db19 [ 644.268096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 644.268117] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 644.268138] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 644.268153] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 644.268167] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 644.268180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 644.268192] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 644.268225] 02:16:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b72) [ 644.338070] FAULT_INJECTION: forcing a failure. [ 644.338070] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 644.340048] CPU: 1 UID: 0 PID: 6297 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 644.340078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 644.340091] Call Trace: [ 644.340098] [ 644.340106] dump_stack_lvl+0xfa/0x120 [ 644.340147] should_fail_ex+0x4d7/0x5e0 [ 644.340175] should_fail_alloc_page+0xe0/0x110 [ 644.340216] prepare_alloc_pages+0x1af/0x500 [ 644.340252] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 644.340285] ? lock_acquire+0x15e/0x2f0 [ 644.340311] ? __memcg_slab_post_alloc_hook+0x443/0x9e0 [ 644.340340] ? find_held_lock+0x2b/0x80 [ 644.340374] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 644.340411] ? __create_object+0x59/0x80 [ 644.340434] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 644.340464] ? kmem_cache_alloc_node_noprof+0x275/0x6a0 [ 644.340490] ? __asan_memset+0x24/0x50 [ 644.340523] __alloc_pages_noprof+0xc/0x1b0 [ 644.340545] copy_process+0x4e9/0x7400 [ 644.340566] ? __pfx__kstrtoull+0x10/0x10 [ 644.340600] ? lock_acquire+0x15e/0x2f0 [ 644.340627] ? __might_fault+0xe0/0x190 [ 644.340664] ? __pfx_copy_process+0x10/0x10 [ 644.340686] ? __might_fault+0xe0/0x190 [ 644.340720] ? _copy_from_user+0x5b/0xd0 [ 644.340748] kernel_clone+0xea/0x7f0 [ 644.340770] ? lock_release+0xc8/0x290 [ 644.340795] ? __pfx_kernel_clone+0x10/0x10 [ 644.340828] ? ksys_write+0x121/0x240 [ 644.340856] ? lock_is_held_type+0x9e/0x120 [ 644.340892] __do_sys_clone3+0x1f2/0x270 [ 644.340914] ? __pfx___do_sys_clone3+0x10/0x10 [ 644.340954] ? __fget_files+0x20d/0x3b0 [ 644.340989] ? fput+0x6a/0x100 [ 644.341022] ? ksys_write+0x1a3/0x240 [ 644.341049] ? __pfx_ksys_write+0x10/0x10 [ 644.341077] ? do_user_addr_fault+0x43a/0x12b0 [ 644.341106] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 644.341137] do_syscall_64+0xbf/0x390 [ 644.341172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.341194] RIP: 0033:0x7f78baaddb19 [ 644.341211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 644.341231] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 644.341252] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 644.341267] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 644.341280] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 644.341292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.341305] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 644.341337] 02:16:33 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 11) 02:16:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 50) 02:16:33 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) [ 644.536426] FAULT_INJECTION: forcing a failure. [ 644.536426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.538364] CPU: 0 UID: 0 PID: 6307 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 644.538397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 644.538410] Call Trace: [ 644.538418] [ 644.538428] dump_stack_lvl+0xfa/0x120 [ 644.538472] should_fail_ex+0x4d7/0x5e0 [ 644.538496] ? page_copy_sane+0xce/0x2b0 [ 644.538537] copy_folio_from_iter_atomic+0x3d3/0x18c0 [ 644.538579] ? ext4_da_write_begin+0x60d/0xb40 [ 644.538622] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 644.538654] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 644.538694] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 644.538726] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 644.538761] generic_perform_write+0x1d7/0x810 [ 644.538828] ? __pfx_generic_perform_write+0x10/0x10 [ 644.538861] ? __mark_inode_dirty+0x254/0xd00 [ 644.538902] ? generic_update_time+0xcb/0xf0 [ 644.538936] ? mnt_put_write_access_file+0x45/0xe0 [ 644.538972] ext4_buffered_write_iter+0x11a/0x430 [ 644.539010] ext4_file_write_iter+0x9df/0x1990 [ 644.539056] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 644.539087] ? __x64_sys_pwrite64+0x1f1/0x260 [ 644.539128] ? lock_is_held_type+0x9e/0x120 [ 644.539167] vfs_write+0xbe9/0x1150 [ 644.539206] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 644.539239] ? __fget_files+0x34/0x3b0 [ 644.539267] ? __pfx_vfs_write+0x10/0x10 [ 644.539326] __x64_sys_pwrite64+0x1f1/0x260 [ 644.539361] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 644.539394] ? do_user_addr_fault+0x43a/0x12b0 [ 644.539427] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 644.539462] do_syscall_64+0xbf/0x390 [ 644.539502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.539527] RIP: 0033:0x7f6220391b19 [ 644.539545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 644.539567] RSP: 002b:00007f621d907188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 644.539591] RAX: ffffffffffffffda RBX: 00007f62204a4f60 RCX: 00007f6220391b19 [ 644.539607] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 [ 644.539621] RBP: 00007f621d9071d0 R08: 0000000000000000 R09: 0000000000000000 [ 644.539636] R10: 00000000000099ad R11: 0000000000000246 R12: 0000000000000002 [ 644.539650] R13: 00007ffc26c62bef R14: 00007f621d907300 R15: 0000000000022000 [ 644.539686] [ 644.612407] FAULT_INJECTION: forcing a failure. [ 644.612407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.614106] CPU: 1 UID: 0 PID: 6310 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 644.614135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 644.614147] Call Trace: [ 644.614155] [ 644.614163] dump_stack_lvl+0xfa/0x120 [ 644.614208] should_fail_ex+0x4d7/0x5e0 [ 644.614235] _copy_from_user+0x30/0xd0 [ 644.614259] copy_msghdr_from_user+0x88/0x150 [ 644.614293] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 644.614332] ? kfree+0x231/0x550 [ 644.614352] ? perf_trace_lock_acquire+0xc9/0x700 [ 644.614386] ___sys_recvmsg+0xbb/0x190 [ 644.614418] ? __pfx____sys_recvmsg+0x10/0x10 [ 644.614450] ? __fget_files+0x34/0x3b0 [ 644.614483] ? lock_acquire+0x15e/0x2f0 [ 644.614507] ? __might_fault+0xe0/0x190 [ 644.614535] ? find_held_lock+0x2b/0x80 [ 644.614567] ? __might_fault+0x138/0x190 [ 644.614606] do_recvmmsg+0x2c5/0x6f0 [ 644.614644] ? __pfx_do_recvmmsg+0x10/0x10 [ 644.614673] ? ksys_write+0x187/0x240 [ 644.614700] ? lock_release+0xc8/0x290 [ 644.614729] ? __mutex_unlock_slowpath+0x157/0x750 [ 644.614759] ? kernel_write+0x5e3/0x660 [ 644.614807] ? __fget_files+0x20d/0x3b0 [ 644.614841] __x64_sys_recvmmsg+0x211/0x260 [ 644.614874] ? ksys_write+0x1a3/0x240 [ 644.614900] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 644.614934] ? do_user_addr_fault+0x43a/0x12b0 [ 644.614962] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 644.614991] do_syscall_64+0xbf/0x390 [ 644.615026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.615047] RIP: 0033:0x7ff705a3db19 [ 644.615063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 644.615083] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 644.615103] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 644.615117] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 644.615130] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 644.615142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 644.615154] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 644.615184] 02:16:42 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 6) 02:16:42 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:16:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 51) 02:16:42 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) r2 = syz_open_pts(r0, 0x20400) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r3, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0xf9, 0x3f, 0x7f, 0x0, 0x4, 0x200, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f8, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x120, 0xffffffffffffff28, 0x1ff, 0x0, 0x200, 0x904, 0x9, 0x0, 0x6}, r4, 0x10, r1, 0x2) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) r6 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r6, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180)) ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0x4c8e, 0x0, 0xf3, 0x1, 0xe, "30e29d6773fcb485c0ae62ee766b927f9801fc"}) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000040)) 02:16:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b45) 02:16:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 12) 02:16:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4bfa) 02:16:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x4, 0x0) [ 653.183317] FAULT_INJECTION: forcing a failure. [ 653.183317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.184987] CPU: 0 UID: 0 PID: 6332 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 653.185013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 653.185025] Call Trace: [ 653.185031] [ 653.185038] dump_stack_lvl+0xfa/0x120 [ 653.185074] should_fail_ex+0x4d7/0x5e0 [ 653.185098] _copy_from_user+0x30/0xd0 [ 653.185119] copy_msghdr_from_user+0x88/0x150 [ 653.185151] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 653.185191] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 653.185214] ? kfree+0x231/0x550 [ 653.185233] ? perf_trace_lock_acquire+0xc9/0x700 [ 653.185264] ___sys_recvmsg+0xbb/0x190 [ 653.185293] ? __pfx____sys_recvmsg+0x10/0x10 [ 653.185331] ? lock_acquire+0x15e/0x2f0 [ 653.185353] ? __might_fault+0xe0/0x190 [ 653.185380] ? find_held_lock+0x2b/0x80 [ 653.185408] ? __might_fault+0x138/0x190 [ 653.185444] do_recvmmsg+0x2c5/0x6f0 [ 653.185479] ? __pfx_do_recvmmsg+0x10/0x10 [ 653.185505] ? ksys_write+0x187/0x240 [ 653.185531] ? lock_release+0xc8/0x290 [ 653.185557] ? __mutex_unlock_slowpath+0x157/0x750 [ 653.185585] ? kernel_write+0x5e3/0x660 [ 653.185618] ? __fget_files+0x20d/0x3b0 [ 653.185651] __x64_sys_recvmmsg+0x211/0x260 [ 653.185680] ? ksys_write+0x1a3/0x240 [ 653.185704] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 653.185735] ? do_user_addr_fault+0x43a/0x12b0 [ 653.185762] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 653.185788] do_syscall_64+0xbf/0x390 [ 653.185819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.185839] RIP: 0033:0x7ff705a3db19 [ 653.185854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 653.185872] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 653.185891] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 653.185903] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 653.185915] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 653.185926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 653.185937] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 653.185965] [ 653.196445] FAULT_INJECTION: forcing a failure. [ 653.196445] name failslab, interval 1, probability 0, space 0, times 0 [ 653.218225] CPU: 1 UID: 0 PID: 6336 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 653.218257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 653.218271] Call Trace: [ 653.218279] [ 653.218288] dump_stack_lvl+0xfa/0x120 [ 653.218330] should_fail_ex+0x4d7/0x5e0 [ 653.218358] ? prepare_creds+0x2c/0x7e0 [ 653.218385] should_failslab+0xc2/0x120 [ 653.218420] kmem_cache_alloc_noprof+0x72/0x680 [ 653.218445] ? lock_release+0xc8/0x290 [ 653.218481] ? prepare_creds+0x2c/0x7e0 [ 653.218507] prepare_creds+0x2c/0x7e0 [ 653.218539] copy_creds+0x7a/0xa20 02:16:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 52) [ 653.218572] copy_process+0xf59/0x7400 [ 653.218596] ? __pfx__kstrtoull+0x10/0x10 [ 653.218633] ? lock_acquire+0x15e/0x2f0 [ 653.218668] ? __pfx_copy_process+0x10/0x10 [ 653.218692] ? __might_fault+0xe0/0x190 [ 653.218729] ? _copy_from_user+0x5b/0xd0 [ 653.218759] kernel_clone+0xea/0x7f0 [ 653.218783] ? lock_release+0xc8/0x290 [ 653.218810] ? __pfx_kernel_clone+0x10/0x10 [ 653.218846] ? ksys_write+0x121/0x240 [ 653.218877] ? lock_is_held_type+0x9e/0x120 [ 653.218930] __do_sys_clone3+0x1f2/0x270 [ 653.218954] ? __pfx___do_sys_clone3+0x10/0x10 [ 653.218997] ? __fget_files+0x20d/0x3b0 [ 653.219034] ? fput+0x6a/0x100 [ 653.219069] ? ksys_write+0x1a3/0x240 [ 653.219099] ? __pfx_ksys_write+0x10/0x10 [ 653.219129] ? do_user_addr_fault+0x43a/0x12b0 [ 653.219160] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 653.219200] do_syscall_64+0xbf/0x390 [ 653.219238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.219262] RIP: 0033:0x7f78baaddb19 [ 653.219280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 653.219302] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 653.219325] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 653.219340] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 653.219354] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 653.219368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.219382] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 653.219416] [ 653.278468] FAULT_INJECTION: forcing a failure. [ 653.278468] name failslab, interval 1, probability 0, space 0, times 0 [ 653.278518] CPU: 1 UID: 0 PID: 6331 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 653.278553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 653.278569] Call Trace: [ 653.278579] [ 653.278590] dump_stack_lvl+0xfa/0x120 [ 653.278639] should_fail_ex+0x4d7/0x5e0 [ 653.278668] ? jbd2__journal_start+0x193/0x6b0 [ 653.278692] should_failslab+0xc2/0x120 [ 653.278726] kmem_cache_alloc_noprof+0x72/0x680 [ 653.278755] ? lock_is_held_type+0x9e/0x120 [ 653.278794] ? jbd2__journal_start+0x193/0x6b0 [ 653.278817] jbd2__journal_start+0x193/0x6b0 [ 653.278849] __ext4_journal_start_sb+0x325/0x5d0 [ 653.278883] ? ext4_da_write_end+0x9c2/0xe70 [ 653.278940] ext4_da_write_end+0x9c2/0xe70 [ 653.278986] generic_perform_write+0x223/0x810 [ 653.279037] ? __pfx_generic_perform_write+0x10/0x10 [ 653.279068] ? __mark_inode_dirty+0x254/0xd00 [ 653.279108] ? generic_update_time+0xcb/0xf0 [ 653.279140] ? mnt_put_write_access_file+0x45/0xe0 [ 653.279174] ext4_buffered_write_iter+0x11a/0x430 [ 653.279218] ext4_file_write_iter+0x9df/0x1990 [ 653.279263] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 653.279293] ? __x64_sys_pwrite64+0x1f1/0x260 [ 653.279332] ? lock_is_held_type+0x9e/0x120 [ 653.279370] vfs_write+0xbe9/0x1150 [ 653.279400] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 653.279431] ? __fget_files+0x34/0x3b0 [ 653.279457] ? __pfx_vfs_write+0x10/0x10 [ 653.279518] __x64_sys_pwrite64+0x1f1/0x260 [ 653.279550] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 653.279582] ? do_user_addr_fault+0x43a/0x12b0 [ 653.279614] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 653.279648] do_syscall_64+0xbf/0x390 [ 653.279685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.279709] RIP: 0033:0x7f6220391b19 [ 653.279726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 653.279747] RSP: 002b:00007f621d907188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 653.279769] RAX: ffffffffffffffda RBX: 00007f62204a4f60 RCX: 00007f6220391b19 [ 653.279784] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 [ 653.279798] RBP: 00007f621d9071d0 R08: 0000000000000000 R09: 0000000000000000 [ 653.279811] R10: 00000000000099ad R11: 0000000000000246 R12: 0000000000000002 02:16:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 13) [ 653.279824] R13: 00007ffc26c62bef R14: 00007f621d907300 R15: 0000000000022000 [ 653.279862] [ 653.324042] FAULT_INJECTION: forcing a failure. [ 653.324042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.384649] CPU: 0 UID: 0 PID: 6340 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 653.384684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 653.384698] Call Trace: [ 653.384706] [ 653.384716] dump_stack_lvl+0xfa/0x120 [ 653.384760] should_fail_ex+0x4d7/0x5e0 [ 653.384789] _copy_from_user+0x30/0xd0 [ 653.384815] copy_msghdr_from_user+0x88/0x150 [ 653.384853] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 653.384895] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 653.384922] ? kfree+0x231/0x550 [ 653.384944] ? perf_trace_lock_acquire+0xc9/0x700 [ 653.384983] ___sys_recvmsg+0xbb/0x190 [ 653.385018] ? __pfx____sys_recvmsg+0x10/0x10 [ 653.385056] ? __pfx_perf_trace_lock+0x10/0x10 [ 653.385104] ? lock_acquire+0x15e/0x2f0 [ 653.385133] ? __might_fault+0xe0/0x190 [ 653.385166] ? find_held_lock+0x2b/0x80 [ 653.385208] ? __might_fault+0x138/0x190 [ 653.385254] do_recvmmsg+0x2c5/0x6f0 [ 653.385298] ? __pfx_do_recvmmsg+0x10/0x10 [ 653.385330] ? ksys_write+0x187/0x240 [ 653.385361] ? lock_release+0xc8/0x290 [ 653.385394] ? __mutex_unlock_slowpath+0x157/0x750 [ 653.385427] ? kernel_write+0x5e3/0x660 [ 653.385469] ? __fget_files+0x20d/0x3b0 [ 653.385510] __x64_sys_recvmmsg+0x211/0x260 [ 653.385546] ? ksys_write+0x1a3/0x240 [ 653.385575] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 653.385613] ? do_user_addr_fault+0x43a/0x12b0 [ 653.385644] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 653.385677] do_syscall_64+0xbf/0x390 [ 653.385715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.385739] RIP: 0033:0x7ff705a3db19 [ 653.385757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 653.385779] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 653.385802] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 653.385817] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 653.385831] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 02:16:42 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) [ 653.385844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 653.385858] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 653.385895] 02:16:42 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 7) 02:16:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 53) 02:16:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4bfb) 02:16:42 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 653.675067] FAULT_INJECTION: forcing a failure. [ 653.675067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.677093] CPU: 1 UID: 0 PID: 6351 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 653.677123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 653.677135] Call Trace: [ 653.677142] [ 653.677150] dump_stack_lvl+0xfa/0x120 [ 653.677197] should_fail_ex+0x4d7/0x5e0 [ 653.677223] _copy_from_user+0x30/0xd0 [ 653.677248] copy_msghdr_from_user+0x88/0x150 [ 653.677282] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 653.677322] ? kfree+0x231/0x550 [ 653.677343] ? perf_trace_lock_acquire+0xc9/0x700 [ 653.677378] ___sys_recvmsg+0xbb/0x190 [ 653.677411] ? __pfx____sys_recvmsg+0x10/0x10 [ 653.677444] ? __fget_files+0x34/0x3b0 [ 653.677476] ? lock_acquire+0x15e/0x2f0 [ 653.677501] ? __might_fault+0xe0/0x190 [ 653.677531] ? find_held_lock+0x2b/0x80 [ 653.677563] ? __might_fault+0x138/0x190 [ 653.677603] do_recvmmsg+0x2c5/0x6f0 [ 653.677642] ? __pfx_do_recvmmsg+0x10/0x10 [ 653.677672] ? ksys_write+0x187/0x240 [ 653.677701] ? lock_release+0xc8/0x290 [ 653.677731] ? __mutex_unlock_slowpath+0x157/0x750 [ 653.677762] ? kernel_write+0x5e3/0x660 [ 653.677798] ? __fget_files+0x20d/0x3b0 [ 653.677833] __x64_sys_recvmmsg+0x211/0x260 [ 653.677867] ? ksys_write+0x1a3/0x240 [ 653.677894] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 653.677928] ? do_user_addr_fault+0x43a/0x12b0 [ 653.677958] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 653.677988] do_syscall_64+0xbf/0x390 [ 653.678024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.678046] RIP: 0033:0x7ff705a3db19 [ 653.678062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 653.678082] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 653.678103] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 653.678118] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 653.678131] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 653.678143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 653.678156] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 653.678187] 02:16:42 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:16:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 14) 02:16:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 54) 02:16:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x40000, 0x0) 02:16:50 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:16:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5409) 02:16:50 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 8) 02:16:50 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:16:50 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88e0a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x18002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x3) ioctl$VT_DISALLOCATE(r2, 0x4b3a) r3 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r3, r3, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/cryptomgr', 0x2000, 0x196) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r4, 0x0, r5, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r6, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000018c28e6fbb000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='./file0/file0\x00']) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)) r8 = signalfd4(r0, &(0x7f0000000080)={[0x9]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0xfffffffffffffe49, r8, @in_args={0x4}}, './file0/file0\x00'}) writev(r1, &(0x7f0000000540), 0x0) [ 661.496171] FAULT_INJECTION: forcing a failure. [ 661.496171] name failslab, interval 1, probability 0, space 0, times 0 [ 661.497844] CPU: 1 UID: 0 PID: 6380 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 661.497873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 661.497885] Call Trace: [ 661.497892] [ 661.497901] dump_stack_lvl+0xfa/0x120 [ 661.497939] should_fail_ex+0x4d7/0x5e0 [ 661.497965] should_failslab+0xc2/0x120 [ 661.497998] __kmalloc_noprof+0xc8/0x760 [ 661.498017] ? __create_object+0x59/0x80 [ 661.498040] ? security_prepare_creds+0x101/0x160 [ 661.498066] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 661.498104] ? security_prepare_creds+0x101/0x160 [ 661.498130] security_prepare_creds+0x101/0x160 [ 661.498160] prepare_creds+0x579/0x7e0 [ 661.498198] copy_creds+0x7a/0xa20 [ 661.498229] copy_process+0xf59/0x7400 [ 661.498250] ? __pfx__kstrtoull+0x10/0x10 [ 661.498284] ? lock_acquire+0x15e/0x2f0 [ 661.498318] ? __pfx_copy_process+0x10/0x10 [ 661.498340] ? __might_fault+0xe0/0x190 [ 661.498375] ? _copy_from_user+0x5b/0xd0 [ 661.498403] kernel_clone+0xea/0x7f0 [ 661.498428] ? lock_release+0xc8/0x290 [ 661.498453] ? __pfx_kernel_clone+0x10/0x10 [ 661.498487] ? ksys_write+0x121/0x240 [ 661.498515] ? lock_is_held_type+0x9e/0x120 [ 661.498551] __do_sys_clone3+0x1f2/0x270 [ 661.498573] ? __pfx___do_sys_clone3+0x10/0x10 [ 661.498614] ? __fget_files+0x20d/0x3b0 [ 661.498649] ? fput+0x6a/0x100 [ 661.498682] ? ksys_write+0x1a3/0x240 [ 661.498709] ? __pfx_ksys_write+0x10/0x10 [ 661.498738] ? do_user_addr_fault+0x43a/0x12b0 [ 661.498767] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 661.498797] do_syscall_64+0xbf/0x390 [ 661.498833] entry_SYSCALL_64_after_hwframe+0x77/0x7f 02:16:50 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(0xffffffffffffffff, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 661.498855] RIP: 0033:0x7f78baaddb19 [ 661.498872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 661.498892] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 661.498914] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 661.498929] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 661.498942] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 661.498955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.498968] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 661.499012] [ 661.545159] FAULT_INJECTION: forcing a failure. [ 661.545159] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 661.546565] CPU: 0 UID: 0 PID: 6381 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 661.546581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 661.546588] Call Trace: [ 661.546592] [ 661.546597] dump_stack_lvl+0xfa/0x120 [ 661.546619] should_fail_ex+0x4d7/0x5e0 [ 661.546634] should_fail_alloc_page+0xe0/0x110 [ 661.546653] prepare_alloc_pages+0x1af/0x500 [ 661.546674] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 661.546689] ? lock_acquire+0x15e/0x2f0 [ 661.546703] ? __is_insn_slot_addr+0x2e/0x290 [ 661.546715] ? find_held_lock+0x2b/0x80 [ 661.546733] ? __is_insn_slot_addr+0x136/0x290 [ 661.546744] ? lock_release+0xc8/0x290 [ 661.546758] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 661.546771] ? __is_insn_slot_addr+0x140/0x290 [ 661.546785] ? perf_trace_lock_acquire+0xc9/0x700 [ 661.546802] ? __lock_acquire+0x694/0x1b70 [ 661.546816] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 661.546833] ? policy_nodemask+0xeb/0x4e0 [ 661.546848] alloc_pages_mpol+0xed/0x340 [ 661.546860] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 661.546874] ? filemap_get_entry+0x1b1/0x3b0 [ 661.546886] ? lock_release+0xc8/0x290 [ 661.546902] folio_alloc_noprof+0x22/0x290 [ 661.546917] filemap_alloc_folio_noprof+0x376/0x420 [ 661.546936] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 661.546955] ? __pfx_start_this_handle+0x10/0x10 [ 661.546971] __filemap_get_folio+0x384/0x960 [ 661.546995] __ext4_block_zero_page_range+0x8f/0x8a0 [ 661.547013] ? jbd2__journal_start+0xf6/0x6b0 [ 661.547028] ext4_zero_partial_blocks+0x29d/0x4a0 [ 661.547049] ext4_da_write_end+0x9fd/0xe70 [ 661.547072] generic_perform_write+0x223/0x810 [ 661.547097] ? __pfx_generic_perform_write+0x10/0x10 [ 661.547112] ? __mark_inode_dirty+0x254/0xd00 [ 661.547133] ? generic_update_time+0xcb/0xf0 [ 661.547149] ? mnt_put_write_access_file+0x45/0xe0 [ 661.547166] ext4_buffered_write_iter+0x11a/0x430 [ 661.547188] ext4_file_write_iter+0x9df/0x1990 [ 661.547211] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 661.547226] ? __x64_sys_pwrite64+0x1f1/0x260 02:16:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 15) [ 661.547245] ? lock_is_held_type+0x9e/0x120 [ 661.547265] vfs_write+0xbe9/0x1150 [ 661.547280] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 661.547296] ? __fget_files+0x34/0x3b0 [ 661.547310] ? __pfx_vfs_write+0x10/0x10 [ 661.547339] __x64_sys_pwrite64+0x1f1/0x260 [ 661.547355] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 661.547372] ? do_user_addr_fault+0x43a/0x12b0 [ 661.547388] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 661.547404] do_syscall_64+0xbf/0x390 [ 661.547424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.547436] RIP: 0033:0x7f6220391b19 [ 661.547445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 661.547456] RSP: 002b:00007f621d907188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 661.547467] RAX: ffffffffffffffda RBX: 00007f62204a4f60 RCX: 00007f6220391b19 [ 661.547475] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 [ 661.547482] RBP: 00007f621d9071d0 R08: 0000000000000000 R09: 0000000000000000 [ 661.547488] R10: 00000000000099ad R11: 0000000000000246 R12: 0000000000000002 [ 661.547495] R13: 00007ffc26c62bef R14: 00007f621d907300 R15: 0000000000022000 [ 661.547513] [ 661.549241] FAULT_INJECTION: forcing a failure. [ 661.549241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.597603] CPU: 1 UID: 0 PID: 6384 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 661.597638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 661.597652] Call Trace: [ 661.597661] [ 661.597671] dump_stack_lvl+0xfa/0x120 [ 661.597717] should_fail_ex+0x4d7/0x5e0 [ 661.597748] _copy_from_user+0x30/0xd0 [ 661.597775] copy_msghdr_from_user+0x88/0x150 [ 661.597815] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 661.597857] ? __schedule+0x24dd/0x3580 [ 661.597887] ? kfree+0x231/0x550 [ 661.597910] ? perf_trace_lock_acquire+0xc9/0x700 [ 661.597948] ___sys_recvmsg+0xbb/0x190 [ 661.597985] ? __pfx____sys_recvmsg+0x10/0x10 [ 661.598031] ? lock_acquire+0x15e/0x2f0 [ 661.598059] ? __might_fault+0xe0/0x190 [ 661.598092] ? find_held_lock+0x2b/0x80 [ 661.598128] ? __might_fault+0x138/0x190 [ 661.598172] do_recvmmsg+0x2c5/0x6f0 [ 661.598223] ? __pfx_do_recvmmsg+0x10/0x10 [ 661.598256] ? ksys_write+0x187/0x240 [ 661.598288] ? lock_release+0xc8/0x290 [ 661.598321] ? __mutex_unlock_slowpath+0x157/0x750 [ 661.598353] ? kernel_write+0x5e3/0x660 [ 661.598394] ? __fget_files+0x20d/0x3b0 [ 661.598434] __x64_sys_recvmmsg+0x211/0x260 [ 661.598472] ? ksys_write+0x1a3/0x240 [ 661.598501] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 661.598540] ? do_user_addr_fault+0x43a/0x12b0 [ 661.598573] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 661.598607] do_syscall_64+0xbf/0x390 [ 661.598648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.598674] RIP: 0033:0x7ff705a3db19 [ 661.598693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 661.598715] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 661.598739] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 661.598755] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 661.598770] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 661.598785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 661.598799] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 661.598834] 02:17:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 16) 02:17:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x540b) 02:17:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x1000000, 0x0) 02:17:00 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(0xffffffffffffffff, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:00 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 9) 02:17:00 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:17:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) r2 = syz_open_pts(r0, 0x20400) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r3, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0xf9, 0x3f, 0x7f, 0x0, 0x4, 0x200, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f8, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x120, 0xffffffffffffff28, 0x1ff, 0x0, 0x200, 0x904, 0x9, 0x0, 0x6}, r4, 0x10, r1, 0x2) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) r6 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r6, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180)) ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0x4c8e, 0x0, 0xf3, 0x1, 0xe, "30e29d6773fcb485c0ae62ee766b927f9801fc"}) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000040)) 02:17:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 55) [ 670.911770] FAULT_INJECTION: forcing a failure. [ 670.911770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.914085] CPU: 1 UID: 0 PID: 6404 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 670.914120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 670.914135] Call Trace: [ 670.914143] [ 670.914153] dump_stack_lvl+0xfa/0x120 [ 670.914210] should_fail_ex+0x4d7/0x5e0 [ 670.914243] _copy_from_user+0x30/0xd0 [ 670.914273] copy_msghdr_from_user+0x88/0x150 [ 670.914317] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 670.914366] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 670.914396] ? kfree+0x231/0x550 [ 670.914421] ? perf_trace_lock_acquire+0xc9/0x700 [ 670.914466] ___sys_recvmsg+0xbb/0x190 [ 670.914507] ? __pfx____sys_recvmsg+0x10/0x10 [ 670.914562] ? lock_acquire+0x15e/0x2f0 [ 670.914592] ? __might_fault+0xe0/0x190 [ 670.914629] ? find_held_lock+0x2b/0x80 [ 670.914669] ? __might_fault+0x138/0x190 [ 670.914722] do_recvmmsg+0x2c5/0x6f0 [ 670.914772] ? __pfx_do_recvmmsg+0x10/0x10 [ 670.914810] ? ksys_write+0x187/0x240 [ 670.914845] ? lock_release+0xc8/0x290 [ 670.914883] ? __mutex_unlock_slowpath+0x157/0x750 [ 670.914921] ? kernel_write+0x5e3/0x660 [ 670.914969] ? __fget_files+0x20d/0x3b0 [ 670.915015] __x64_sys_recvmmsg+0x211/0x260 [ 670.915057] ? ksys_write+0x1a3/0x240 [ 670.915108] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 670.915151] ? do_user_addr_fault+0x43a/0x12b0 [ 670.915188] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 670.915225] do_syscall_64+0xbf/0x390 [ 670.915270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.915297] RIP: 0033:0x7ff705a3db19 [ 670.915318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 670.915342] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 670.915367] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 670.915385] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 670.915400] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 670.915416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 670.915431] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 670.915473] 02:17:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x540c) 02:17:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 17) 02:17:00 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(0xffffffffffffffff, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 56) 02:17:00 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(0xffffffffffffffff, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x540d) [ 671.238291] FAULT_INJECTION: forcing a failure. [ 671.238291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.240143] CPU: 1 UID: 0 PID: 6429 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 671.240174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 671.240194] Call Trace: [ 671.240202] [ 671.240210] dump_stack_lvl+0xfa/0x120 [ 671.240252] should_fail_ex+0x4d7/0x5e0 [ 671.240280] _copy_from_user+0x30/0xd0 [ 671.240306] copy_msghdr_from_user+0x88/0x150 [ 671.240343] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 671.240384] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 671.240411] ? kfree+0x231/0x550 [ 671.240433] ? perf_trace_lock_acquire+0xc9/0x700 [ 671.240470] ___sys_recvmsg+0xbb/0x190 [ 671.240505] ? __pfx____sys_recvmsg+0x10/0x10 [ 671.240550] ? lock_acquire+0x15e/0x2f0 [ 671.240577] ? __might_fault+0xe0/0x190 [ 671.240608] ? find_held_lock+0x2b/0x80 [ 671.240642] ? __might_fault+0x138/0x190 [ 671.240686] do_recvmmsg+0x2c5/0x6f0 [ 671.240727] ? __pfx_do_recvmmsg+0x10/0x10 [ 671.240760] ? ksys_write+0x187/0x240 [ 671.240790] ? lock_release+0xc8/0x290 [ 671.240822] ? __mutex_unlock_slowpath+0x157/0x750 [ 671.240855] ? kernel_write+0x5e3/0x660 [ 671.240894] ? __fget_files+0x20d/0x3b0 [ 671.240932] __x64_sys_recvmmsg+0x211/0x260 [ 671.240968] ? ksys_write+0x1a3/0x240 [ 671.240997] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 671.241035] ? do_user_addr_fault+0x43a/0x12b0 [ 671.241066] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 671.241097] do_syscall_64+0xbf/0x390 [ 671.241135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.241159] RIP: 0033:0x7ff705a3db19 [ 671.241177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 671.241199] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 671.241222] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 671.241237] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 671.241251] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 671.241265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 671.241278] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 671.241311] [ 671.285774] FAULT_INJECTION: forcing a failure. [ 671.285774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 671.287672] CPU: 1 UID: 0 PID: 6428 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 671.287703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 671.287716] Call Trace: [ 671.287724] [ 671.287733] dump_stack_lvl+0xfa/0x120 [ 671.287775] should_fail_ex+0x4d7/0x5e0 [ 671.287804] should_fail_alloc_page+0xe0/0x110 [ 671.287842] prepare_alloc_pages+0x1af/0x500 [ 671.287882] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 671.287913] ? lock_acquire+0x15e/0x2f0 [ 671.287940] ? __is_insn_slot_addr+0x2e/0x290 [ 671.287963] ? find_held_lock+0x2b/0x80 [ 671.287999] ? __is_insn_slot_addr+0x136/0x290 [ 671.288021] ? lock_release+0xc8/0x290 [ 671.288047] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 671.288075] ? __is_insn_slot_addr+0x140/0x290 [ 671.288102] ? perf_trace_lock_acquire+0xc9/0x700 [ 671.288136] ? __lock_acquire+0x694/0x1b70 [ 671.288164] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 671.288205] ? policy_nodemask+0xeb/0x4e0 [ 671.288234] alloc_pages_mpol+0xed/0x340 [ 671.288259] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 671.288285] ? filemap_get_entry+0x1b1/0x3b0 [ 671.288310] ? lock_release+0xc8/0x290 [ 671.288341] folio_alloc_noprof+0x22/0x290 [ 671.288371] filemap_alloc_folio_noprof+0x376/0x420 [ 671.288409] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 671.288447] ? __pfx_start_this_handle+0x10/0x10 [ 671.288479] __filemap_get_folio+0x384/0x960 [ 671.288510] __ext4_block_zero_page_range+0x8f/0x8a0 [ 671.288546] ? jbd2__journal_start+0xf6/0x6b0 [ 671.288575] ext4_zero_partial_blocks+0x29d/0x4a0 [ 671.288618] ext4_da_write_end+0x9fd/0xe70 [ 671.288663] generic_perform_write+0x223/0x810 [ 671.288712] ? __pfx_generic_perform_write+0x10/0x10 [ 671.288744] ? __mark_inode_dirty+0x254/0xd00 [ 671.288785] ? generic_update_time+0xcb/0xf0 [ 671.288819] ? mnt_put_write_access_file+0x45/0xe0 [ 671.288854] ext4_buffered_write_iter+0x11a/0x430 [ 671.288891] ext4_file_write_iter+0x9df/0x1990 [ 671.288937] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 671.288967] ? __x64_sys_pwrite64+0x1f1/0x260 [ 671.289007] ? lock_is_held_type+0x9e/0x120 [ 671.289046] vfs_write+0xbe9/0x1150 [ 671.289078] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 671.289109] ? __fget_files+0x34/0x3b0 [ 671.289138] ? __pfx_vfs_write+0x10/0x10 [ 671.289196] __x64_sys_pwrite64+0x1f1/0x260 [ 671.289230] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 671.289276] do_syscall_64+0xbf/0x390 [ 671.289315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.289340] RIP: 0033:0x7f6220391b19 [ 671.289359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 671.289382] RSP: 002b:00007f621d907188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 671.289405] RAX: ffffffffffffffda RBX: 00007f62204a4f60 RCX: 00007f6220391b19 [ 671.289421] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 [ 671.289436] RBP: 00007f621d9071d0 R08: 0000000000000000 R09: 0000000000000000 [ 671.289451] R10: 00000000000099ad R11: 0000000000000246 R12: 0000000000000002 [ 671.289466] R13: 00007ffc26c62bef R14: 00007f621d907300 R15: 0000000000022000 [ 671.289502] 02:17:00 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 10) 02:17:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 57) 02:17:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) (fail_nth: 18) 02:17:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x540e) 02:17:00 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, 0xffffffffffffffff) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 671.631144] FAULT_INJECTION: forcing a failure. [ 671.631144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.633356] CPU: 1 UID: 0 PID: 6439 Comm: syz-executor.7 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 671.633387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 671.633401] Call Trace: [ 671.633408] [ 671.633417] dump_stack_lvl+0xfa/0x120 [ 671.633461] should_fail_ex+0x4d7/0x5e0 [ 671.633491] _copy_to_user+0x32/0xd0 [ 671.633519] simple_read_from_buffer+0xe0/0x180 [ 671.633550] proc_fail_nth_read+0x18a/0x240 [ 671.633586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 671.633621] ? security_file_permission+0x22/0x90 [ 671.633652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 671.633685] vfs_read+0x1eb/0xc70 [ 671.633724] ? __pfx_vfs_read+0x10/0x10 [ 671.633756] ? lock_release+0xc8/0x290 [ 671.633792] ? __fget_files+0x20d/0x3b0 [ 671.633837] ksys_read+0x121/0x240 [ 671.633866] ? __pfx_ksys_read+0x10/0x10 [ 671.633910] do_syscall_64+0xbf/0x390 [ 671.633950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.633974] RIP: 0033:0x7f622034469c [ 671.633992] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 671.634014] RSP: 002b:00007f621d907170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 671.634036] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f622034469c [ 671.634052] RDX: 000000000000000f RSI: 00007f621d9071e0 RDI: 0000000000000005 [ 671.634066] RBP: 00007f621d9071d0 R08: 0000000000000000 R09: 0000000000000000 [ 671.634079] R10: 00000000000099ad R11: 0000000000000246 R12: 0000000000000002 [ 671.634093] R13: 00007ffc26c62bef R14: 00007f621d907300 R15: 0000000000022000 [ 671.634131] [ 671.661012] FAULT_INJECTION: forcing a failure. [ 671.661012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.662851] CPU: 1 UID: 0 PID: 6442 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 671.662882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 671.662894] Call Trace: [ 671.662903] [ 671.662912] dump_stack_lvl+0xfa/0x120 [ 671.662951] should_fail_ex+0x4d7/0x5e0 [ 671.662980] _copy_from_user+0x30/0xd0 [ 671.663008] copy_msghdr_from_user+0x88/0x150 [ 671.663049] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 671.663106] ? kfree+0x231/0x550 [ 671.663129] ? perf_trace_lock_acquire+0xc9/0x700 [ 671.663169] ___sys_recvmsg+0xbb/0x190 [ 671.663212] ? __pfx____sys_recvmsg+0x10/0x10 [ 671.663250] ? __pfx_perf_trace_lock+0x10/0x10 [ 671.663286] ? lock_acquire+0x15e/0x2f0 [ 671.663312] ? __might_fault+0xe0/0x190 [ 671.663344] ? find_held_lock+0x2b/0x80 [ 671.663379] ? __might_fault+0x138/0x190 [ 671.663425] do_recvmmsg+0x2c5/0x6f0 [ 671.663469] ? __pfx_do_recvmmsg+0x10/0x10 [ 671.663502] ? ksys_write+0x187/0x240 [ 671.663533] ? lock_release+0xc8/0x290 [ 671.663566] ? __mutex_unlock_slowpath+0x157/0x750 [ 671.663600] ? kernel_write+0x5e3/0x660 [ 671.663641] ? __fget_files+0x20d/0x3b0 [ 671.663687] __x64_sys_recvmmsg+0x211/0x260 [ 671.663724] ? ksys_write+0x1a3/0x240 [ 671.663753] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 671.663791] ? do_user_addr_fault+0x43a/0x12b0 [ 671.663823] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 671.663857] do_syscall_64+0xbf/0x390 [ 671.663895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.663918] RIP: 0033:0x7ff705a3db19 [ 671.663935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 671.663957] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 671.663979] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 671.663994] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 671.664008] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 671.664022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 671.664035] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 671.664073] 02:17:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 58) 02:17:09 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(0xffffffffffffffff, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:09 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, 0xffffffffffffffff) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:09 executing program 6: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x1, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f00000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r4}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r4}}, 0x3000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x3f) r5 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x12, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r6}}, 0xac4) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b3a) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7ff, 0x1ff, 0x20, 0x1, 0x10}}) 02:17:09 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 11) 02:17:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x99ad) 02:17:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x540f) 02:17:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x4000000000000, 0x0) [ 680.816032] FAULT_INJECTION: forcing a failure. [ 680.816032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.817131] CPU: 0 UID: 0 PID: 6471 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 680.817147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 680.817154] Call Trace: [ 680.817159] [ 680.817163] dump_stack_lvl+0xfa/0x120 [ 680.817191] should_fail_ex+0x4d7/0x5e0 [ 680.817207] _copy_from_user+0x30/0xd0 [ 680.817221] copy_msghdr_from_user+0x88/0x150 [ 680.817242] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 680.817264] ? kfree+0x231/0x550 [ 680.817277] ? perf_trace_lock_acquire+0xc9/0x700 [ 680.817297] ___sys_recvmsg+0xbb/0x190 [ 680.817315] ? __pfx____sys_recvmsg+0x10/0x10 [ 680.817334] ? __pfx_perf_trace_lock+0x10/0x10 [ 680.817352] ? lock_acquire+0x15e/0x2f0 [ 680.817366] ? __might_fault+0xe0/0x190 [ 680.817382] ? find_held_lock+0x2b/0x80 [ 680.817400] ? __might_fault+0x138/0x190 [ 680.817423] do_recvmmsg+0x2c5/0x6f0 [ 680.817445] ? __pfx_do_recvmmsg+0x10/0x10 [ 680.817461] ? ksys_write+0x187/0x240 [ 680.817477] ? lock_release+0xc8/0x290 [ 680.817494] ? __mutex_unlock_slowpath+0x157/0x750 [ 680.817511] ? kernel_write+0x5e3/0x660 [ 680.817532] ? __fget_files+0x20d/0x3b0 [ 680.817553] __x64_sys_recvmmsg+0x211/0x260 [ 680.817572] ? ksys_write+0x1a3/0x240 [ 680.817586] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 680.817605] ? do_user_addr_fault+0x43a/0x12b0 [ 680.817622] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 680.817640] do_syscall_64+0xbf/0x390 [ 680.817660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.817673] RIP: 0033:0x7ff705a3db19 [ 680.817682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 680.817693] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 680.817705] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 680.817712] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 680.817719] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 680.817726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 680.817733] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 680.817752] 02:17:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5410) 02:17:10 executing program 6: setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)={0x1, {{0x2, 0x4e20, @multicast1}}, 0x1, 0x5, [{{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x310) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:17:10 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, 0xffffffffffffffff) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)="02", 0x1, 0x99ad) 02:17:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 59) 02:17:10 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 12) [ 681.004066] FAULT_INJECTION: forcing a failure. [ 681.004066] name failslab, interval 1, probability 0, space 0, times 0 [ 681.005024] CPU: 0 UID: 0 PID: 6482 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 681.005040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 681.005047] Call Trace: [ 681.005051] [ 681.005056] dump_stack_lvl+0xfa/0x120 [ 681.005080] should_fail_ex+0x4d7/0x5e0 [ 681.005098] should_failslab+0xc2/0x120 [ 681.005116] __kmalloc_cache_noprof+0x73/0x6a0 [ 681.005131] ? alloc_fdtable+0x9e/0x2d0 [ 681.005144] ? find_held_lock+0x2b/0x80 [ 681.005167] ? alloc_fdtable+0x9e/0x2d0 [ 681.005179] alloc_fdtable+0x9e/0x2d0 [ 681.005198] dup_fd+0x6ef/0xa80 [ 681.005217] copy_process+0x21b4/0x7400 [ 681.005230] ? __pfx_perf_trace_lock+0x10/0x10 [ 681.005255] ? __pfx_copy_process+0x10/0x10 [ 681.005267] ? __might_fault+0xe0/0x190 [ 681.005287] ? _copy_from_user+0x5b/0xd0 [ 681.005304] kernel_clone+0xea/0x7f0 [ 681.005318] ? __pfx_kernel_clone+0x10/0x10 [ 681.005337] ? ksys_write+0x121/0x240 [ 681.005353] ? lock_is_held_type+0x9e/0x120 [ 681.005373] __do_sys_clone3+0x1f2/0x270 [ 681.005385] ? __pfx___do_sys_clone3+0x10/0x10 [ 681.005409] ? __fget_files+0x20d/0x3b0 [ 681.005427] ? fput+0x6a/0x100 [ 681.005446] ? ksys_write+0x1a3/0x240 [ 681.005460] ? __pfx_ksys_write+0x10/0x10 [ 681.005475] ? do_user_addr_fault+0x43a/0x12b0 [ 681.005491] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 681.005509] do_syscall_64+0xbf/0x390 [ 681.005529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.005542] RIP: 0033:0x7f78baaddb19 [ 681.005551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.005562] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 681.005574] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 681.005582] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 681.005588] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 681.005595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 681.005602] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 681.005621] 02:17:10 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) [ 681.072513] FAULT_INJECTION: forcing a failure. [ 681.072513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.074485] CPU: 1 UID: 0 PID: 6488 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 681.074516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 681.074530] Call Trace: [ 681.074539] [ 681.074548] dump_stack_lvl+0xfa/0x120 [ 681.074589] should_fail_ex+0x4d7/0x5e0 [ 681.074619] _copy_from_user+0x30/0xd0 [ 681.074645] copy_msghdr_from_user+0x88/0x150 [ 681.074683] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 681.074726] ? kfree+0x231/0x550 [ 681.074748] ? perf_trace_lock_acquire+0xc9/0x700 [ 681.074785] ___sys_recvmsg+0xbb/0x190 [ 681.074820] ? __pfx____sys_recvmsg+0x10/0x10 [ 681.074866] ? lock_acquire+0x15e/0x2f0 [ 681.074893] ? __might_fault+0xe0/0x190 [ 681.074924] ? find_held_lock+0x2b/0x80 [ 681.074959] ? __might_fault+0x138/0x190 [ 681.075002] do_recvmmsg+0x2c5/0x6f0 [ 681.075044] ? __pfx_do_recvmmsg+0x10/0x10 [ 681.075076] ? ksys_write+0x187/0x240 [ 681.075107] ? lock_release+0xc8/0x290 [ 681.075139] ? __mutex_unlock_slowpath+0x157/0x750 [ 681.075172] ? kernel_write+0x5e3/0x660 [ 681.075232] ? __fget_files+0x20d/0x3b0 [ 681.075271] __x64_sys_recvmmsg+0x211/0x260 [ 681.075307] ? ksys_write+0x1a3/0x240 [ 681.075337] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 681.075386] do_syscall_64+0xbf/0x390 [ 681.075424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.075447] RIP: 0033:0x7ff705a3db19 [ 681.075465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.075487] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 681.075509] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 681.075524] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 681.075538] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 681.075552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 681.075565] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 681.075598] 02:17:10 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x5, 0x7, 0x7, 0x3ff0, 0x3, "b69cfb56237cd8cd"}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) 02:17:10 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 13) 02:17:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x540e) 02:17:10 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) dup2(r0, r0) mq_notify(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)="03", 0x1, 0x99ad) 02:17:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5412) 02:17:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 60) 02:17:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)="04", 0x1, 0x99ad) 02:17:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x100000000000000, 0x0) 02:17:18 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) dup2(r0, r0) mq_notify(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:18 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(0xffffffffffffffff, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5413) 02:17:18 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000000), 0x4) copy_file_range(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x4) 02:17:18 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 14) [ 689.629305] FAULT_INJECTION: forcing a failure. [ 689.629305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.631437] CPU: 1 UID: 0 PID: 6516 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 689.631472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 689.631487] Call Trace: [ 689.631495] [ 689.631505] dump_stack_lvl+0xfa/0x120 [ 689.631551] should_fail_ex+0x4d7/0x5e0 [ 689.631583] _copy_from_user+0x30/0xd0 [ 689.631612] copy_msghdr_from_user+0x88/0x150 [ 689.631653] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 689.631701] ? kfree+0x231/0x550 [ 689.631725] ? perf_trace_lock_acquire+0xc9/0x700 [ 689.631767] ___sys_recvmsg+0xbb/0x190 [ 689.631806] ? __pfx____sys_recvmsg+0x10/0x10 [ 689.631846] ? __fget_files+0x34/0x3b0 [ 689.631884] ? lock_acquire+0x15e/0x2f0 [ 689.631914] ? __might_fault+0xe0/0x190 [ 689.631948] ? find_held_lock+0x2b/0x80 [ 689.631987] ? __might_fault+0x138/0x190 [ 689.632035] do_recvmmsg+0x2c5/0x6f0 [ 689.632082] ? __pfx_do_recvmmsg+0x10/0x10 [ 689.632118] ? ksys_write+0x187/0x240 [ 689.632151] ? lock_release+0xc8/0x290 [ 689.632194] ? __mutex_unlock_slowpath+0x157/0x750 [ 689.632232] ? kernel_write+0x5e3/0x660 [ 689.632276] ? __fget_files+0x20d/0x3b0 [ 689.632317] __x64_sys_recvmmsg+0x211/0x260 [ 689.632357] ? ksys_write+0x1a3/0x240 [ 689.632389] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 689.632431] ? do_user_addr_fault+0x43a/0x12b0 [ 689.632466] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 689.632502] do_syscall_64+0xbf/0x390 [ 689.632548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.632574] RIP: 0033:0x7ff705a3db19 [ 689.632594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.632618] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 689.632643] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 689.632660] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 689.632675] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 689.632691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 689.632705] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 689.632743] [ 689.679096] FAULT_INJECTION: forcing a failure. [ 689.679096] name failslab, interval 1, probability 0, space 0, times 0 [ 689.680020] CPU: 0 UID: 0 PID: 6523 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 689.680037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 689.680045] Call Trace: [ 689.680050] [ 689.680055] dump_stack_lvl+0xfa/0x120 [ 689.680080] should_fail_ex+0x4d7/0x5e0 [ 689.680096] should_failslab+0xc2/0x120 [ 689.680115] __kvmalloc_node_noprof+0x111/0x7f0 [ 689.680131] ? trace_kmalloc+0x1f/0xb0 [ 689.680148] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 689.680161] ? alloc_fdtable+0xf2/0x2d0 [ 689.680179] ? alloc_fdtable+0xf2/0x2d0 [ 689.680195] alloc_fdtable+0xf2/0x2d0 [ 689.680209] dup_fd+0x6ef/0xa80 [ 689.680227] copy_process+0x21b4/0x7400 [ 689.680241] ? __pfx__kstrtoull+0x10/0x10 [ 689.680266] ? __pfx_copy_process+0x10/0x10 [ 689.680278] ? __might_fault+0xe0/0x190 [ 689.680298] ? _copy_from_user+0x5b/0xd0 [ 689.680313] kernel_clone+0xea/0x7f0 [ 689.680325] ? lock_release+0xc8/0x290 [ 689.680340] ? __pfx_kernel_clone+0x10/0x10 [ 689.680358] ? ksys_write+0x121/0x240 [ 689.680375] ? lock_is_held_type+0x9e/0x120 [ 689.680395] __do_sys_clone3+0x1f2/0x270 [ 689.680407] ? __pfx___do_sys_clone3+0x10/0x10 [ 689.680428] ? __fget_files+0x20d/0x3b0 [ 689.680446] ? fput+0x6a/0x100 [ 689.680464] ? ksys_write+0x1a3/0x240 [ 689.680479] ? __pfx_ksys_write+0x10/0x10 [ 689.680494] ? do_user_addr_fault+0x43a/0x12b0 [ 689.680510] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 689.680527] do_syscall_64+0xbf/0x390 [ 689.680547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.680561] RIP: 0033:0x7f78baaddb19 [ 689.680570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.680582] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 689.680593] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 689.680602] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 689.680609] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 689.680617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 689.680624] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 689.680641] 02:17:18 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 15) 02:17:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5414) 02:17:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 61) 02:17:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)="06", 0x1, 0x99ad) [ 689.867963] FAULT_INJECTION: forcing a failure. [ 689.867963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.868916] CPU: 0 UID: 0 PID: 6543 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 689.868933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 689.868941] Call Trace: [ 689.868946] [ 689.868954] dump_stack_lvl+0xfa/0x120 [ 689.868979] should_fail_ex+0x4d7/0x5e0 [ 689.868996] _copy_from_user+0x30/0xd0 [ 689.869012] copy_msghdr_from_user+0x88/0x150 [ 689.869034] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 689.869055] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 689.869070] ? kfree+0x231/0x550 [ 689.869082] ? perf_trace_lock_acquire+0xc9/0x700 [ 689.869103] ___sys_recvmsg+0xbb/0x190 [ 689.869122] ? __pfx____sys_recvmsg+0x10/0x10 [ 689.869146] ? lock_acquire+0x15e/0x2f0 [ 689.869161] ? __might_fault+0xe0/0x190 [ 689.869180] ? find_held_lock+0x2b/0x80 [ 689.869198] ? __might_fault+0x138/0x190 [ 689.869223] do_recvmmsg+0x2c5/0x6f0 [ 689.869245] ? __pfx_do_recvmmsg+0x10/0x10 [ 689.869264] ? ksys_write+0x187/0x240 [ 689.869281] ? lock_release+0xc8/0x290 [ 689.869298] ? __mutex_unlock_slowpath+0x157/0x750 [ 689.869316] ? kernel_write+0x5e3/0x660 [ 689.869337] ? __fget_files+0x20d/0x3b0 [ 689.869359] __x64_sys_recvmmsg+0x211/0x260 [ 689.869380] ? ksys_write+0x1a3/0x240 [ 689.869395] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 689.869415] ? do_user_addr_fault+0x43a/0x12b0 [ 689.869432] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 689.869448] do_syscall_64+0xbf/0x390 [ 689.869471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.869484] RIP: 0033:0x7ff705a3db19 [ 689.869494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.869505] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 689.869517] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 689.869525] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 689.869533] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 689.869540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 689.869547] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 689.869564] 02:17:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 62) 02:17:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='\n', 0x1, 0x99ad) 02:17:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5415) 02:17:28 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 16) 02:17:28 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) dup2(r0, r0) mq_notify(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) (fail_nth: 1) 02:17:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) r3 = perf_event_open$cgroup(&(0x7f0000002180)={0x4, 0x80, 0xc0, 0x80, 0x1, 0x1, 0x0, 0x3, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000002140), 0x2}, 0x10014, 0x0, 0xa3f, 0x1, 0x0, 0x9, 0x9, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) r4 = getpid() pidfd_open(r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r6, 0x0) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r7, 0x0, r8, 0x0, 0x0, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r9, 0x0, r10, 0x0, 0x0, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002280)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000180)="401c2671e91d187f757d87d9f6854f2f764d2b72e24dd3bc6a2ca0c12129a48c4d1303a444159bab2ed80531cc588f5fcc2a787f44fb16700e388d993bcbdf3f248b6469aefc483cd9b960005e5067be00910dbc8123b40c1cfa33e2200124b00db91e72a8a73589b532796ec410fce3d7ee6d3c980b39b1330216e84dd586d2620eb7d86fcce4c58d5c4dd99f0d7771eba8c7bab3a37e34b0af75c108f49c248e738b67400526d6cf8d1459cc269701873dac05bfcac12b05758c0f5f45ababcb9de30cbd0fb14390b00fc3a45a436d20961d3f773af16b", 0xd8}, {&(0x7f0000000280)="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", 0xfd}, {&(0x7f0000000080)="3e1d8e85683ef2f6dcf9a17bd86c731079822d463b92776b62416243920d4cdd3b5f97fd28472d852b5788c3fc8164f2276fbb8876d13c5cf5ef98338af83fa8f0aea80f23af691116eee858ae9c3918d69ddeadef3c061a045e5c3f566ebb07beb6d9e1a41c8103ae250f195d7ee07a4fc54a8b48312712d161cf39155c18762e59a72b0d1e1acdda146d43438d691473b2", 0x92}, {&(0x7f0000000380)="ed081ed89acf8b646301e697f60b06d8861b44922b517747e8f0bcdf12a74dda4bf2f5bffb832fedd8fcaba6c6d6f7e09a93528e5cbcdb5f09c75497c5059c05c178a1d08dea846d0c5ee3e7f227512e6855367c695b9d9a5df9", 0x5a}], 0x4, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x78, 0x40}}, {{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000580)="bb7336e63e93e6efda29098a3e1e03bb7ff06e2b51cb7efed3ef5034054d219cfd0ac86191f6f6f998f3e1bb5e6f05e6e621429f22e6f18bc2bd3e94442b87397d2d", 0x42}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="2e1bdfeee89c4d8dace7cc03936b5f153cdc396aec5e233a3976101535ddf8847350f344da8d62543b021f3fc53ca9eb943ea6cf522c4c9744ac9ef454cea2ef41863e628678ae11435135c2c3ad57f0515b3ec02777a699c797015f316106024887362ecacd97fab70e32364f992253a96b22d160cd487e19fd340b6fb89f52663c9fd01adfe4c51000742f99485c12f1329238fb748482a124cda10c76a359989cb3ad280be355c103cddb674e4ebeec3c684ee5a0980d9274e8e038543ca64c0b4fe5725f8ac4a6d92f620385", 0xce}, {&(0x7f0000001700)="6b2ec1816cb7472e7c0c0aa2944b78b28551f0ed53b3b071a4f5f409907766dfe15c267bbffba82443419c4a53c31a4fc89207e1dd8cc0aa28f16cac9ef86abf2938344f105f12c11f503fdde0a25162c8", 0x51}, {&(0x7f0000001780)="cf372c30a14edaff4758bfe5d05508295fb17f1461fa06ae7273bbb55c01c20048d54f56f49248ae60d4f8f33428f51c65546815ae167be97cc38ce6a4eec51aed474899d3fa1b4075940e5c0048bcfb7272b4d0c40a0e178b523d72df8d29", 0x5f}, {&(0x7f0000001800)="5e7cffad1542ebe910d004debbc952b60866b857bfe78e18e0df909c11ba2c23255dd8a180ef52c3c5a050257983ce61ea8ee0a806df2e699c776f762dbb", 0x3e}, {&(0x7f0000001840)="4d61b4e2002f496f10675717b41068d6fbd74dd831ca36dc76014f3d5387e06746689436fe6fb9db8d98077761d1afa511c67a72abc7e2124f4f4a929a4d35d591dc7477a5b467162bd66c172ffa6238c066b67d3febf9c506be9aad3cc4c95bbc862370bc97956c8c33aee4a0d052c9aa1bab747ed5dcb7933d8887bd3d2f0d3f8b903aa10e066f93b968da65de86357dc954aeb1552e0314d32210926af30150e1b1a9e648910069200eda243e2780bfa9e930f838f9085e4f4422495ec7", 0xbf}, {&(0x7f0000001900)="04d04ac177e67b19aedf5511af820b1bf302e3e4db2b960e6764347863f95a9c7b1b6c3f7e693b1e51c48861c6ebbc5e38d2e1f5550c4dd77ff0461ac819f9c017f7a0028213089a41d7fa0426ccbd816d239a9f82afacb03872f698d679d67006e7208ddd270f093a4ab1d70a818c130aa1ada1c9527840463082442671a8dfa2e2c1fa86ce4eb89d2f33335ac74a79bcaccbe25bb3217abbdf77babf0811f0c9b903cc294b3135801b19f30bf8d7c990c605081048f1dd239c385381c36d9f10b505f53bbc99ef630447b8e654518128db8d6529553725c14ab7f29e305e6e36014daac0ee2d4c077220f17cb420a0", 0xf0}, {&(0x7f0000001a00)="899af4c8e0da6ea95b6a57210d84e87850f7dfd8b3586d82fadddb0fb1f7b242bd7d2c427cdcaf282a6006769d63a162b8ddcf5fbe0484ca88e178a87017649730cc650e2ae36cb1d0a95fbeb77978487503b10c95937a62b9cf99de03ce2f83f33ff5f395c305f03862a3cb6b96af0e84af52b48a6b02c4ada03d312e2fee76396dbcb8ab1af477d4", 0x89}], 0x9, &(0x7f0000001d40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x8000}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001d80)="ed476fc6acc7f94436ea4c393a4411dd261ff5262777c57b3efc251572cd8203bd55088a1c603b15abb1081d679fec98c1482d10e5ab56418dae60ddd0cb4c14f791bcf1a282ce96efbd89315a591afead283135861c0407aad8506908a7e872b1417e620151b8dcd92967868ae2d319f1fadaba0ea1", 0x76}, {&(0x7f0000001e00)="a0ba6dbebe6d7a94eab045611cef9f7a28a6fbd9ad49", 0x16}], 0x2, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001e80)="c6920074ee497db541228d01e4c8fd287569488684933e9f987f9de05dfeb2b02a9621f65d5ec4fd1b54eb8807c658672be646e9876261b8a987cb24abad7ce7656b0dad30ff115cde262ad7c99458a1712dcbd3b604b65644a912b531ac44d7f0ec71c4afeaa99ccfe783b4ab04223c4f5fcfef421693a0fc2ce3133742e32402cb0b16e53767e7044b13fdcfc0c093b5828387f9f911a17a806482ce9105599e8f7b79fdea9d6435a7f50e342cdfbf4c07cc9abeb77fe93e", 0xb9}, {&(0x7f0000001f40)="886b71aad27be8a387471cf916618bae63153072768d9060c3a920561659bf3ad7b6047638819516d66e261d37eb519d4477a6310b2260cf3272b9100466a0b9285ba14f6bf011e1ccfa5ab0d3be762173009c7e713f0b48eaf2fa8a4bd49df0bab362db2c4499cb7ac48931345c858d19c0a27d1bc046307b0cb179888756b035a8038a965ad4bc22f51f1a63c47c42f9a814d615f964011e9869b5f998f02abbf849aaf257afdcfe4d02f41c2902ea9c24546dd64caa4ed90156c515615773943cbf039b185a5428ebb6e1206e00870e92944490025a41d6cad447e159d081e5c8534b7bc73e006f01851c84fc7f", 0xef}, {&(0x7f0000002040)="09361e965d0a6f793fc90872983a285f8b75d4387db9e12e7e2cb138ee2bd9d5a4acefe4580ec37c6d4471dbdccaab892aa240f8904eb5cc333db7516f6aecdfd36c16241a565e047e0cc88e2cde4ca45577fc58375760ee645b92d2", 0x5c}], 0x3, &(0x7f0000002200)=[@rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, r6}}}, @rights={{0x20, 0x1, 0x1, [r8, r1, r9, r11]}}], 0x68, 0x4000}}], 0x4, 0x4000000) 02:17:28 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r0) ioctl$VT_DISALLOCATE(r2, 0x4b3a) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x12, 0x10, 0x96, &(0x7f00000003c0)="6a88d822459820da8f0c2a03ac9b0e294a381282dacda87f6edc8ab6397990c59d87d13d449c63ee395ca612863f78c0591e4a61212782f8749af4a9904b14a7d69b7e2ee8fd166b66aa46f9c600e8ec316d3f4ee184809985f5bc9a7dca3fe6e546cf8b8b86c9350b33850a4c4620df8f7047ddf62ae46b108b9284a68eadba3daa431401e64f010e9ba97d5d4c0ac4bf5e702ac583eda9471d6d5e410c6d485e5838adfcf6a3f43ffa3aeb1d98d33e7c209362782598301aca238bd9f6d59ff610e356a2c90d56393f03249106c0194f9884f41d0e4e7b9d149420b0139d9ec7275df17449ac5e02f7a56145c36fcdb2639f1d98013715f3947abe09c15476a5e5ffe76283f9c700365e487b7162694b9e8476fbf19640c4b693910cf33b21adeaf55ef4bbf07964f8b204898c5bf8d24cca3189e2246574c4f7d7f6b408ed60ecbd6d37eb13ae7d02c55664c86fb2b6db7b63b17020ee5a6973b9fadb77287c2c3b7429b313d38c3f5b1a3b345a6e5ab98da2582227f656d2fa7424fde4ab23a9ed2446843275694d0379f1bd0af4eaad92a4ef20db6ddbe401c047bdc0da6c62ac151badadf8ff2c9f262b2599d8c632ab286e50a870bd10d6839cf4346cb682e053cc5187a712f3b729fb9ed7554fbc7af06e99ea0a341f05a93e6f942f89372d1e9065d012cbdcb6448e32cefd6bef8298e6741f5bdd7c771673d02e5568c61732e516a92b51364354571a9b40bfc1d61b7345958a5e8a81f76b251f50affb2d22e5057fbca5b9258da806b30fe0707093969146a9c76ea56bbff8027bffec519e5adc284aa587ea01e87e884fb91a0315a3c8be471cba1840442598d93b8ffec1fcd14ab0fa856d20540804c2608eaf1641d13281b017f59493cbf9f7f62cf6d23fbb106052fde481b39cbe3eca6e0a0f4cc97da60f5ef694c40564e18f69db7aa2068c421721ddc8c130a9f147abb08e9a9c4633eebcc61cf06b0b7e1e95be36ae3886b3a3431a22c9bdd4c4ddfd60d67db1bd9732a4785eb8a858140092d17bd7be9bf8a5dd9c63f64834548ef961f3a27d0e1830383af750fb7a2d56a49c7f8e8a695e56176794af460fab75fc2990587d47c3f675c11d4a2cba9150a31779e4809cceca61ae13fd2c3e6fe833f04a3033801dd03adad6a146a57b363d61e5dd43ef48a06cd0ea2f2fc5b5df9e0aea9f92f11cdf2046f4c23df42d35b80265989d8fbf7e7a0294b2a68ee478c005fab292120f678e177a13902ab2ad56eda4d1324b977a621b7e21efc4cb44c05d80b4632084254ad5db35bc8a1e2a88db42fa5f77faa8d5b45a5c33b81abd0bcc8ceac2f5e7ab8bdbd7a33958261e8320da41ad6fd37249d701504ad96637ac371658d62edd869db73e20ae69f86eca21a75baf2727e5361d691bc39c42c29337c19cb22b76dca79ee320b622a0"}) [ 699.354486] FAULT_INJECTION: forcing a failure. [ 699.354486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.356289] CPU: 1 UID: 0 PID: 6557 Comm: syz-executor.5 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 699.356320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 699.356333] Call Trace: [ 699.356341] [ 699.356349] dump_stack_lvl+0xfa/0x120 [ 699.356390] should_fail_ex+0x4d7/0x5e0 [ 699.356419] _copy_to_user+0x32/0xd0 [ 699.356445] simple_read_from_buffer+0xe0/0x180 [ 699.356474] proc_fail_nth_read+0x18a/0x240 [ 699.356508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 699.356541] ? security_file_permission+0x22/0x90 [ 699.356570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 699.356602] vfs_read+0x1eb/0xc70 [ 699.356638] ? __pfx_vfs_read+0x10/0x10 [ 699.356668] ? lock_release+0xc8/0x290 [ 699.356701] ? __fget_files+0x20d/0x3b0 [ 699.356743] ksys_read+0x121/0x240 [ 699.356771] ? __pfx_ksys_read+0x10/0x10 [ 699.356803] ? fput+0x6a/0x100 [ 699.356846] do_syscall_64+0xbf/0x390 [ 699.356882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.356905] RIP: 0033:0x7eff61ad369c [ 699.356922] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 699.356943] RSP: 002b:00007eff5f096170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 699.356964] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007eff61ad369c [ 699.356978] RDX: 000000000000000f RSI: 00007eff5f0961e0 RDI: 0000000000000006 [ 699.356991] RBP: 00007eff5f0961d0 R08: 0000000000000000 R09: 0000000000000000 [ 699.357004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.357017] R13: 00007ffebada49ff R14: 00007eff5f096300 R15: 0000000000022000 [ 699.357053] [ 699.385853] FAULT_INJECTION: forcing a failure. [ 699.385853] name failslab, interval 1, probability 0, space 0, times 0 [ 699.386805] CPU: 0 UID: 0 PID: 6563 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 699.386822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 699.386831] Call Trace: [ 699.386837] [ 699.386843] dump_stack_lvl+0xfa/0x120 [ 699.386874] should_fail_ex+0x4d7/0x5e0 [ 699.386893] should_failslab+0xc2/0x120 [ 699.386913] __kvmalloc_node_noprof+0x111/0x7f0 [ 699.386929] ? trace_kmalloc+0x1f/0xb0 [ 699.386946] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 699.386960] ? alloc_fdtable+0x163/0x2d0 [ 699.386981] ? alloc_fdtable+0x163/0x2d0 [ 699.386993] alloc_fdtable+0x163/0x2d0 [ 699.387008] dup_fd+0x6ef/0xa80 [ 699.387028] copy_process+0x21b4/0x7400 [ 699.387041] ? __pfx_perf_trace_lock+0x10/0x10 [ 699.387069] ? __pfx_copy_process+0x10/0x10 [ 699.387081] ? __might_fault+0xe0/0x190 [ 699.387103] ? _copy_from_user+0x5b/0xd0 [ 699.387120] kernel_clone+0xea/0x7f0 [ 699.387135] ? __pfx_kernel_clone+0x10/0x10 [ 699.387154] ? ksys_write+0x121/0x240 [ 699.387171] ? lock_is_held_type+0x9e/0x120 [ 699.387196] __do_sys_clone3+0x1f2/0x270 [ 699.387209] ? __pfx___do_sys_clone3+0x10/0x10 [ 699.387232] ? __fget_files+0x20d/0x3b0 [ 699.387251] ? fput+0x6a/0x100 [ 699.387270] ? ksys_write+0x1a3/0x240 [ 699.387285] ? __pfx_ksys_write+0x10/0x10 [ 699.387300] ? do_user_addr_fault+0x43a/0x12b0 [ 699.387319] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 699.387337] do_syscall_64+0xbf/0x390 [ 699.387358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.387372] RIP: 0033:0x7f78baaddb19 [ 699.387381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 699.387393] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 699.387416] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 699.387427] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 699.387438] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 699.387448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 699.387458] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 699.387483] [ 699.418167] FAULT_INJECTION: forcing a failure. [ 699.418167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.419915] CPU: 0 UID: 0 PID: 6568 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 699.419932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 699.419940] Call Trace: [ 699.419944] [ 699.419949] dump_stack_lvl+0xfa/0x120 [ 699.419970] should_fail_ex+0x4d7/0x5e0 [ 699.419985] _copy_from_user+0x30/0xd0 [ 699.419998] copy_msghdr_from_user+0x88/0x150 [ 699.420019] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 699.420042] ? kfree+0x231/0x550 [ 699.420053] ? perf_trace_lock_acquire+0xc9/0x700 [ 699.420073] ___sys_recvmsg+0xbb/0x190 [ 699.420092] ? __pfx____sys_recvmsg+0x10/0x10 [ 699.420112] ? __pfx_perf_trace_lock+0x10/0x10 [ 699.420129] ? lock_acquire+0x15e/0x2f0 [ 699.420145] ? __might_fault+0xe0/0x190 [ 699.420161] ? find_held_lock+0x2b/0x80 [ 699.420184] ? __might_fault+0x138/0x190 [ 699.420208] do_recvmmsg+0x2c5/0x6f0 [ 699.420231] ? __pfx_do_recvmmsg+0x10/0x10 [ 699.420248] ? ksys_write+0x187/0x240 [ 699.420263] ? lock_release+0xc8/0x290 [ 699.420280] ? __mutex_unlock_slowpath+0x157/0x750 [ 699.420298] ? kernel_write+0x5e3/0x660 [ 699.420320] ? __fget_files+0x20d/0x3b0 [ 699.420340] __x64_sys_recvmmsg+0x211/0x260 [ 699.420359] ? ksys_write+0x1a3/0x240 [ 699.420375] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 699.420394] ? do_user_addr_fault+0x43a/0x12b0 [ 699.420410] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 699.420428] do_syscall_64+0xbf/0x390 [ 699.420447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.420459] RIP: 0033:0x7ff705a3db19 [ 699.420468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 699.420479] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 699.420491] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 699.420499] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 699.420507] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 699.420514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 699.420521] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 699.420540] 02:17:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b45) 02:17:28 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 17) 02:17:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)="12", 0x1, 0x99ad) 02:17:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5416) 02:17:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 63) 02:17:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)="13", 0x1, 0x99ad) 02:17:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x2) [ 699.691574] FAULT_INJECTION: forcing a failure. [ 699.691574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.692623] CPU: 0 UID: 0 PID: 6591 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 699.692640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 699.692648] Call Trace: [ 699.692653] [ 699.692657] dump_stack_lvl+0xfa/0x120 [ 699.692683] should_fail_ex+0x4d7/0x5e0 [ 699.692698] _copy_from_user+0x30/0xd0 [ 699.692712] copy_msghdr_from_user+0x88/0x150 [ 699.692733] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 699.692755] ? kfree+0x231/0x550 [ 699.692767] ? perf_trace_lock_acquire+0xc9/0x700 [ 699.692787] ___sys_recvmsg+0xbb/0x190 [ 699.692805] ? __pfx____sys_recvmsg+0x10/0x10 [ 699.692823] ? __fget_files+0x34/0x3b0 [ 699.692842] ? lock_acquire+0x15e/0x2f0 [ 699.692856] ? __might_fault+0xe0/0x190 [ 699.692872] ? find_held_lock+0x2b/0x80 [ 699.692890] ? __might_fault+0x138/0x190 [ 699.692912] do_recvmmsg+0x2c5/0x6f0 [ 699.692933] ? __pfx_do_recvmmsg+0x10/0x10 [ 699.692949] ? ksys_write+0x187/0x240 [ 699.692965] ? lock_release+0xc8/0x290 [ 699.692981] ? __mutex_unlock_slowpath+0x157/0x750 [ 699.692999] ? kernel_write+0x5e3/0x660 [ 699.693019] ? __fget_files+0x20d/0x3b0 [ 699.693038] __x64_sys_recvmmsg+0x211/0x260 [ 699.693057] ? ksys_write+0x1a3/0x240 [ 699.693071] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 699.693090] ? do_user_addr_fault+0x43a/0x12b0 [ 699.693107] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 699.693124] do_syscall_64+0xbf/0x390 [ 699.693146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.693158] RIP: 0033:0x7ff705a3db19 [ 699.693167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 699.693184] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 699.693195] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 699.693204] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 699.693211] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 699.693219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 699.693226] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 699.693243] 02:17:38 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 18) 02:17:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5418) 02:17:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b2f) 02:17:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 64) 02:17:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x111001, 0x1) recvmsg$unix(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000015c0)=""/157, 0x9d}, {&(0x7f0000001680)=""/114, 0x72}], 0x2, &(0x7f0000001740)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0}, 0x40010100) r2 = syz_open_procfs(0x0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) r4 = getpid() pidfd_open(r4, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r5, 0x0, r6, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001500)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="e382c2be16bdeaad4cb881f030f217bab800c07bef5771a79c43a140cf8f5688939ece0e4feace5e50", 0x29}], 0x1, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x20}}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f00000002c0)="a8d9cfc8e6cd5743a8da00a977e4bb9f86dc983eb2b843ed03dcfd6bc651ad83b713df32755b1c6eb41e4cafa06d8003c703aecf151f7a38f1746833000be10e331cde092bdd058c19fb2068a29492ed67af97e1e9a0935d0918ef6de6f9869291a865f33b3279b35a457dbe0ac062331f34fc6ba6a06f0540a3156e95bcff782d8902e00512dfcd82206a2029b6a2f66bd1ef559a488d59c5d6e90c77815bd3883f709cd5a6a1a7f77d13a4588111ab9d2dc42b00caccaf115067874e5db77a9693be9d5450228a552f3eff6900aadbd95e61188dbb3a7c549fc61dabd32541b9e0846ba0da7cd5f2", 0xe9}, {&(0x7f00000003c0)="fe79f4c4c97848c1b7af8fed30833efbdc4ba448a638f2f8cf32400958cfd1784ccda5e8f867c16d50aa2dbc019f995917117be506073043cb5c0029c57c95f826d9a59b03dd6e79edaf26f267890fa5c57ae268614a20647d17f68fa5f1d62f07fbf64c9a24d7eea5a1d8", 0x6b}, {&(0x7f0000000440)="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", 0x1000}], 0x3, &(0x7f0000001480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, r6]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x48, 0x400c0}}], 0x2, 0x20004000) getsockname(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000001880)) 02:17:38 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r4, r4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)) r5 = syz_open_dev$evdev(&(0x7f0000001440), 0xdbfc, 0x240080) r6 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r6, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001840)) io_submit(0x0, 0x8, &(0x7f0000001780)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x2, r2, &(0x7f00000003c0)="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", 0x1000, 0x8, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f00000000c0)="4d64e8faddfa8f48ec778c8e98ea6cdc255e4288f8140f601447880707da710e021bde7c6f8bcd479550187cd1317e238c8e", 0x32, 0x0, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xfffb, 0xffffffffffffffff, &(0x7f0000000200)="52fce4a9b8c2518ad92eb7a1761d78efcb60e05969617afcc10fa48d2329eb8a650bc0eed0be", 0x26, 0x40, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)="2d84d18929ce340ed86a238d8ce5", 0xe, 0x8000, 0x0, 0x0, r3}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="2ec01f00e763194e7c9b274717c50a851b", 0x11, 0xfffffffffffffff7, 0x0, 0x0, r4}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0xff62, r5, &(0x7f0000001480)="69aac7abbd3588a41c39155b588d956f1aed2436732b95a981d188d0030f793be2c09277c1e7474199998c48b8adf7217de6f377165766267420fa59b1fc7eff2220315bbbee715edbdc3e1033f6652feec3df4c3848bd2dfa403ac23fc5f42fc617fecacba7eb436847b2703defe6017e3abd75d0f05be4595c382219b1f240c1a010a6e75c538f855e252750510fd724802e73f46e212f8f0db11477386ae357a225b42eedf9de7450d98ee657f5f2b9bf8644c5de82a190d5d2e0b5cb1954ac4469218f53f7c35cedf1e6789a351590fed4fed6d3f3451fb121e4a6aca4c0cbe1608b1e02e35421ce2a2632ecec411c032a2186a0d00a8c", 0xf9, 0x200, 0x0, 0x2, r6}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f00000015c0)="7c7773cfc89671e1bf285ef9e6704d63b9e13a7bd6a12906247c24363900b1bc8dc08f84b266dde4530c61c830cd360101f199e000b3e148fb40b75c348af7011b54f1c19c297ea7b8a80a568ce3e7c964371d5911e95af68ff5a386230c7cb74fd8d141fe745f0a3e270295693d4c81abe5ba0dded7", 0x76, 0x9, 0x0, 0x2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x3, 0xfffd, r3, &(0x7f0000001680)="a608b11b899e35a5e1406089d36317e950577adfbd21fc32fc1c612b15ea58b93e509bc7fc22fb6f0a019dc992d8fcb540921d241e4d8f0cfea62bf9360f8185d13ad1475d213ad08437f413efef987c80d9c020bbe2ddfd3395fa57b3e54e0756dd380632340d2bdcc77dfeda307ee3dfa7ca269dace2c41b24f4ca34f7e086294361905144e25272f21f69", 0x8c, 0x40, 0x0, 0x3, r3}]) pidfd_getfd(r3, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, r1, 0x0, r3, 0x0) r7 = dup(r0) ioctl$VT_DISALLOCATE(r7, 0x4b3a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) pidfd_open(r8, 0x0) 02:17:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x2, 0x99ad) 02:17:38 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 708.968035] FAULT_INJECTION: forcing a failure. [ 708.968035] name failslab, interval 1, probability 0, space 0, times 0 [ 708.969825] CPU: 1 UID: 0 PID: 6616 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 708.969855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 708.969869] Call Trace: [ 708.969876] [ 708.969884] dump_stack_lvl+0xfa/0x120 [ 708.969927] should_fail_ex+0x4d7/0x5e0 [ 708.969956] ? copy_fs_struct+0x49/0x350 [ 708.969991] should_failslab+0xc2/0x120 [ 708.970023] kmem_cache_alloc_noprof+0x72/0x680 [ 708.970058] ? copy_fs_struct+0x49/0x350 [ 708.970088] copy_fs_struct+0x49/0x350 [ 708.970122] copy_process+0x302c/0x7400 [ 708.970145] ? __pfx__kstrtoull+0x10/0x10 [ 708.970197] ? __pfx_copy_process+0x10/0x10 [ 708.970220] ? __might_fault+0xe0/0x190 [ 708.970255] ? _copy_from_user+0x5b/0xd0 [ 708.970283] kernel_clone+0xea/0x7f0 [ 708.970306] ? lock_release+0xc8/0x290 [ 708.970333] ? __pfx_kernel_clone+0x10/0x10 [ 708.970366] ? ksys_write+0x121/0x240 [ 708.970394] ? lock_is_held_type+0x9e/0x120 [ 708.970430] __do_sys_clone3+0x1f2/0x270 [ 708.970453] ? __pfx___do_sys_clone3+0x10/0x10 [ 708.970504] ? fput+0x6a/0x100 [ 708.970537] ? ksys_write+0x1a3/0x240 [ 708.970563] ? xfd_validate_state+0x55/0x180 [ 708.970594] ? __pfx_ksys_write+0x10/0x10 [ 708.970633] do_syscall_64+0xbf/0x390 [ 708.970669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.970691] RIP: 0033:0x7f78baaddb19 [ 708.970708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 708.970729] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 708.970750] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 708.970765] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 708.970779] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 708.970792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.970805] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 708.970836] [ 708.981790] FAULT_INJECTION: forcing a failure. [ 708.981790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.991481] CPU: 0 UID: 0 PID: 6621 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 708.991500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 708.991508] Call Trace: [ 708.991519] [ 708.991524] dump_stack_lvl+0xfa/0x120 [ 708.991550] should_fail_ex+0x4d7/0x5e0 [ 708.991566] _copy_from_user+0x30/0xd0 [ 708.991581] copy_msghdr_from_user+0x88/0x150 [ 708.991602] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 708.991623] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 708.991638] ? kfree+0x231/0x550 [ 708.991651] ? perf_trace_lock_acquire+0xc9/0x700 [ 708.991673] ___sys_recvmsg+0xbb/0x190 [ 708.991691] ? __pfx____sys_recvmsg+0x10/0x10 [ 708.991715] ? lock_acquire+0x15e/0x2f0 [ 708.991729] ? __might_fault+0xe0/0x190 [ 708.991747] ? find_held_lock+0x2b/0x80 [ 708.991765] ? __might_fault+0x138/0x190 [ 708.991788] do_recvmmsg+0x2c5/0x6f0 [ 708.991809] ? __pfx_do_recvmmsg+0x10/0x10 [ 708.991826] ? ksys_write+0x187/0x240 [ 708.991843] ? lock_release+0xc8/0x290 [ 708.991860] ? __mutex_unlock_slowpath+0x157/0x750 [ 708.991878] ? kernel_write+0x5e3/0x660 [ 708.991898] ? __fget_files+0x20d/0x3b0 [ 708.991919] __x64_sys_recvmmsg+0x211/0x260 [ 708.991937] ? ksys_write+0x1a3/0x240 [ 708.991954] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 708.991973] ? do_user_addr_fault+0x43a/0x12b0 [ 708.991991] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 708.992007] do_syscall_64+0xbf/0x390 [ 708.992027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.992040] RIP: 0033:0x7ff705a3db19 [ 708.992050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 708.992062] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 708.992075] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 708.992083] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 708.992091] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 708.992099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.992106] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 708.992124] 02:17:38 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 19) [ 709.066781] FAULT_INJECTION: forcing a failure. [ 709.066781] name failslab, interval 1, probability 0, space 0, times 0 [ 709.067748] CPU: 0 UID: 0 PID: 6627 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) 02:17:38 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 709.067764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 709.067772] Call Trace: [ 709.067776] [ 709.067781] dump_stack_lvl+0xfa/0x120 [ 709.067804] should_fail_ex+0x4d7/0x5e0 [ 709.067820] should_failslab+0xc2/0x120 [ 709.067838] __kvmalloc_node_noprof+0x111/0x7f0 [ 709.067854] ? trace_kmalloc+0x1f/0xb0 [ 709.067871] ? __kmalloc_cache_noprof+0x26d/0x6a0 [ 709.067884] ? alloc_fdtable+0x163/0x2d0 [ 709.067902] ? alloc_fdtable+0x163/0x2d0 [ 709.067915] alloc_fdtable+0x163/0x2d0 [ 709.067929] dup_fd+0x6ef/0xa80 [ 709.067949] copy_process+0x21b4/0x7400 [ 709.067963] ? __pfx_perf_trace_lock+0x10/0x10 [ 709.067990] ? __pfx_copy_process+0x10/0x10 [ 709.068002] ? __might_fault+0xe0/0x190 [ 709.068022] ? _copy_from_user+0x5b/0xd0 [ 709.068040] kernel_clone+0xea/0x7f0 [ 709.068054] ? __pfx_kernel_clone+0x10/0x10 [ 709.068073] ? ksys_write+0x121/0x240 [ 709.068090] ? lock_is_held_type+0x9e/0x120 [ 709.068115] __do_sys_clone3+0x1f2/0x270 [ 709.068129] ? __pfx___do_sys_clone3+0x10/0x10 [ 709.068152] ? __fget_files+0x20d/0x3b0 [ 709.068172] ? fput+0x6a/0x100 [ 709.068195] ? ksys_write+0x1a3/0x240 [ 709.068210] ? __pfx_ksys_write+0x10/0x10 [ 709.068227] ? do_user_addr_fault+0x43a/0x12b0 [ 709.068243] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 709.068262] do_syscall_64+0xbf/0x390 [ 709.068285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.068298] RIP: 0033:0x7f78baaddb19 [ 709.068308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 709.068321] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 709.068333] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 709.068342] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 709.068349] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.068357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 709.068364] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 709.068383] 02:17:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b30) 02:17:38 executing program 6: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) ioprio_get$uid(0x3, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$VT_DISALLOCATE(r2, 0x4b3a) 02:17:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 65) 02:17:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x3, 0x99ad) 02:17:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x541b) [ 709.158149] FAULT_INJECTION: forcing a failure. [ 709.158149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.159107] CPU: 0 UID: 0 PID: 6632 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 709.159123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 709.159131] Call Trace: [ 709.159136] [ 709.159141] dump_stack_lvl+0xfa/0x120 [ 709.159165] should_fail_ex+0x4d7/0x5e0 [ 709.159184] _copy_from_user+0x30/0xd0 [ 709.159199] copy_msghdr_from_user+0x88/0x150 [ 709.159220] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 709.159242] ? kfree+0x231/0x550 [ 709.159254] ? perf_trace_lock_acquire+0xc9/0x700 [ 709.159275] ___sys_recvmsg+0xbb/0x190 [ 709.159293] ? __pfx____sys_recvmsg+0x10/0x10 [ 709.159313] ? __pfx_perf_trace_lock+0x10/0x10 [ 709.159331] ? lock_acquire+0x15e/0x2f0 [ 709.159345] ? __might_fault+0xe0/0x190 02:17:38 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 20) [ 709.159361] ? find_held_lock+0x2b/0x80 [ 709.159379] ? __might_fault+0x138/0x190 [ 709.159403] do_recvmmsg+0x2c5/0x6f0 [ 709.159425] ? __pfx_do_recvmmsg+0x10/0x10 [ 709.159441] ? ksys_write+0x187/0x240 [ 709.159457] ? lock_release+0xc8/0x290 [ 709.159474] ? __mutex_unlock_slowpath+0x157/0x750 [ 709.159491] ? kernel_write+0x5e3/0x660 [ 709.159521] ? __fget_files+0x20d/0x3b0 [ 709.159543] __x64_sys_recvmmsg+0x211/0x260 [ 709.159562] ? ksys_write+0x1a3/0x240 [ 709.159577] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 709.159596] ? do_user_addr_fault+0x43a/0x12b0 [ 709.159613] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 709.159631] do_syscall_64+0xbf/0x390 [ 709.159652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.159664] RIP: 0033:0x7ff705a3db19 [ 709.159673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 709.159684] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 709.159696] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 709.159705] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 709.159712] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.159720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 709.159727] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 709.159747] 02:17:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 66) 02:17:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b31) 02:17:48 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:48 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 21) 02:17:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x4, 0x99ad) 02:17:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x541c) 02:17:48 executing program 0: r0 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="09000020dfd62aa98e71eb8c5517a73f826ff872b50b625fffa4985794d991994435e68425cb97fc5cda8ed3e068917bc661768f445514d5c29d6d0c9fbea854c6298d3cdfe1a5cb1051c4f2236633f2332bba548a82af0874a9a81c7f94ab67d7e6c27dcaeb8dfbe2403e", @ANYRES16=0x0, @ANYBLOB="000328bd7000fbdbdf250600000060000280080001000500000008000200a22100001400038008000200040000000800020039f40000040004002c000380080002000000000008000200ff0f000008000200000400000800010009000000080002000010000008000200dc00000004000280"], 0x78}, 0x1, 0x0, 0x0, 0x814}, 0x4) fstatfs(r0, &(0x7f0000000000)=""/252) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r2, 0x0, r3, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r2, 0x2}], 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000400)={[0x6]}, 0x8) recvmmsg$unix(r1, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:17:48 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) r2 = open(&(0x7f0000000100)='./file0\x00', 0x400, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x28, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x39, 0x36, 0x66, 0x66, 0x66, 0x30], 0x2d, [0x36, 0x38, 0x66, 0x32], 0x2d, [0x61, 0x39, 0x39, 0x30], 0x2d, [0x39, 0x66, 0x36, 0x5a], 0x2d, [0x61, 0x65, 0x35, 0x33, 0x37, 0x63, 0x0, 0x36]}}}, {@fsname={'fsname', 0x3d, '.'}}, {@uid_gt}, {@appraise_type}]}}) [ 719.301112] FAULT_INJECTION: forcing a failure. [ 719.301112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.303050] CPU: 1 UID: 0 PID: 6661 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 719.303081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 719.303096] Call Trace: [ 719.303104] [ 719.303113] dump_stack_lvl+0xfa/0x120 [ 719.303156] should_fail_ex+0x4d7/0x5e0 [ 719.303192] _copy_from_user+0x30/0xd0 [ 719.303218] copy_msghdr_from_user+0x88/0x150 [ 719.303257] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 719.303300] ? kfree+0x231/0x550 [ 719.303323] ? perf_trace_lock_acquire+0xc9/0x700 [ 719.303360] ___sys_recvmsg+0xbb/0x190 [ 719.303395] ? __pfx____sys_recvmsg+0x10/0x10 [ 719.303432] ? __fget_files+0x34/0x3b0 [ 719.303466] ? lock_acquire+0x15e/0x2f0 [ 719.303493] ? __might_fault+0xe0/0x190 [ 719.303526] ? find_held_lock+0x2b/0x80 [ 719.303560] ? __might_fault+0x138/0x190 [ 719.303604] do_recvmmsg+0x2c5/0x6f0 [ 719.303660] ? __pfx_do_recvmmsg+0x10/0x10 [ 719.303692] ? ksys_write+0x187/0x240 [ 719.303723] ? lock_release+0xc8/0x290 [ 719.303755] ? __mutex_unlock_slowpath+0x157/0x750 [ 719.303788] ? kernel_write+0x5e3/0x660 [ 719.303827] ? __fget_files+0x20d/0x3b0 [ 719.303865] __x64_sys_recvmmsg+0x211/0x260 [ 719.303902] ? ksys_write+0x1a3/0x240 [ 719.303931] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 719.303968] ? do_user_addr_fault+0x43a/0x12b0 [ 719.304000] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 719.304032] do_syscall_64+0xbf/0x390 [ 719.304070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.304094] RIP: 0033:0x7ff705a3db19 [ 719.304112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 719.304135] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 719.304158] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 719.304174] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 719.304188] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 719.304202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 719.304216] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 719.304250] 02:17:48 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="9908ab2286b70bd7ad79fadf621bb29175d3cbe8061d7c04e8094fcf1d66f53019ae90a0d97c9b0f64da794493fad697da7d5fedb0ab24f5e6c8724a5a5b0524b0eae8d56a9e04194286e8fbcb55f5d0b3f895434d08ddfefdf75e03e8d64b08a0ecae5c5dcc5f84deddbc8e1a9cf9e941cb95f32e9695a59b202f03b19f355d56b9626d5a7543e8b8e60d8a06eaf565d35f9e6f0af25a9b0d5c7595dce56dd8ec210fcad061c0186e08408f99d205752f03e48a97912173448cb1e0b1784eaa764455b09162f3b619df0966d7de9bd74b5295abe15de5ce6678f97fb3a7a359c0dd2aab53378b2b6209a44a605be5330063ad9500a73ac6628b", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:48 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:17:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x541d) 02:17:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b32) 02:17:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x5, 0x99ad) 02:17:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 67) 02:17:48 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 22) 02:17:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x541e) 02:17:48 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) [ 719.590159] FAULT_INJECTION: forcing a failure. [ 719.590159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.591581] CPU: 0 UID: 0 PID: 6693 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 719.591599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 719.591607] Call Trace: [ 719.591611] [ 719.591615] dump_stack_lvl+0xfa/0x120 [ 719.591654] should_fail_ex+0x4d7/0x5e0 [ 719.591674] _copy_from_user+0x30/0xd0 [ 719.591693] copy_msghdr_from_user+0x88/0x150 [ 719.591719] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 719.591744] ? kfree+0x231/0x550 [ 719.591757] ? perf_trace_lock_acquire+0xc9/0x700 [ 719.591777] ___sys_recvmsg+0xbb/0x190 [ 719.591795] ? __pfx____sys_recvmsg+0x10/0x10 [ 719.591814] ? __fget_files+0x34/0x3b0 [ 719.591832] ? lock_acquire+0x15e/0x2f0 [ 719.591846] ? __might_fault+0xe0/0x190 [ 719.591863] ? find_held_lock+0x2b/0x80 [ 719.591881] ? __might_fault+0x138/0x190 [ 719.591903] do_recvmmsg+0x2c5/0x6f0 [ 719.591924] ? __pfx_do_recvmmsg+0x10/0x10 [ 719.591941] ? ksys_write+0x187/0x240 [ 719.591957] ? lock_release+0xc8/0x290 [ 719.591973] ? __mutex_unlock_slowpath+0x157/0x750 [ 719.591996] ? kernel_write+0x5e3/0x660 [ 719.592017] ? __fget_files+0x20d/0x3b0 [ 719.592035] __x64_sys_recvmmsg+0x211/0x260 [ 719.592054] ? ksys_write+0x1a3/0x240 [ 719.592069] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 719.592088] ? do_user_addr_fault+0x43a/0x12b0 [ 719.592104] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 719.592122] do_syscall_64+0xbf/0x390 [ 719.592143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.592156] RIP: 0033:0x7ff705a3db19 [ 719.592166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 719.592178] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 719.592190] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 719.592198] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 719.592205] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 719.592213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 719.592221] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 719.592238] 02:17:48 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0xda65708ae09ae20c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r2, 0x0, r3, 0x0, 0x0, 0x0) pwritev2(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="14efbce53e93976944a845c992ba78a850f9c7388e27a844882ac415df7751bcbf3f12ce7047031e2f64c2acf3dd67049044f9dae137fba2c19c0c7db6869549cbca25b4a1", 0x45}, {&(0x7f0000000080)="ed9bebba0726926668134f4b724bc3dc51563044ec1324c002add52958947eb9fc54fe7a7652ab37470370db73853e9a262c63b9980f09b4d82c4564463e8548207fa10c9ea724b435be898d92ec438703ef94282be65391c6e1fac7475a452c941b9e2bc45665c4", 0x68}, {&(0x7f0000000100)="409418600460c02e61cd28c142feea5b67dfc6f2d1e743b91a034bfca9dfb23d3aa3d7777b5275fdef832f1e03878604e43978acf62aebc292a42a731ac186e9e7c220576252cc59c9227380d73897255762471e77b28242a9544cbf211736c8159e0168bc3e516a21d0e18f94ed629675b554a68bfe46ca2ad9b4252f9ef0f9cc9c645290041250b39cb726f6bdfaee462a3449bd0e0b35499df1e4bf8682ff07348bae3fc6cad686ae55c2", 0xac}, {&(0x7f00000001c0)="6ed42ff68592c0fa0340a3def19a4d962e97dea99fd2c14cbccc242ae85db6d7d555394cab178f470b7ca7cd3da4ede4fbe7c6330fa12164529c781390399bf8c6656c0f7f021d25727a5e80a60ee9b04a2327e83f0ce3e6efce2fa611006d9935ae747c3cfcb694de03e7dd1989807d55a5056334aaf41b9f4fb4d252b99d5bde30e5178ae3dde74490038d9459e7826b5e30b76027c3fc3293d05becef648431d4a75914bd3b80eb2bfa88b0fd68fb18d5876854940f87e3e056f82029e8135482322e905b8205c1da3fd30911ef642472a1b58c37b148e8c37fce", 0xdc}, {&(0x7f00000003c0)="3700f13621d730209909c54c6ca52809a42bd295b5d689ae19d0e95b2a37f8ae42673e9bcbf4f3e70c93694027fe121d1515fdfcd73a0dbd840fe3b7f49ab0da5f649edee2c7ce3784f9b0aa8c2f78a2afb1b68d34ef6cb39bc5c2023c16096f12999ceb909bfc3d0c1f5ac30b79f84ceb4438b030ecd0594d6a5f8d8340a8bcbfdaa3b7a6a23c61e16165", 0x8b}], 0x5, 0x100, 0x1, 0x0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:17:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x541e) 02:17:58 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 23) 02:17:58 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b33) 02:17:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x6, 0x99ad) 02:17:58 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r0) ioctl$VT_DISALLOCATE(r2, 0x4b3a) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x9, 0x8000}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = getuid() recvmmsg$unix(r2, &(0x7f0000007000)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000140)=""/168, 0xa8}, {&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000000240)=""/168, 0xa8}, {&(0x7f0000000300)=""/19, 0x13}], 0x4, &(0x7f00000017c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001800), 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000001880)=""/149, 0x95}, {&(0x7f0000001940)=""/42, 0x2a}, {&(0x7f0000001980)=""/148, 0x94}, {&(0x7f0000001a40)=""/57, 0x39}, {&(0x7f0000001a80)=""/215, 0xd7}, {&(0x7f0000001b80)=""/127, 0x7f}, {&(0x7f0000001c00)=""/192, 0xc0}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000002d40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002dc0), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002e40)=""/76, 0x4c}, {&(0x7f0000002ec0)=""/120, 0x78}], 0x2}}, {{&(0x7f0000002f80)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/62, 0x3e}, {&(0x7f0000004040)=""/37, 0x25}, {&(0x7f0000004080)=""/246, 0xf6}, {&(0x7f0000004180)=""/105, 0x69}, {&(0x7f0000004200)=""/153, 0x99}], 0x6, &(0x7f0000004340)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000004400)=@abs, 0x6e, &(0x7f0000005740)=[{&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/120, 0x78}, {&(0x7f0000005500)=""/173, 0xad}, {&(0x7f00000055c0)}, {&(0x7f0000005600)=""/63, 0x3f}, {&(0x7f0000005640)=""/146, 0x92}, {&(0x7f0000005700)=""/61, 0x3d}], 0x7, &(0x7f00000057c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000006a00)=[{&(0x7f00000058c0)=""/171, 0xab}, {&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/76, 0x4c}], 0x3, &(0x7f0000006a40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000006ac0)=@abs, 0x6e, &(0x7f0000006e80)=[{&(0x7f0000006b40)=""/51, 0x33}, {&(0x7f0000006b80)=""/209, 0xd1}, {&(0x7f0000006c80)=""/223, 0xdf}, {&(0x7f0000006d80)=""/58, 0x3a}, {&(0x7f0000006dc0)=""/103, 0x67}, {&(0x7f0000006e40)=""/15, 0xf}], 0x6, &(0x7f0000006f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x7, 0x2000, &(0x7f00000071c0)={0x0, 0x3938700}) r5 = dup3(r2, r2, 0x80000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r6, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000008840), 0x400, 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r8, 0x0, r9, 0x0, 0x0, 0x0) r10 = dup2(r2, r2) r11 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r11, r11, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000000180)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000088c0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000008800)=[{&(0x7f00000003c0)={0x13bc, 0x37, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x96, 0x5a, 0x0, 0x1, [@typed={0x14, 0x43, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @typed={0x8, 0x94, 0x0, 0x0, @fd}, @generic="2d2be63131fab7d317779a1f9dbd097b58ecbfa7409b6f1ccd3d4ca6080f1ad7048f235d55de6047571cfa267734c9993ea1d55b4eef8060f12b5b13a8172992b27e7e648de4543696eca9b69f6375940c63decd3a771a1efa81fc4e51a5890b073c1e2805827a4baeee7139d3ffb3dcca21", @typed={0x4, 0x85}]}, @nested={0x173, 0x63, 0x0, 0x1, [@generic="4b6dda104597ce173e84bf6cf6184b0e44d9cc7fb042e2234c8caf969283884aa3a181624d98a398b24d556c2ed624d7681f073185a5521f662020e3900e3244c224d69f605812402247fd62079b68d7597a607d3c451b15bd78324e4e26783112e1ad598a29c19a091651921d3e183a989cddd132b374301d51908c6dc82ff994cfaea21b593fc14856321af27816bf6629f9c63b25dad383a2b0a6a303c996f9126284f1b1e8a4a8119c724b6cb1b0ebee5330997cab74e2a8fb", @typed={0x98, 0x81, 0x0, 0x0, @binary="1fa60e2d8407b328a5bd239261738ab8e839d819f7eef28174f575babfbf30ee854b86f4e7533a1cfec1df3872b7d95d46b2b9b06a21f430c14ccd903414870dc4a9503d2f2a167b28c9bd9ef06c7ddf835d8e000633bd8a331dbdd28fd7a21a861188ff95427dd138b75701eaea8d2e56bce10dd16b621408f59e1bc87be1baa33aa7999debbad88e96aa3be0318661f4524152"}, @typed={0x8, 0x10, 0x0, 0x0, @uid=0xee00}, @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="d9ab4256994b37b10a5038dc0491c96e525656253541f11bf82d631927dc2f0eecc9fd340ab071a9fa1527f5291ba04647a0f229f03be26abd6890a81f51d981ca2469fc4b68079af0a3f53c2210603d383ad17567361da94d22c5bca3fdaae23aa10efad4b57725bf00fe0d5878849817149d9036dd68801b5e8703b53d62b494c0a65abe37de15c412381dc274cb4bf4c1f9db435a95faf3ce", @generic="352c9b6b2ae398fd7ede8b4e58d94796", @nested={0x10f4, 0x2c, 0x0, 0x1, [@typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @typed={0x8, 0x74, 0x0, 0x0, @uid=r3}, @generic="c4e5b4bf386a5adb00fd85eb66f979d523fe5c6d2b2a8ee5ecf926656b45f5b1e545d4810e9170e20e3ac2994a3f2bcaa877ba2fc7bf3d95fb00db302ac76596796c32a3f9b66004", @generic="5a6c5308dfbbac3dffbfd072463ad6d7742b70093afc4042ce00a8d5a22945fd230b343e54864edcf57563209d8a0bd1b27b9678fb1acc9a50102263e12be69cc4e6081475919c845c1a288897f81fbbfd754900b945a2d250b3eccd0f72f2096dfb3140358903b986b9a617c21a51197ad422b356188152881902a7f6324a33c78e0ef5e2ccd2d6", @typed={0x1004, 0x75, 0x0, 0x0, @binary="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"}]}]}, 0x13bc}, {&(0x7f0000007200)={0x1458, 0x40, 0x4, 0x70bd2d, 0x25dfdbff, "", [@nested={0x202, 0x69, 0x0, 0x1, [@generic="bf149d6cc6138edf736b8a47d0e2047ed46b3a73739af5c934eb13849e3700e997e685010c39bab1fab9b862577a2d2eff54c4c103a0c82df4827a05aa299ab6a7fe7d700408eddd724a49330ff43f1b1818c9c7981e0a33241470a46cbfd3cca5492b3b4f54e41f0cf6f06ef9ef67ea9cb1704939e5ded44117991fd38fb9f6b6c30bf7ab9d7dd90e508369ae0bee3539b66531b6c29827f70d380aadb20f", @generic="01d7e466469f155085bfdb7233d8dd7eee3f58c6afd9fc4f7e86a3f360b0a29307d5ad642343b7a1739662c4ec54695d23f4a8", @typed={0x8, 0x29, 0x0, 0x0, @u32=0x1}, @typed={0x4, 0x89}, @typed={0x4, 0x72}, @typed={0xc, 0x4e, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="1554dbb8f2002fbddf3584be46711af1b65678f1d8715d9cef68b5f8688931ccc141b8d1a5f6b6fc827da7c0aa085a68e778cb6e47b217d35afbd233014202d0eab16e5f77d6954e140869884d906da442cb84383ceff25cb513e893f877b74025fa87a2b0a76c5a0a98bedf9c0007e42fd9512d4aed7cc021cc58c0b6de010202a4d5cedbe3d26b9e08e9ce225f89347af1be9868bb1f21fe11c3b080027027bf8b4f6cf4ce920032e89e73f14f0e10d0fc728d43ed7eb202d4a90f363594d68ed991cfeae09fc933b3f3207b51904039ee2e79fc4e374a13ee512535e37e9e241ea8f6eff270b4a11d5267433eec75b96c9814", @typed={0x8, 0x19, 0x0, 0x0, @u32}]}, @nested={0x100c, 0x3d, 0x0, 0x1, [@generic="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", @typed={0x7, 0xb, 0x0, 0x0, @str='\\@\x00'}]}, @typed={0x8, 0x54, 0x0, 0x0, @uid=r4}, @nested={0x5f, 0x50, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @fd=r5}, @generic="e7f4b50287d8f77f257b65075927afae647937186d8db273a0886d5e3bb7dc783d77110b13e1e21c5694e08ea19295c6a9d5b3d31f376182ed0264617da567090a96ca05a5d13f42878f36a69d599cc7287014"]}, @nested={0x1c8, 0x86, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @uid=r6}, @generic="9f809b8650a6e12fefbf61da512cc9ffcf219561dfdfd57a9a9566e43a566cde64ea6d96fc17d4b5e9307a14bd370d8ae9c028a746c97eb850a8d7ad56a9f404f97ce457d42485", @generic="b2040467979af03f62ff23802d6d27e451cc73635aac5cb8c2b66ade2dd46f4076f84befaa0b2299ede075324a7055f49d67cf5d2698fcab005403f5ef36bd8d82e50dce6505e8bf2204d6404fb6704188aadef98e239841a0ef558b46d883ddfa51e2", @typed={0x8, 0x27, 0x0, 0x0, @pid}, @generic="0b59b71b86cd797ee6a5c51c7fa186e9111d9c662f7b48accc7520e35a738c448d8749ed5fd75a5349fe5f177bb71496514dc38bb195e04ea9413ec53a72bd5285485df00d5a283e04ca26b5b5e57d5f185ff0ca51abac7a61252faadec22f416cffacb1671d2da7d0d9233552b3cca08dc67906246952916ec1ee6d201b4719b2de8190830f0b3f63ca568f1ea90e503b3c6022b1438fa9893d002de2dcc73a46d4e307870d0488072de3606cd2edf7d44cef320239f6775bf03d84092bf6be4428bdcee178fceb4ce18041abe9ec201e10792e7f7d08cec7aa04e3b838a041104104741656076757579d0e690dd2ec33", @generic="478c71194b5df755868e6b26d38cd816efc9515df27c6c520a"]}, @typed={0x8, 0x41, 0x0, 0x0, @ipv4=@remote}]}, 0x1458}, {&(0x7f0000008680)={0x168, 0x18, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@generic="a3be451b7725d7f0cbcbf1c4e158dc4557bdcd89cd8e5d4300b85ee224759f681feca5945dcbad3793216e73766f365eb41476bf192e8b988432b83855ebed5b3a3d1625748fe3d197be6ff50bdf5d27fe5dd6cc1118ce6e6c2919866b30d8d6be29a9d78ce34252a002f183db69c92db1fe5d9c26b4b88122a26b6c4284503ed1bd5a8ed163c3e7ec69718b18", @nested={0xc6, 0xa, 0x0, 0x1, [@generic="a28a7446a466d177f234ff2d3ee1bbd2cc119c7da877034134c131e13e3b5833cabbf7bbc5c694a39e8090eeb7cce711974da261a827590749be228645beefc4c1da93ea06a74b70e6d12e0c676596b65e43c88d69d64e7702bccf96c1b60a406319c819f9c71cf46fb7405725338b8b8f11ec8be95a1e11c2e9d79b9647267a12fc384b9149c92641e9142bbc7e9e04a740f541ee08fec230", @generic="7f40ede49359caa9eaf8a1fe09068e63f3d77cb7986d66a470d18e64e8004178b2e568b033d119cfe5"]}]}, 0x168}], 0x3, &(0x7f0000008880)=[@rights={{0x28, 0x1, 0x1, [r1, r7, r9, 0xffffffffffffffff, r10, r11]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x40, 0x4000001}, 0x4) 02:17:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000200)={0x14, 0x6, {0x3f, @struct={0x0, 0x8}, 0x0, 0x9, 0x0, 0x0, 0x8b3, 0x9, 0x408, @usage=0x7fffffff, 0x2, 0x3, [0x3, 0xc039, 0x400, 0x9891, 0x6, 0x3132]}, {0x8, @struct={0xbff, 0x5}, 0x0, 0xa6, 0x2, 0xd7da, 0x1000, 0x1, 0x0, @usage, 0x401, 0x9, [0xae2, 0x4, 0x3, 0x42580, 0x6, 0x80000001]}, {0x0, @struct={0x100, 0x1}, 0x0, 0x6, 0x5, 0x5, 0x1, 0x2, 0x2, @struct={0x2, 0x4}, 0x1, 0xfffffebc, [0x8001, 0x1000, 0x200, 0x8001000000000, 0x7fff, 0xd06]}, {0x1, 0x9, 0xfff}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000600)={0x4, 0x3, {0xfff, @struct={0x5, 0x3}, r2, 0x36, 0xf091, 0x1, 0x6, 0x6, 0x10, @usage=0x6, 0x100, 0x3e, [0x5, 0x7, 0xd45, 0x4, 0x7fffffff, 0x5]}, {0x80000000, @struct={0x10000, 0x7}, 0x0, 0x40, 0x47318e26, 0xa8f, 0x1, 0x24000000, 0x4, @struct={0x7, 0x3c}, 0x0, 0x8, [0x0, 0xfffffffffffffffb, 0x1, 0x6, 0x4, 0xfffffffffffffffb]}, {0xffffffffa27fa52a, @usage=0x7, 0x0, 0x10001, 0x1, 0x8, 0xfff, 0xd99, 0x104, @usage=0x2, 0x77df, 0xfffffff8, [0x8, 0x7, 0x81, 0x1, 0x7ff, 0x8]}, {0xfff, 0x2, 0x2}}) r3 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r3, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) 02:17:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 68) [ 729.706910] FAULT_INJECTION: forcing a failure. [ 729.706910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.708691] CPU: 1 UID: 0 PID: 6726 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 729.708721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 729.708734] Call Trace: [ 729.708742] [ 729.708751] dump_stack_lvl+0xfa/0x120 [ 729.708791] should_fail_ex+0x4d7/0x5e0 [ 729.708820] _copy_from_user+0x30/0xd0 [ 729.708846] copy_msghdr_from_user+0x88/0x150 [ 729.708881] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 729.708921] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 729.708948] ? kfree+0x231/0x550 [ 729.708968] ? perf_trace_lock_acquire+0xc9/0x700 [ 729.709006] ___sys_recvmsg+0xbb/0x190 [ 729.709039] ? __pfx____sys_recvmsg+0x10/0x10 [ 729.709074] ? __pfx_perf_trace_lock+0x10/0x10 [ 729.709108] ? lock_acquire+0x15e/0x2f0 [ 729.709133] ? __might_fault+0xe0/0x190 [ 729.709164] ? find_held_lock+0x2b/0x80 [ 729.709204] ? __might_fault+0x138/0x190 [ 729.709247] do_recvmmsg+0x2c5/0x6f0 [ 729.709288] ? __pfx_do_recvmmsg+0x10/0x10 [ 729.709318] ? ksys_write+0x187/0x240 [ 729.709347] ? lock_release+0xc8/0x290 [ 729.709378] ? __mutex_unlock_slowpath+0x157/0x750 [ 729.709409] ? kernel_write+0x5e3/0x660 [ 729.709448] ? __fget_files+0x20d/0x3b0 [ 729.709487] __x64_sys_recvmmsg+0x211/0x260 [ 729.709521] ? ksys_write+0x1a3/0x240 [ 729.709548] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 729.709584] ? do_user_addr_fault+0x43a/0x12b0 [ 729.709614] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 729.709644] do_syscall_64+0xbf/0x390 [ 729.709680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.709703] RIP: 0033:0x7ff705a3db19 [ 729.709720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 729.709742] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 729.709763] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 729.709778] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 729.709792] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 729.709805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 729.709817] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 729.709852] 02:17:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b34) 02:17:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x9, 0x99ad) 02:17:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 69) 02:17:59 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:17:59 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x8, 0x886, 0x1, 0x9, 0xf, "fa60fa14bc1d0f13"}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x290, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x4000000, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:17:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5421) [ 729.998626] FAULT_INJECTION: forcing a failure. [ 729.998626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.000918] CPU: 1 UID: 0 PID: 6745 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 730.000954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 730.000969] Call Trace: [ 730.000977] [ 730.000986] dump_stack_lvl+0xfa/0x120 [ 730.001033] should_fail_ex+0x4d7/0x5e0 [ 730.001064] _copy_from_user+0x30/0xd0 [ 730.001093] copy_msghdr_from_user+0x88/0x150 [ 730.001134] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 730.001179] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 730.001216] ? kfree+0x231/0x550 [ 730.001240] ? perf_trace_lock_acquire+0xc9/0x700 [ 730.001281] ___sys_recvmsg+0xbb/0x190 [ 730.001319] ? __pfx____sys_recvmsg+0x10/0x10 [ 730.001369] ? lock_acquire+0x15e/0x2f0 [ 730.001398] ? __might_fault+0xe0/0x190 [ 730.001433] ? find_held_lock+0x2b/0x80 [ 730.001471] ? __might_fault+0x138/0x190 [ 730.001518] do_recvmmsg+0x2c5/0x6f0 [ 730.001565] ? __pfx_do_recvmmsg+0x10/0x10 [ 730.001600] ? ksys_write+0x187/0x240 [ 730.001634] ? lock_release+0xc8/0x290 [ 730.001669] ? __mutex_unlock_slowpath+0x157/0x750 [ 730.001705] ? kernel_write+0x5e3/0x660 [ 730.001749] ? __fget_files+0x20d/0x3b0 [ 730.001791] __x64_sys_recvmmsg+0x211/0x260 [ 730.001831] ? ksys_write+0x1a3/0x240 [ 730.001863] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 730.001904] ? do_user_addr_fault+0x43a/0x12b0 [ 730.001938] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 730.001973] do_syscall_64+0xbf/0x390 [ 730.002015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.002041] RIP: 0033:0x7ff705a3db19 [ 730.002060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 730.002086] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 730.002110] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 730.002128] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 730.002144] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 730.002159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 730.002174] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 730.002211] 02:17:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b35) 02:17:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0xa, 0x99ad) 02:17:59 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 24) 02:17:59 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000040)) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:17:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5422) 02:17:59 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 730.230886] FAULT_INJECTION: forcing a failure. [ 730.230886] name failslab, interval 1, probability 0, space 0, times 0 [ 730.232596] CPU: 1 UID: 0 PID: 6762 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 730.232627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 730.232641] Call Trace: [ 730.232648] [ 730.232657] dump_stack_lvl+0xfa/0x120 [ 730.232696] should_fail_ex+0x4d7/0x5e0 [ 730.232723] ? create_new_namespaces+0x30/0xab0 [ 730.232756] should_failslab+0xc2/0x120 [ 730.232788] kmem_cache_alloc_noprof+0x72/0x680 [ 730.232822] ? create_new_namespaces+0x30/0xab0 [ 730.232853] create_new_namespaces+0x30/0xab0 [ 730.232885] ? security_capable+0x2f/0x90 [ 730.232925] copy_namespaces+0x45c/0x580 [ 730.232960] copy_process+0x26d4/0x7400 [ 730.232982] ? __pfx__kstrtoull+0x10/0x10 [ 730.233027] ? __pfx_copy_process+0x10/0x10 [ 730.233049] ? __might_fault+0xe0/0x190 [ 730.233084] ? _copy_from_user+0x5b/0xd0 [ 730.233112] kernel_clone+0xea/0x7f0 [ 730.233135] ? lock_release+0xc8/0x290 [ 730.233162] ? __pfx_kernel_clone+0x10/0x10 [ 730.233202] ? ksys_write+0x121/0x240 [ 730.233231] ? lock_is_held_type+0x9e/0x120 [ 730.233267] __do_sys_clone3+0x1f2/0x270 [ 730.233290] ? __pfx___do_sys_clone3+0x10/0x10 [ 730.233330] ? __fget_files+0x20d/0x3b0 [ 730.233364] ? fput+0x6a/0x100 [ 730.233397] ? ksys_write+0x1a3/0x240 [ 730.233424] ? __pfx_ksys_write+0x10/0x10 [ 730.233452] ? do_user_addr_fault+0x43a/0x12b0 [ 730.233481] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 730.233512] do_syscall_64+0xbf/0x390 [ 730.233547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.233570] RIP: 0033:0x7f78baaddb19 [ 730.233587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 730.233607] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 730.233628] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 730.233644] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 730.233657] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 730.233670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 730.233683] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 730.233715] 02:17:59 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000280)=@buf={0x5a, &(0x7f0000000200)="9a57df41683aec19f09eb11f576b1def33e5859bc9aa99ca8312b5c7fdbfcf0174dea19a15e9ab6c8ff43bd37746329fb11b1cb62fd5d54738bd5562ae267f425896dcf603f051728a935966cd1b9e64b544bbb02bcdb9e5af46"}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x28) ioctl$VT_DISALLOCATE(r1, 0x4b3a) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)={0x1ac, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffffff0e, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7ff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @private0, 0xfffffffd}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000020) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x5, 0x4, 0xf1, &(0x7f00000003c0)}) 02:18:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 70) 02:18:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5423) 02:18:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b36) 02:18:08 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:18:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0xf, 0x99ad) 02:18:08 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 25) 02:18:08 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) r4 = getpid() pidfd_open(r4, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) r6 = getpgrp(0xffffffffffffffff) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r7, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000067c0)=[{&(0x7f00000003c0)={0x13a4, 0x11, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x4, 0x34}, @typed={0x1004, 0x2, 0x0, 0x0, @binary="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"}, @nested={0xc6, 0x90, 0x0, 0x1, [@generic="9680ddb12f46d308379aabf2002285d1e28340c33afd53d3c56a112eab6af4287dfdb808c3ffec0f0373f045bc68f0df50ed66fb5d190c5a263a3b49e9fe85ef7b7eb1ae7b709d9adb7dcc3bb17d688acc353535eea2a5db93bed00484835e49", @generic="07fb34d60dc746dfe9203d12718588f9c74fbcf05e6224fdd0780420181ec9dc4913ac376b79c23bcff7b6424f1dae5fc91a4ef45b04895e9bfec9f9eb6f116cf6f8aa4a08aa18198049f857e6f6d0dfee3b3136821a1b84220d", @typed={0x8, 0x6e, 0x0, 0x0, @u32=0x48}]}, @generic="1b1a60a81d9e430c3e2c062ac117ea4f4e88b3081b2f5b9e2ec1da21ca47c781b2f2a81d099e4eef1be8911cadb44ba8868ca77143289c647f44ec55b006ca870951069a513bd84d711d783533bad0e79c1ee8dab9f4ca307a877f550e9591234f97ebd607c5ab0a0455e3167f441132f34b321dcd162a9481c490985fdca417b3e8ea3bd9ebc2c799298ee9cf02414cb9f50db3babbdf16cde65f8710b05d333b818e1e5505332c6be79db606020934a0bec7d4b7ffdb3426a4fc1b0541de67fcbaac35fc1271e1ba", @nested={0x1f6, 0x81, 0x0, 0x1, [@typed={0xd2, 0xb, 0x0, 0x0, @binary="423b27c2d98e83ae301a050d67112832e061bd01b95cfd16b988eb702cf87b9ed99bf1f5e60c5713d5365abcfb8c1ec5de03fdb8c1dc6675cbc2daa2b4a7d84f9accd963b673e2e8179e4e51b5b16288a93d760ad4ade664a1db013fad59524fe665b10b4bf8caffd26956286148de171d4ed5982d1ead35f213a4cc82e61b36f612c238c07147d8ff8c8c9246b2a5e6a2d0c6095e72800e6616f670f60bf2542c206f9962624d440ac3b89ea02427183c8ed35e87f021d584ddc2e91ffb706c0fc57c490dc9d21ecbea8a81c10e"}, @generic="27919291464bef945cc7eea46cfd664dac19ee0ef249c433ab94789ab6ef5ad7995588b2c94e235f233d7590d2f83547de57", @generic="01308792a785e3284a375b98e755c98e193b4220d897b02ba7b17af218be22138a01f0914416457a23af9d2c5285194fa42d11fe4baacc24a71e4bac1ce1f0d366c1a39ba017e9bc91c484adbf1dfa0198e847a99ba732679879a84156c802e9c4e8d4075d17495236f15156ba8d8b0b0062d79d098f8c8ce66aeff8d63c4b78ff51d0d3ada7322045614aebc98c77339dbb4d6d687decae2482b9b17b7c1f5c5532de0212b9a79fd4a6fc41d4a676e06f42fc8af5d42de2c397256421415dadd14ee062552e2b3df7619a32e882c7e8fb641100171d7216ec08b81efd99583d51504577", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@private=0xa010101}]}]}, 0x13a4}, {&(0x7f0000000080)={0x50, 0x41, 0x800, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0xd, 0x0, 0x0, @u32=0x20}, @nested={0x23, 0x4a, 0x0, 0x1, [@generic="6a4a624f988b315fe0ba5ae86d13c8e09a141c30de9cd79b1e26436e5924e3"]}, @typed={0xc, 0x56, 0x0, 0x0, @u64=0x40}, @typed={0x8, 0x53, 0x0, 0x0, @uid=0xee01}]}, 0x50}, {&(0x7f0000001780)={0x2290, 0x22, 0x300, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x70, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @typed={0x8, 0x10, 0x0, 0x0, @pid=r4}, @generic="b3d976458d9a13afff1a14b3c2a92a4a31ef6c009fb134b150bfd62fc41c375f7d1fe1f66b91137d074804b0d2fb6df2e82edde6a93704b59738f1d24c473c3b42043d56762806", @nested={0x203c, 0x43, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @uid=r5}, @typed={0xc, 0x73, 0x0, 0x0, @u64}, @typed={0x8, 0x7a, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="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", @typed={0x8, 0x80, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0x48, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x1004, 0x74, 0x0, 0x0, @binary="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"}]}, @typed={0x8, 0x5e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x1b, 0x5c, 0x0, 0x0, @binary="c8a6723bad8bd99f767679d9091655f9ea87984d35be40"}, @nested={0xfd, 0x65, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="9849f3a022d56b229de2ed24efb8a0a519a3831df1b9b6d6d6529099d9f37bc55666a6e9ffbf94937c7601c9a54fa7926dcc556e53a15bc9f218730c270f01799500e3ae399db77e4f0dd24e88dc445aca2fd1cfb23479bf38751858d1d199b40cb168307aa0cca67b296f58f086147971612d834634cd5884b90c588e0e72d9931a5d23cbce8a9d6c1f8727fdf3b66ec370b457afae7fe4e730a2fe866234d8bfbd98a7d1df83933e469df5df80db8cefa16f808bd4d09cc796eeec91292e7dd0b67a1ee6410671cfd43c6f7124e5df91d079192f611a8464d62af310", @typed={0x8, 0x21, 0x0, 0x0, @uid=0xee01}]}, @typed={0xc, 0x5f, 0x0, 0x0, @u64=0x7fffffff}, @generic="19674a28b17a6b07cf10f6b02afae88f7fdd292656df8154da4a7d47a18ccd049b015738c419a136e77de7b4f405cfdd30f007c6482fe1b74763e4c85ab7b5d44884f49fe11d6ea7032cea63aeb7068f4b4477d3eb7d914453aa9b6423fc7ef6defe5db9afcb3e5ada6ef8dfd966e04af63cb84567523a41556ce148e23b5e83bc7a3642c033ea3bf850dfbfdb9e1e4f856fbf3a415822be1d00fc3ab68b0271d023a55f02c68961174494c08c919866512d0f799259fb104ad1"]}, 0x2290}, {&(0x7f0000003a40)={0x13cc, 0x34, 0x400, 0x70bd29, 0x25dfdbff, "", [@nested={0x113, 0x4f, 0x0, 0x1, [@generic="9905e6b11cb0d2c52c34a6e0067ce7ab29098e7575f48e7f6e255deda330ad5ee429b87bbc38663a687dc47afd414a9b1606148859bea98c41c28f02ba8ab500f555f8ceb454949c9a76559ce8371678bf789d8ad3a834a33e9a4ae7ebdc412cb85b743778ce4aefd8189599a75607dfc8c1e314e0c433574edadbfa6ee259c10f6c4ae5f9c43fe740ed37acb5d4af4949a431d69fc55e86c266a0df89b92f4631f78ae9e8daad9e518e00df866d4eb5cd5bf93c71e6dfa289d7bc0603bfcd0c90e0fe0278ca2c0b853e37eb8f5b1b775b975bfacb514528bd0b3932f8a938e9ea4a8224c442fd74ce6acb", @typed={0x8, 0x22, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x47, 0x0, 0x0, @u32=0x7fff}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x5b, 0x3b, 0x0, 0x1, [@typed={0x6, 0x6d, 0x0, 0x0, @str='\\\x00'}, @generic="becaebcd16870b882bf968eb8f23a57024a9861f61dff4061d8311110806bfe14d77f88934a5073b15df13c86b6a42731cab2e72a03d86d46945df872f2f7c9331fde3d007824ad090f30a91ef2e40"]}, @nested={0x124a, 0x8d, 0x0, 0x1, [@typed={0x8, 0x68, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xb, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="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", @typed={0x27, 0x48, 0x0, 0x0, @binary="78676a8c6f31ff3718e9b574b26cf021ffe3e92fa477b1930aaa3e7cb0ef5b05173d5e"}, @generic="29d89aa3dc4074a21bb2401243fa6dcf0581ce7e3eeae3bbba3bfbca75c05f1ed2f0e6058728cd8ba431741d152edaa02e35589b47b062842deb67f101765820f6b057ddf70c2fd6c1624f5e254a180228ca94eed5edbd326cebd585752baef70980d18291859c1039335b0c36d592e7561c40d7cf96d2d8407d1237d3e2478952d3f04a6261c5741222b4f0ef544681", @generic="171ca3e4c79984dc6306890e7c90d5ecc4d3e877778d5f11892153112d330f47ef61ccf2652e6406f8e5a78d22efea5bf03a63b451dafbfe49f45ab12fc1463909dbf938411a22a1453a53d0446d2fbedb7408be29e0f2aba65c7c06e0e16ef2beeae5d62805174d5115745b46d0a3a4e37a7d0232c197c6470c2879cb6caeb2c8a285ee62530b24001c51b60754f540fe73c38d3ed8991baafa63e06f98914e1b9ca43e0b65072b41", @generic="16ea366eee7c8ea3e8088764fcf607c1d5cab58a169f012f759463996dcb39a233c6637253578b1da8dba74ce2ababd99bd20bd468af2e8a43ffa13e1e395bb29d6ccf8081c3fa1dfdfcc95d17183e230f6b4e6eb7203cdfaf0a2ca683f9d20e5fc9945eb8046634b0df43676d413af0ef0c0f3c101622f5826f217811d7aa527a28d0b0f332afbc02311e9e3744b16fd8355dab84ede6916de51831661aca5cc575ac7d23b6e1892264901c750631485bec785f2f4d2c4e838b0b4b490c5b99653e495288c66d285bc9c69823", @typed={0x8, 0x36, 0x0, 0x0, @u32=0x1ff}]}]}, 0x13cc}, {&(0x7f0000004e40)={0x56c, 0x18, 0x8, 0x70bd2d, 0x25dfdbff, "", [@nested={0x178, 0x75, 0x0, 0x1, [@generic="36c3785566e75e4982a5e047de55fd4a4d97ebad6459665714a44b28d475dc683908a7b594e1b13e3b46d7e4d771c1a30acaab8cb9115b907dba2f7473bf544c14fbe0d3c46ac831267e4ae964ba5e8e705e1ac0c32c65c44f13a1115a8bcbcd11d536295d8334a5c198a19cb4c9dd99ef32fa6fde91ce96b3332fb5ca2dafe66a91a89769a87f8a0588fc80435672198b3ac2ac26a80de5b35aa4909a0920bb614bd7991ec39ac79aa922a641f422ff15add930d93c3218c4a3dbe39c946c9c1e88cc758638b454b9d257c0d0be7dcba0685914cb589cb52c699f825f61e58d787b9f2eb6e01bc138ec1b9b6a0bc239deff4e", @generic="5116f4c11ce7530a65c9b0115d3817cc2fa0e2e7a93942e6c1184e7d931cfa4961dc4bb467780d266125c419039a5f2dfbec4577f7564cd4", @generic="415d9df5935574cb791e71ff816c24837a633ddbd5ae00cf881f37a0b562", @generic="e51741b2e756d40f87d24e60b1654f4529d04ad9cc67f3c4a704abc7570570459c9a9bb1dbc0c26a7448e8"]}, @nested={0xf7, 0x1c, 0x0, 0x1, [@generic="e8670a9907fd7818ea6c79a70284c5dd5b6eb13d9ba6111addc84ac56265d0361d03f3c9c0146cf8d6c700fb4b88660eaf355df004bae86dea53550e4612fc5bad6c16ef98b19d25796a6411bb04765f08032e3b799db6bf4f4682479a4eb8b3c67bafe93ef04cabda97fd4a5b50acb7df11f48239ecc7f66c857e64784c27329d17c1631650a68b9f939cc93eb06fd165fa068178edfc7d4cc179a1d2167e6940edae04ab96dada272ea6edbe40bedf31e24d0f85c0ba7a02c8edb0c022837a4b2b9da04d9f708296e16ca3f07db5e343a899cf92804cfe9ffc69fbb45666274babfffd3bf38e29b131e00c3fed7c79873090"]}, @typed={0x14, 0x37, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x89, 0x0, 0x0, @u32=0x8001}, @nested={0x4d, 0x5c, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x11, 0x0, 0x0, @uid=r7}, @typed={0x4, 0x6d}, @generic="539458e0b3cc04936da4caf4c96d39", @generic="1c13387de1d32f34c8de53c088c1e399ebb50686cf7781c8bebf4eb97c32", @typed={0x5, 0x53, 0x0, 0x0, @str='\x00'}]}, @generic="f0ab6104908c4b0be63fd52657b92a0a0c74a0a27a757bbd18949b771e01470f681e8ccc0dfc6fce36152d40380de867132dadaf3ff0f632aba130ce324823914b2527b64870d60b7dc9a46da0d7a6c95c6056cf041e9ba3da788510cf2953e2575d2afbb402bcd23eaf97ecb3d564af9f6b4112f6a7d1596ddab409d989cb9ebf6186524843483cb07d71ad512b88af8dbd92a6dda7242b221b67d91b4ff5c3386ce6f2f13f3c4c5bed1df35fdcf7166b0122aa34a32f47d9ac3821181ee21c8031815c103f83e050721d32c2fd055bc0c63b47cf144627e16bee62bd98264f1f5caec52cfdc6f4155ffa16cbbf", @generic="28b2f2a6dd4f45d41e4e4ac2dd363a2e522fbce207604c5f362c82b8b82959e8a18acc986f3acab28169649abe87a51c4bc1dc9cc7dce1a3ebca59f73a36b2415e23a7e3f4c9884d03531f819c9a41c92db579b5932ea778a29d37e0639b45a9c3982ea7f959ae6af3cc0ad4a8bc6b381cba029194f2ffce079cd0b28117eb73ebbeb3b2faee08802dc05b6a1793ee0a18ec79292e790e8b21d75d5f7004f77a0b65b3cbba6470fa253394ec008f0c48ee308afc2602fb7a31128c7ed9ab0bc4d71c3e58ed6ff2d6ea508ebd9cbc24d3886ad8d5905f4ac30d21d678446abaa70c4a71595febbd41999389", @nested={0x9a, 0x83, 0x0, 0x1, [@typed={0x4, 0x7d}, @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}, @generic="e120bc44c9fd747d69eb335e4ea13cd54d11090cb4a61e393d392e9320bb8030b9db9ade992c940bd08fba3463748b3d9126ebb8c72e9a29abb388d707808623cba95e259ca15e09ca4775455f4a120a26518cf00bc729baf2043fee401924c4feb3c9e0d9bf34770c520a936a7fbad1f9917f0900b7ccaf22c9241dae6d"]}, @typed={0x8, 0x8, 0x0, 0x0, @u32}]}, 0x56c}, {&(0x7f00000053c0)={0x13d0, 0x34, 0x8, 0x70bd28, 0x25dfdbfc, "", [@nested={0x133a, 0x17, 0x0, 0x1, [@generic="aea16ed70464224c5b90149a6080a7e9cc257717fb5f43e22a1c2d5e92b5a19b9c3bb247e5b5e5a6cc1752a1475a4ff1d2a6f218c9ad6649ece7eca6a8fa7b733554b643a0503dbf97acb971304afd5dc60a32f5076b61fda0eec6250db3004a3ba67c806339dba8d1d048fb753280641b9a818379185708faf78c5f5991d2c5a5192f79404b034a11136abad57779f188a7255242635a06d8b1555883656916a7ac72e203ca34803a2e7bd75f98f5bcb7c058a4b4e34ba3cf14a2b55bfb54", @generic="5dc476f507abd2de2da79ac178aa172870cdee95029449d3d2317dbf99c7dac74ef3d06d42c7ab12b5cf69a77c5030d506aa677d28ff020827a050ca9a9698e510d0f463ccbc2fee27a285cb2e1d40db61c9411bf71056747d8ec48ffab675eefdd5766b643a5c3681e0294d191296c16f4733e544f2eebb48dd9d6d5d4b6c03b87e96a359710dc3032bff966a6e4a20a544013d0c62921f169247c1a94720d42c096d4bd61ba5ac38377f6c9fbe8bd53a06dd5b783569cc3afc273be10aee5a48dff4feccd10eadaf479d816c395df55aa3bfe977aee1d8101188eb65d6ea5c9573d02483164aa1aecad5ec519d75f54dafb850db3e8deed499119cd22350d87cd8d56dbee681694136c02c8b0e23596be902071cf3649a0cc7d0467401811fa8f6f1ba3f61b9e574303a48070f0c3a1260fef7bfcfb8b6dade8a5babbc3f70ee2a6e6631f1dfdbc85b185d1ca52a0364cba1eef54cc630a5f351a794533bee495a32959b9e2c0d3da9f8e4f11f6732de077cf96db457fef82f04cb13fc4c355543b2c6af305e8d797e8634373bbf6c459a34685f5cdafc96d46b1456180fb8f7a9a8238968f2a7ba7613eeab766c98eb2769b02e0137d30bcbed21083bfa3e1d1fbbc301444dbb6d8157762db4b0e172128c5a47b9b8fb53584219f4a18e1439fbf3fca90e5a9b4a405c85482be11d519ddf3222240510c7bc7dd6368c43f176b1e893f9ad0fd5ea4acb9101edbed15bf5f12d75b8de0ec89bc892f2302852d3ac3405522e07cf54e13f4938fda8a771eb5a4bc017120f3df896a35eaebb7f1c152b3277f9fd348d3a767f18637c9715a20dba0a0106819024576d4b129c88c7dac1a99ac72bf3d740b4ca52ac7bacbb37ef3529e471ff3fbb6992abcbe6b526ae74bec118c70ccd61d6811c43d153e0bcc1dbc5b139852eca4820cbcf20cf3c39fd01248f4a019e1c9f9a3296f4718239c5a033dfdd6f367f050da52064696e6193cdeb8b37b9b4351807339efc6985510400b5f0ff95990aefb5c299b7695f09b6e5cb557cbb2653efad873fc133583a38005f3b2e712e910106cd69000e26bee8b64dc7d13d4846281d95c2627df8540c61c8627949d21186ad9bf04807b04ff3bdfe84658d55661c34cc502683f59395acb4330617e0dccca520235a3e1b420fde620ab8c0d912e4e741d4a3092ed466077104e8d2cd9ed649a3693bf970eb0fcba08c6a48b85050e27b6e6b0871cae2dd9cfe6237bba88729cbd4cb23a2acf12e96e3c9e62f790370a1b805f91625a6338d79cfa1eb58bd823d5bb3bf7e4e23f2cda58c01e1472765c6f5d2849add28f24eeabfeff5f0c434ed6d853dcbb4ce603e60ed1a192f63f62c0c534271ea5b0082428930e9b8012b0380d451ad3718b430137d79141f3f26f08106fc0394711542a5521390916745c597f7b9dd015ec16851e3e8e74180ac7c3a02eb358f6f17b7859add09356731588f007f9cb3170ea6151ee6cb2988b3614cd1ba193daa3b77b67fb9e6988011d65a645f7ee9903fbb0fcf51583d6215d00240abdbfa743103671b807c57e91b7384c61aba176760b480dad31d992fd836613a97ee611885847e9a33e381e34313a4c13fb4a6cf340ba3cdb619fbf1bf27747c3d0ffdf8b245a8f206dec51c621e5c38210e42581d2d8bae5cdb62d8d6e5baf3c9628b082ef3d3271d2539b47277637e9a5f5b87c2ba79de9630aaba16e068194075bbeaf744b05f2cd582c10ec213c27af1e5a91c19494f5791bf3a1d6fd4d3b40e6e13de656999ab435d400bf511504236019595a48ca7f12f2f2c99dcba097af2a2a192a145c11968ed4f25cde1a4704dc95d5aa3ef3e4f12223c9bcf55f885d0a1b3cdfea6abb8f1badf4b4d18b631c3cf237591f472a50dd5450750988ebd9ab6e9ef7ae980fde259432f7fd010666ac4b1c1f9d4a463c6a5747eddd602be6ec7792fc32ec9ace5a346cbc87e68ebe7e11f1609ea0cf09affb6af933927b6d34953846812bbae93e6a012e281b2977f1fdb5abcfe69cc19c3ac5d36c26567f57549c921155e7cfbb2ab7b3f21b364b47257a9ba5e1cdf6e761c30e1e36bf065423924c11cb1993fb8d385ebab8cbced67e980da0d968fa6d9f262c7c70cd89f97193696e9ea3bb04e427779239451033260e083f26b7bf26bc20701c896eb205ef4e380647b9ce1f364190761f7d52fc003e0f38f60db48cbe47b312123155ba8cadf9d2d1f2708144d3f1ca4a7a5bde956e4e17c1fc0d731e0d0cc5315b9c535e5651be3070337741a0b9f48516bbef97851415ed2673e6206c06981bc46f6d9db694794b1ae992ed7cd0ddd569f7286d51f45e11595d66e57a81899398229911d96cd88a3f2881a108c0af899a5a064880e93386313ebf5fc7014232d8d92f450dec1d77ee62402de20e2fddc207e5dd5fe49fce97b152b8ae2dd7ab8a1c5cdf7dc275591ff6151b92fd4a2221f97347744c78fd3cb953077fbfa67e89cb9e5192e29cd147554c33b11bfffe91b1af7b546c24445c69d882427316decf7dd0c6054b4aa0f90b4a7de396a7f63f647a721af5d5ffbac469b0a448220a26d9019b8489052bc355d09daa68ff39b15fa04c5e328ec85b1e74232bd14ef59b613d0c7bc4d7a28631d173cd6e11d964cbb5acb8af1c2d43732630ef7c5a8c2430e608b1a9703773a558d88d4a10df1090f53347f5885e3c4d0d6caa722056227402553d4c5f199064fb5b9a5c1cecafd524d07ae8a402eb1c7cd21612498b5345c895303f81335456d2f257b412589985243b64ab3663b458c9880bcf6e4bb4ae7f88d982c13a8ce1f5cf7526146669f83e5e401c634462bff17014d69fc59f669eab9e056823d66b235435a7cacfe68bb9440d52d92992d38012172d32466df9163c1d65c20c0417848046448e4d1a16935b51bb2d08a7d07d1d7bf1cd56fc83880cbe2cc0ef93a641a21f5f00fdc90d47999925627e1620e506ca16d9ccc3bad133b5bcd132735ff29b9ace0a9415ce874b14aaeb8f61bcfdf1f3e9f7708b6abb03e4cee6d5eb62b967c1658bd7df10411407ea9f7dec0063909b9f6c5234db2d932d1ac78adecd81e15e64bc9ab201097093450e5b17138308685f8d6888f3238b2229192436526e1d8c1a97504732dd4db9561ca7b74a874ef8ffcfd6b7f712eacfddf6514d47363658d994c832dd1bd17d27a41a87f3c760410ec9ac88f30a07cb1896a26ce4610a30b4502a1f95af2f84c18ba95295caea6577eaa3a905d0c7301adab79bd2f1721036faf45e53c67620bd3459bd66c032be1de0185976e6111dc7144d0ebcfc001ab623ff406fdb0c593719fd98e6bdc151b5cd9ab9676eda8c3606a9c36254a612ba157b8e733625afda012d9c5bd2451ea19cca01f6849c966f5be49abc2ad1889bd026d505dcc5f9babea1aa55136dbff36fa2a0d0bbc5ad1d1662d3bcae0df99ad92da1d5177bd5abd3129942e0bdb2ad6a47fbef1d75357af7849cf89750667a28e2344eafdc2a4e466ca76c834d99e6a6cb912d4b9ee7298d904d0023048909dee077ad2a6ad0583c229e4ab3e0a8793fc73c4532491ddc41448f834f51bc5deb6981bdc374f06f2b71bed9c6871c7a4fa37fe82aef5f05f4dff0359822ae87d07428cd313562668e9f00556b0d318e82bfa2dddc9008e1e7b13ba3263568c2744a0097c5262d811b770d003d00e6aa8bb355ef1b6901b16af068bc3ae3792c85b42662bb6c3d555f997d43746bc34500736494af439b61e6154520dc28899cfeb6d09551d647b36803c507c996c355e2dcba6d129af2ba9a4247ebf732bcb0e138afe87a54fb0f8b3c83c8c36824d357acd87318dd38a6de56629bee7b7bbd318016733a2210210a69418aea8b3a6dfab45cef42949b112431cf50d454b315be85ebd241537986a77990a090cea3f56c03bba540577597d30ae0202c12456513e1d835c5d59e2c376868029ba7b149c6746ca538f5ae099361c41cf75291b3da86e64d35e4357bbdac2a877481127e6e887b3ba8010358c7cbe6468bc3e6d646c59cbeaf59b7bcfc7fa503137744227f0d4d1a9f803eb423786b6e0a6dc536d49b59050ea03a9d6acd9623a6a06b53c03ec9f729eb87080cfb7c7ec594a2ce495ed72b1adff0cfbba37c05639a3669a5583db6a67fad5c0076c0b117d45ce745333c85696bd20cb83338f5bd48f88a5b9a900ec2f68af1a94e9ee87ee6223a4ee6100e98b8a749d47aa244d0fd2d18873376ab0fd0817c0595156c5c73171a84dfca39a54c5f59b2ce96e2be944822c85f669797ee609fe98b364ebe9a598d131dd8d31125f358ba7c5dd0ddeebfbfbd0fd0e5bafb4095b0c450ff630221ea3bfac31c816333f4763ade576a8139388f6ba421ec2d0dc31c0abc4d8bfd9ae16ed635a5a688593f8b56169a37344d16ad831acef7cd3608f18c02f464dfc52f9bf0bb009f9fff6a35d25221e526e804ea448383e46db63f7d5af32e4645283bd7e8fbfb2c9c5205a71d40d78bf713357dec3ca3bb13b1e870f756a24acc5cbab3b5e002ecc3f0b8d30d76fdc1fe8ed8aaab1247fe7b2d3d0d10ff63d926758e4e720d4b7af05bea8b26921354323b22bda38acf52242a9d5f19ab8e6d6a8a2bdf67d8d8815793f97fca9cdf032fd909e74f3cecc49806f99bfaaa8e257b55395b6847d0ec82edebcc7d53f9a6d36db129eb90f1a059dcd1bf2d183c4c59abf13fc3831b07cb1c4afef24f4b7a9d601cae88da05b12c845826359ba2ac1da6f7be6b3df57555a3b53cbcab4d0c3ff2f6e51a7b75fd1c202c4a7b8642ac8c9950f875c8d09495e96d61598e9eac16199ba408a5f4063da992cc09ef498486eab28bc091b96829d963eb97e267af68b386b44324a3fc3fe519c18d63dc9b62dd69fb0aaadc0d72d0be68260a6a198efedbb7f0d08f932b8814313e7b815b8735537403a010e8290887fa93349614448a35bd08692736f20858d5f7a557a80700748194ce959f42f3e630db2f0f18a3c43f740d2e8f482eb39460308bb4b350171e4d13c4a64896a4bf2cd4f067d71e05a0c3fb770ad77774973a6b65c2dfc91dbc9739fa29aa57a3a15c5161e92979623324b66e92eb994721d0046eabce91a7f4fc78b28f5200763716bd285a36f4306f471502d5d3d5f59d4062fb69d765bd0604cdfd9cabf074daa8984c64215c3c4650d95b73cbe52baa21c258e190ddf05586671537673a221fddaa5149dacdbf6a2e3ff27dd675ecf56e97e57e654a5a226cf9f8cb3c557f707fe8179b10e8797aed05d9a299337bc23a6b2a6f39eebe8acc7301601f9285bde6836050b8439c2fa7f787848e9e5875e2edb18aeb3c70521eb90395b398f7af7626df215ebb3c7e60be4889b9413b74dd878d79db755e87f564100b4338e786a1e72e4db33238b1c95f6bc31175d3a1c01c38d98e4cac4422c146e1fb23520fcdcc8eca050afbdb5012094c5dc4e502caf7efdf53a39541ab0d8eefea7f82b6ec7ce361cb97ab8f343955872758fa1231c14b4dc59c2d9bd78ef5ff58c1c1b21a946ca24d4516e6f195bf9df678c223f7b0c498bddd5d6c19d3e4634ee8201a9c711dc38ef0faaeee507cc653eb925855794d0d6771b57dd56c2567d38a3b29b219e4f1ae58414f3cd87ff5e75c71b9ebf63ac417aa3971f0b5d67e388290ed2bc8f9d675537a6283727707adb92551b7d5dce4d7930627f039b0ffbe6802440dc55560e3aec334a5335d0fc5a8b2c92cd9f37a842c1527891b9a4", @typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="326db5d18c51d7889d4f895bcb5697053ec2a0dce44f4b25d1e0872594c8bf88dd3f38c37f7632426c1058f8d602eb7989f41bb15ddfa0708732", @generic="ec98cc71eae03f2f7783196c1d2b5e8a2f8df9e2dcc0826e72229126bcb3cf1874e89cd66dd58fc2d70673c7b5af1be20fbcf69f59a1a1e8569a9ee12200082228866cffc860a001efb1cec6536e5e717a0efced6da12b9157dc3840197d10c92d842094dc9177b9cad73bc576b6e460d3a751be65c372a42385a6c2043f09a4b4c39a253542cc2bf84ba8aa475b900d9a8a9de4", @generic="2fc192fa7b2970d2467e2b787659b5d60dbf343baab4dc1202e9dfe9955452922a1447504530da7023d52be3379785c39fec5373b85c7451d898a35f335bc8933ac257e20cd71183db44cfe0ef2449fe0bc068f9d998e6a81024021bc16cba2f25ed69472e20d73e04ba8b870e9cac688ad6b63d27dc1afe87d6ed4dff00634a5ea15b5e4d90a948f481ebbf113f17dc", @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x2}, @generic="c4a6c47673651d02a382d3eda9ce5166548fd91a761ab8fa168513f7f4cf67cf26ce88400b61a106d280727c0fc548a50cb99103f23b89b98c7aacb1f8b221ff94fb1017e425febccd86b84b8703eeb16d118397db00a7e2fbf889a737ec933dd48398b9f149761467f0db9d4282e7c491687296814d2909d5a9b1190c50f7ab0e4f202ec8cfe089e83d", @generic="f1528dc088cbe9c8f97c813c0f6c61a6587f2f8abbc9f0029d88ff081d3bc6b0e4119790a55c3c3991877653cac66f488adb60167733c5cb30fc46f4ff764d994dfdc424128af07350d0bd5fea50ae95e51609f027c9cced828ae51020bab5d2ef9c352af9add7eb759e8c862a81b1", @typed={0x4, 0x3}]}, @nested={0x7b, 0x37, 0x0, 0x1, [@generic="ee9f07adf1d6dbc1584b0b0750c68870f3372346eae993ecb49e96912e00b55c32fe7e386b37327645d20baf715563e78241bb8a27735cb1bf32c734bbb36ce05aed6f5a884f4e33849ffd282e4efac0e94738dc450b9bd6071762c38411545e7dc9d4d9c3fcd182f0a64b7aad296a864291c51bcfe7d3"]}, @typed={0x8, 0x96, 0x0, 0x0, @str='{!\'\x00'}]}, 0x13d0}], 0x6, 0x0, 0x0, 0xb574b5cab2e1bbaa}, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = dup(r0) ioctl$VT_DISALLOCATE(r8, 0x4b3a) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r8) 02:18:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r3, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r4, 0x0, r5, 0x0, 0x5, 0x0) r6 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r6, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r7, 0x0, r8, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000180)="f03dc0d2beca4864cb041f9563b593f2ad3dcca30192151225bd347a5122ede7c8776fe0f34513cc9cefd8b332668ef0acd5af90bbd37b46219b67da3310f3aaf15d744ee18bfa2c8e23221ab2517b38a2380b8e28e9fe6dc12fd26edd349604ad640f28ccf266b52310daf608b0618a033beea58549a441cecd7c", 0x7b}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r3}}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r0, r1, r1, r5, r6]}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x118, 0x20046001}, 0x0) recvmmsg$unix(r1, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r9, 0x0, r10, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(r10, 0x8906, &(0x7f0000000000)) [ 739.397921] FAULT_INJECTION: forcing a failure. [ 739.397921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.399006] CPU: 0 UID: 0 PID: 6792 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 739.399022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 739.399030] Call Trace: [ 739.399034] [ 739.399039] dump_stack_lvl+0xfa/0x120 [ 739.399064] should_fail_ex+0x4d7/0x5e0 [ 739.399079] _copy_from_user+0x30/0xd0 [ 739.399093] copy_msghdr_from_user+0x88/0x150 [ 739.399113] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 739.399135] ? kfree+0x231/0x550 [ 739.399147] ? perf_trace_lock_acquire+0xc9/0x700 [ 739.399167] ___sys_recvmsg+0xbb/0x190 [ 739.399189] ? __pfx____sys_recvmsg+0x10/0x10 [ 739.399207] ? __fget_files+0x34/0x3b0 [ 739.399225] ? lock_acquire+0x15e/0x2f0 [ 739.399239] ? __might_fault+0xe0/0x190 [ 739.399256] ? find_held_lock+0x2b/0x80 [ 739.399274] ? __might_fault+0x138/0x190 [ 739.399296] do_recvmmsg+0x2c5/0x6f0 [ 739.399316] ? __pfx_do_recvmmsg+0x10/0x10 [ 739.399333] ? ksys_write+0x187/0x240 [ 739.399349] ? lock_release+0xc8/0x290 [ 739.399365] ? __mutex_unlock_slowpath+0x157/0x750 [ 739.399382] ? kernel_write+0x5e3/0x660 [ 739.399402] ? __fget_files+0x20d/0x3b0 [ 739.399421] __x64_sys_recvmmsg+0x211/0x260 [ 739.399439] ? ksys_write+0x1a3/0x240 [ 739.399454] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 739.399473] ? do_user_addr_fault+0x43a/0x12b0 [ 739.399489] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 739.399506] do_syscall_64+0xbf/0x390 [ 739.399526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.399538] RIP: 0033:0x7ff705a3db19 [ 739.399547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 739.399559] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 739.399571] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 739.399579] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 739.399587] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 739.399594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 739.399600] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 739.399617] 02:18:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5424) 02:18:18 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 26) 02:18:18 executing program 0: ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 02:18:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5425) 02:18:18 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:18:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b37) 02:18:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x10, 0x99ad) 02:18:18 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x1, 0x6, 0x22, 0x0, 0x1, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xa0000000, 0x4, @perf_config_ext={0xa7, 0x7}, 0x100, 0x2, 0xa515, 0x2, 0x1, 0x5, 0x6, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x8) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000300)) ioctl$VT_DISALLOCATE(r1, 0x4b3a) r3 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r3, r3, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x4c8000, 0x0) dup(r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000200)=""/248, &(0x7f00000000c0)=0xf8) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) 02:18:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 71) [ 749.471892] FAULT_INJECTION: forcing a failure. [ 749.471892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.472911] CPU: 0 UID: 0 PID: 6823 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 749.472927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 749.472935] Call Trace: [ 749.472939] [ 749.472944] dump_stack_lvl+0xfa/0x120 [ 749.472968] should_fail_ex+0x4d7/0x5e0 [ 749.472985] _copy_from_user+0x30/0xd0 [ 749.472999] copy_msghdr_from_user+0x88/0x150 [ 749.473019] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 749.473040] ? kfree+0x231/0x550 [ 749.473053] ? perf_trace_lock_acquire+0xc9/0x700 [ 749.473073] ___sys_recvmsg+0xbb/0x190 [ 749.473090] ? __pfx____sys_recvmsg+0x10/0x10 [ 749.473109] ? __fget_files+0x34/0x3b0 [ 749.473127] ? lock_acquire+0x15e/0x2f0 [ 749.473142] ? __might_fault+0xe0/0x190 [ 749.473158] ? find_held_lock+0x2b/0x80 [ 749.473179] ? __might_fault+0x138/0x190 [ 749.473201] do_recvmmsg+0x2c5/0x6f0 [ 749.473222] ? __pfx_do_recvmmsg+0x10/0x10 [ 749.473239] ? ksys_write+0x187/0x240 [ 749.473257] ? lock_release+0xc8/0x290 [ 749.473275] ? __mutex_unlock_slowpath+0x157/0x750 [ 749.473293] ? kernel_write+0x5e3/0x660 [ 749.473313] ? __fget_files+0x20d/0x3b0 [ 749.473331] __x64_sys_recvmmsg+0x211/0x260 [ 749.473350] ? ksys_write+0x1a3/0x240 [ 749.473364] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 749.473383] ? do_user_addr_fault+0x43a/0x12b0 [ 749.473400] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 749.473417] do_syscall_64+0xbf/0x390 [ 749.473437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.473450] RIP: 0033:0x7ff705a3db19 [ 749.473459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 749.473470] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 749.473482] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 749.473490] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 749.473498] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.473505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 749.473511] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 749.473528] [ 749.524892] FAULT_INJECTION: forcing a failure. [ 749.524892] name failslab, interval 1, probability 0, space 0, times 0 [ 749.526840] CPU: 1 UID: 0 PID: 6827 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 749.526872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 749.526885] Call Trace: [ 749.526893] [ 749.526902] dump_stack_lvl+0xfa/0x120 [ 749.526944] should_fail_ex+0x4d7/0x5e0 [ 749.526973] should_failslab+0xc2/0x120 [ 749.527008] __kmalloc_cache_noprof+0x73/0x6a0 [ 749.527032] ? __pfx_inc_ucount+0x10/0x10 [ 749.527057] ? alloc_mnt_ns+0xcb/0x380 [ 749.527088] ? alloc_mnt_ns+0xcb/0x380 [ 749.527109] alloc_mnt_ns+0xcb/0x380 [ 749.527134] copy_mnt_ns+0x117/0xab0 [ 749.527164] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 749.527219] create_new_namespaces+0xd6/0xab0 [ 749.527256] ? security_capable+0x2f/0x90 [ 749.527299] copy_namespaces+0x45c/0x580 [ 749.527337] copy_process+0x26d4/0x7400 [ 749.527362] ? __pfx__kstrtoull+0x10/0x10 [ 749.527410] ? __pfx_copy_process+0x10/0x10 [ 749.527434] ? __might_fault+0xe0/0x190 [ 749.527472] ? _copy_from_user+0x5b/0xd0 [ 749.527502] kernel_clone+0xea/0x7f0 [ 749.527527] ? lock_release+0xc8/0x290 [ 749.527555] ? __pfx_kernel_clone+0x10/0x10 [ 749.527592] ? ksys_write+0x121/0x240 [ 749.527622] ? lock_is_held_type+0x9e/0x120 [ 749.527661] __do_sys_clone3+0x1f2/0x270 [ 749.527686] ? __pfx___do_sys_clone3+0x10/0x10 [ 749.527729] ? __fget_files+0x20d/0x3b0 [ 749.527766] ? fput+0x6a/0x100 [ 749.527803] ? ksys_write+0x1a3/0x240 [ 749.527833] ? __pfx_ksys_write+0x10/0x10 [ 749.527863] ? do_user_addr_fault+0x43a/0x12b0 [ 749.527895] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 749.527928] do_syscall_64+0xbf/0x390 [ 749.527981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.528005] RIP: 0033:0x7f78baaddb19 [ 749.528023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 749.528046] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 749.528069] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 749.528085] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 749.528100] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.528114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 749.528128] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 749.528162] 02:18:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 72) 02:18:18 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:18:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:18:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x653, 0x99ad) [ 749.669067] FAULT_INJECTION: forcing a failure. [ 749.669067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.670039] CPU: 0 UID: 0 PID: 6838 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 749.670055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 749.670063] Call Trace: [ 749.670068] [ 749.670073] dump_stack_lvl+0xfa/0x120 [ 749.670100] should_fail_ex+0x4d7/0x5e0 [ 749.670116] _copy_from_user+0x30/0xd0 [ 749.670130] copy_msghdr_from_user+0x88/0x150 [ 749.670151] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 749.670172] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 749.670186] ? kfree+0x231/0x550 [ 749.670199] ? perf_trace_lock_acquire+0xc9/0x700 [ 749.670218] ___sys_recvmsg+0xbb/0x190 [ 749.670236] ? __pfx____sys_recvmsg+0x10/0x10 [ 749.670258] ? lock_acquire+0x15e/0x2f0 [ 749.670272] ? __might_fault+0xe0/0x190 [ 749.670289] ? find_held_lock+0x2b/0x80 [ 749.670306] ? __might_fault+0x138/0x190 [ 749.670328] do_recvmmsg+0x2c5/0x6f0 [ 749.670349] ? __pfx_do_recvmmsg+0x10/0x10 [ 749.670365] ? ksys_write+0x187/0x240 [ 749.670381] ? lock_release+0xc8/0x290 [ 749.670397] ? __mutex_unlock_slowpath+0x157/0x750 [ 749.670415] ? kernel_write+0x5e3/0x660 [ 749.670434] ? __fget_files+0x20d/0x3b0 [ 749.670454] __x64_sys_recvmmsg+0x211/0x260 [ 749.670473] ? ksys_write+0x1a3/0x240 [ 749.670487] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 749.670506] ? do_user_addr_fault+0x43a/0x12b0 [ 749.670522] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 749.670538] do_syscall_64+0xbf/0x390 [ 749.670557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.670570] RIP: 0033:0x7ff705a3db19 [ 749.670579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 749.670590] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 749.670602] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 749.670610] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 749.670617] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.670624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 749.670631] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 749.670648] 02:18:18 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 27) 02:18:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5427) 02:18:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 73) 02:18:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3b) 02:18:19 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) [ 749.860816] FAULT_INJECTION: forcing a failure. [ 749.860816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.862784] CPU: 1 UID: 0 PID: 6854 Comm: syz-executor.4 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 749.862816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 749.862830] Call Trace: [ 749.862837] [ 749.862846] dump_stack_lvl+0xfa/0x120 [ 749.862888] should_fail_ex+0x4d7/0x5e0 [ 749.862917] _copy_from_user+0x30/0xd0 [ 749.862942] copy_msghdr_from_user+0x88/0x150 [ 749.862981] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 749.863024] ? kfree+0x231/0x550 [ 749.863046] ? perf_trace_lock_acquire+0xc9/0x700 [ 749.863084] ___sys_recvmsg+0xbb/0x190 [ 749.863119] ? __pfx____sys_recvmsg+0x10/0x10 [ 749.863155] ? __fget_files+0x34/0x3b0 [ 749.863197] ? lock_acquire+0x15e/0x2f0 [ 749.863224] ? __might_fault+0xe0/0x190 [ 749.863257] ? find_held_lock+0x2b/0x80 [ 749.863291] ? __might_fault+0x138/0x190 [ 749.863335] do_recvmmsg+0x2c5/0x6f0 [ 749.863377] ? __pfx_do_recvmmsg+0x10/0x10 [ 749.863410] ? ksys_write+0x187/0x240 [ 749.863440] ? lock_release+0xc8/0x290 [ 749.863472] ? __mutex_unlock_slowpath+0x157/0x750 [ 749.863505] ? kernel_write+0x5e3/0x660 [ 749.863545] ? __fget_files+0x20d/0x3b0 [ 749.863583] __x64_sys_recvmmsg+0x211/0x260 [ 749.863618] ? ksys_write+0x1a3/0x240 [ 749.863648] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 749.863685] ? do_user_addr_fault+0x43a/0x12b0 [ 749.863717] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 749.863750] do_syscall_64+0xbf/0x390 [ 749.863788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.863812] RIP: 0033:0x7ff705a3db19 [ 749.863830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 749.863852] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 749.863876] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 749.863892] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 749.863906] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.863920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 749.863933] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 749.863981] 02:18:28 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 28) 02:18:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5428) 02:18:28 executing program 6: r0 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100028bd7000fcdbdf250700000008003206edd34d0008000b00ffffffff06002800040000000500370001000000"], 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x54) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) ioctl$VT_DISALLOCATE(r3, 0x4b3a) 02:18:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x9ae, 0x99ad) 02:18:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3c) 02:18:28 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 02:18:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 74) 02:18:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r4, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000001140)='.log\x00', 0x10000, 0x138) r6 = accept4(r2, &(0x7f0000001180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000001200)=0x80, 0x80000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r8, 0x0, r9, 0x0, 0x0, 0x0) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r10, 0x0, r11, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r12, r12, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r12, 0xc0502100, &(0x7f0000000180)) sendmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000100)="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", 0x1000}], 0x1, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}, @rights={{0x2c, 0x1, 0x1, [r5, r6, r7, r2, r1, r1, r0]}}, @rights={{0x24, 0x1, 0x1, [r2, r9, r11, r1, r12]}}], 0x78, 0x24040004}, 0x24044841) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) [ 759.176915] FAULT_INJECTION: forcing a failure. [ 759.176915] name failslab, interval 1, probability 0, space 0, times 0 [ 759.178087] CPU: 0 UID: 0 PID: 6869 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 759.178104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 759.178112] Call Trace: [ 759.178117] [ 759.178122] dump_stack_lvl+0xfa/0x120 [ 759.178146] should_fail_ex+0x4d7/0x5e0 [ 759.178162] ? alloc_vfsmnt+0x23/0x6e0 [ 759.178184] should_failslab+0xc2/0x120 [ 759.178202] kmem_cache_alloc_noprof+0x72/0x680 [ 759.178222] ? alloc_vfsmnt+0x23/0x6e0 [ 759.178238] alloc_vfsmnt+0x23/0x6e0 [ 759.178256] clone_mnt+0x49/0x900 [ 759.178276] copy_tree+0x105/0xaf0 [ 759.178290] ? __init_waitqueue_head+0xca/0x150 [ 759.178310] copy_mnt_ns+0x1b7/0xab0 [ 759.178325] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 759.178349] create_new_namespaces+0xd6/0xab0 [ 759.178368] ? security_capable+0x2f/0x90 [ 759.178389] copy_namespaces+0x45c/0x580 [ 759.178408] copy_process+0x26d4/0x7400 [ 759.178421] ? __pfx__kstrtoull+0x10/0x10 [ 759.178446] ? __pfx_copy_process+0x10/0x10 [ 759.178458] ? __might_fault+0xe0/0x190 [ 759.178478] ? _copy_from_user+0x5b/0xd0 [ 759.178493] kernel_clone+0xea/0x7f0 [ 759.178505] ? lock_release+0xc8/0x290 [ 759.178520] ? __pfx_kernel_clone+0x10/0x10 [ 759.178538] ? ksys_write+0x121/0x240 [ 759.178554] ? lock_is_held_type+0x9e/0x120 [ 759.178574] __do_sys_clone3+0x1f2/0x270 [ 759.178587] ? __pfx___do_sys_clone3+0x10/0x10 [ 759.178609] ? __fget_files+0x20d/0x3b0 [ 759.178627] ? fput+0x6a/0x100 [ 759.178645] ? ksys_write+0x1a3/0x240 [ 759.178660] ? __pfx_ksys_write+0x10/0x10 [ 759.178675] ? do_user_addr_fault+0x43a/0x12b0 [ 759.178691] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 759.178708] do_syscall_64+0xbf/0x390 [ 759.178728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.178740] RIP: 0033:0x7f78baaddb19 [ 759.178750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.178761] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 759.178773] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 759.178781] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 759.178788] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.178795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.178802] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 759.178820] [ 759.197713] [ 759.197865] ===================================== [ 759.198257] WARNING: bad unlock balance detected! [ 759.198656] 6.17.0-rc7-next-20250923 #1 Not tainted [ 759.199037] ------------------------------------- [ 759.199402] syz-executor.3/6869 is trying to release lock (namespace_sem) at: [ 759.199950] [] namespace_unlock+0x487/0x910 [ 759.200410] but there are no more locks to release! [ 759.200789] [ 759.200789] other info that might help us debug this: [ 759.201280] no locks held by syz-executor.3/6869. [ 759.201648] [ 759.201648] stack backtrace: [ 759.201991] CPU: 0 UID: 0 PID: 6869 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 759.202006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 759.202012] Call Trace: [ 759.202016] [ 759.202020] dump_stack_lvl+0xca/0x120 [ 759.202037] ? namespace_unlock+0x487/0x910 [ 759.202050] print_unlock_imbalance_bug+0x118/0x130 [ 759.202066] ? namespace_unlock+0x487/0x910 [ 759.202078] lock_release+0x208/0x290 [ 759.202093] up_write+0x2a/0x520 [ 759.202110] namespace_unlock+0x487/0x910 [ 759.202123] ? __pfx_namespace_unlock+0x10/0x10 [ 759.202144] copy_mnt_ns+0x910/0xab0 [ 759.202158] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 759.202178] create_new_namespaces+0xd6/0xab0 [ 759.202195] ? security_capable+0x2f/0x90 [ 759.202218] copy_namespaces+0x45c/0x580 [ 759.202235] copy_process+0x26d4/0x7400 [ 759.202246] ? __pfx__kstrtoull+0x10/0x10 [ 759.202265] ? __pfx_copy_process+0x10/0x10 [ 759.202276] ? __might_fault+0xe0/0x190 [ 759.202297] ? _copy_from_user+0x5b/0xd0 [ 759.202309] kernel_clone+0xea/0x7f0 [ 759.202321] ? lock_release+0xc8/0x290 [ 759.202334] ? __pfx_kernel_clone+0x10/0x10 [ 759.202348] ? ksys_write+0x121/0x240 [ 759.202367] ? lock_is_held_type+0x9e/0x120 [ 759.202383] __do_sys_clone3+0x1f2/0x270 [ 759.202395] ? __pfx___do_sys_clone3+0x10/0x10 [ 759.202412] ? __fget_files+0x20d/0x3b0 [ 759.202427] ? fput+0x6a/0x100 [ 759.202444] ? ksys_write+0x1a3/0x240 [ 759.202462] ? __pfx_ksys_write+0x10/0x10 [ 759.202476] ? do_user_addr_fault+0x43a/0x12b0 [ 759.202491] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 759.202505] do_syscall_64+0xbf/0x390 [ 759.202522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.202534] RIP: 0033:0x7f78baaddb19 [ 759.202542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.202553] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 759.202564] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 759.202572] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 759.202579] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.202588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.202598] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 759.202610] [ 759.226843] ------------[ cut here ]------------ [ 759.227484] DEBUG_RWSEMS_WARN_ON((rwsem_owner(sem) != current) && !rwsem_test_oflags(sem, RWSEM_NONSPINNABLE)): count = 0x0, magic = 0xffffffff85f177a0, owner = 0x0, curr 0xffff88801e218000, list empty [ 759.229408] WARNING: kernel/locking/rwsem.c:1380 at up_write+0x423/0x520, CPU#0: syz-executor.3/6869 [ 759.230157] Modules linked in: [ 759.230453] CPU: 0 UID: 0 PID: 6869 Comm: syz-executor.3 Not tainted 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 759.231337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 759.232005] RIP: 0010:up_write+0x423/0x520 [ 759.232381] Code: 02 00 0f 85 dd 00 00 00 48 8b 55 00 53 4d 89 f1 4d 89 f8 4c 89 e9 48 c7 c6 60 28 e8 84 48 c7 c7 80 27 e8 84 e8 de a8 e8 ff 90 <0f> 0b 90 90 59 e9 dc fc ff ff 48 89 df e8 2b 57 5f 00 e9 1a fc ff [ 759.233875] RSP: 0018:ffff88804aac7850 EFLAGS: 00010282 [ 759.234330] RAX: 0000000000000000 RBX: ffffffff84e826c0 RCX: ffffc90004c2b000 [ 759.234906] RDX: 0000000000040000 RSI: ffffffff8139e07e RDI: 0000000000000001 [ 759.235509] RBP: ffffffff85f177a0 R08: 0000000000000001 R09: ffffed1009558ec5 [ 759.236106] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff85f177a8 [ 759.236703] R13: ffffffff85f177a0 R14: ffff88801e218000 R15: 0000000000000000 [ 759.237303] FS: 00007f78b8053700(0000) GS:ffff8880e53c6000(0000) knlGS:0000000000000000 [ 759.237965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 759.238468] CR2: 00007f78b8052f78 CR3: 0000000048650000 CR4: 0000000000350ef0 [ 759.239055] Call Trace: [ 759.239287] [ 759.239484] namespace_unlock+0x487/0x910 [ 759.239836] ? __pfx_namespace_unlock+0x10/0x10 [ 759.240258] copy_mnt_ns+0x910/0xab0 [ 759.240585] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 759.240979] create_new_namespaces+0xd6/0xab0 [ 759.241375] ? security_capable+0x2f/0x90 [ 759.241730] copy_namespaces+0x45c/0x580 [ 759.242075] copy_process+0x26d4/0x7400 [ 759.242424] ? __pfx__kstrtoull+0x10/0x10 [ 759.242782] ? __pfx_copy_process+0x10/0x10 [ 759.243141] ? __might_fault+0xe0/0x190 [ 759.243498] ? _copy_from_user+0x5b/0xd0 [ 759.243840] kernel_clone+0xea/0x7f0 [ 759.244166] ? lock_release+0xc8/0x290 [ 759.244519] ? __pfx_kernel_clone+0x10/0x10 [ 759.244877] ? ksys_write+0x121/0x240 [ 759.245215] ? lock_is_held_type+0x9e/0x120 [ 759.245591] __do_sys_clone3+0x1f2/0x270 [ 759.245930] ? __pfx___do_sys_clone3+0x10/0x10 [ 759.246331] ? __fget_files+0x20d/0x3b0 [ 759.246676] ? fput+0x6a/0x100 [ 759.246955] ? ksys_write+0x1a3/0x240 [ 759.247298] ? __pfx_ksys_write+0x10/0x10 [ 759.247645] ? do_user_addr_fault+0x43a/0x12b0 [ 759.248026] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 759.248485] do_syscall_64+0xbf/0x390 [ 759.248811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.249247] RIP: 0033:0x7f78baaddb19 [ 759.249559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.251038] RSP: 002b:00007f78b8053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 759.251685] RAX: ffffffffffffffda RBX: 00007f78babf0f60 RCX: 00007f78baaddb19 [ 759.252309] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000240 [ 759.252896] RBP: 00007f78b80531d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.253491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.254074] R13: 00007fff94e134af R14: 00007f78b8053300 R15: 0000000000022000 [ 759.254679] [ 759.254884] irq event stamp: 401 [ 759.255161] hardirqs last enabled at (401): [] __call_rcu_common.constprop.0+0x4c1/0x960 [ 759.255968] hardirqs last disabled at (400): [] __call_rcu_common.constprop.0+0x56e/0x960 [ 759.256782] softirqs last enabled at (394): [] handle_softirqs+0x50c/0x770 [ 759.257533] softirqs last disabled at (351): [] __irq_exit_rcu+0xc4/0x100 [ 759.258261] ---[ end trace 0000000000000000 ]--- [ 759.261300] FAULT_INJECTION: forcing a failure. [ 759.261300] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 759.262391] CPU: 0 UID: 0 PID: 6879 Comm: syz-executor.4 Tainted: G W 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 759.262411] Tainted: [W]=WARN [ 759.262415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 759.262422] Call Trace: [ 759.262426] [ 759.262430] dump_stack_lvl+0xfa/0x120 [ 759.262450] should_fail_ex+0x4d7/0x5e0 [ 759.262465] should_fail_alloc_page+0xe0/0x110 [ 759.262484] prepare_alloc_pages+0x1af/0x500 [ 759.262503] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 759.262516] ? perf_trace_lock_acquire+0xc9/0x700 [ 759.262532] ? arch_stack_walk+0x9c/0xf0 [ 759.262546] ? perf_trace_lock_acquire+0xc9/0x700 [ 759.262561] ? perf_trace_lock_acquire+0xc9/0x700 [ 759.262576] ? perf_trace_lock_acquire+0xc9/0x700 [ 759.262592] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 759.262604] ? perf_trace_lock_acquire+0xc9/0x700 [ 759.262620] ? perf_trace_lock_acquire+0xc9/0x700 [ 759.262635] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 759.262652] ? perf_trace_lock_acquire+0xc9/0x700 [ 759.262669] ? perf_trace_lock_acquire+0xc9/0x700 [ 759.262684] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 759.262701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 759.262720] ? policy_nodemask+0xeb/0x4e0 [ 759.262734] alloc_pages_mpol+0xed/0x340 [ 759.262746] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 759.262760] ? perf_trace_lock_acquire+0xc9/0x700 [ 759.262775] ? lock_acquire+0x18c/0x2f0 [ 759.262789] ? get_vma_policy+0x23b/0x350 [ 759.262804] vma_alloc_folio_noprof+0xe9/0x440 [ 759.262818] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 759.262833] ? perf_trace_lock_acquire+0xc9/0x700 [ 759.262849] ? lock_release+0x1c7/0x290 [ 759.262862] ? lock_release+0x1c7/0x290 [ 759.262878] do_wp_page+0x13fe/0x3430 [ 759.262899] ? lock_acquire+0xc5/0x2f0 [ 759.262913] ? lock_acquire+0x18c/0x2f0 [ 759.262927] ? __pfx_do_wp_page+0x10/0x10 [ 759.262947] ? do_raw_spin_lock+0x123/0x260 [ 759.262965] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 759.262982] ? ___pte_offset_map+0x176/0x370 [ 759.263001] __handle_mm_fault+0xe05/0x3320 [ 759.263012] ? mt_find+0x645/0x870 [ 759.263031] ? __pfx_mt_find+0x10/0x10 [ 759.263050] ? __pfx___handle_mm_fault+0x10/0x10 [ 759.263067] ? find_vma+0xbf/0x140 [ 759.263084] ? __pfx_find_vma+0x10/0x10 [ 759.263102] handle_mm_fault+0x2c3/0x9b0 [ 759.263114] ? access_error+0x17d/0x380 [ 759.263128] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 759.263145] do_user_addr_fault+0x3cc/0x12b0 [ 759.263163] exc_page_fault+0xb0/0x180 [ 759.263185] asm_exc_page_fault+0x26/0x30 [ 759.263197] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 759.263216] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 17 e7 02 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 f1 e6 02 00 90 90 90 90 90 90 90 90 90 90 [ 759.263229] RSP: 0018:ffff88801b1efa00 EFLAGS: 00050216 [ 759.263238] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000020004030 [ 759.263246] RDX: 0000000000040000 RSI: ffffffff83be5e3b RDI: 0000000000000005 [ 759.263254] RBP: ffff88801b1efda0 R08: 0000000000000000 R09: 0000000000000000 [ 759.263263] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 759.263270] R13: 0000000020004030 R14: 0000000000000000 R15: 0000000000000000 [ 759.263282] ? ____sys_recvmsg+0x2eb/0x670 [ 759.263299] ____sys_recvmsg+0x2f6/0x670 [ 759.263314] ? __pfx_____sys_recvmsg+0x10/0x10 [ 759.263328] ? copy_msghdr_from_user+0xfb/0x150 [ 759.263348] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 759.263369] ? kfree+0x231/0x550 [ 759.263379] ? perf_trace_lock_acquire+0xc9/0x700 [ 759.263396] ___sys_recvmsg+0xf1/0x190 [ 759.263415] ? __pfx____sys_recvmsg+0x10/0x10 [ 759.263435] ? lock_acquire+0x18c/0x2f0 [ 759.263450] ? lock_acquire+0xc5/0x2f0 [ 759.263464] ? lock_acquire+0x18c/0x2f0 [ 759.263478] ? __fget_files+0x20d/0x3b0 [ 759.263492] ? lock_release+0x1c7/0x290 [ 759.263506] ? __might_fault+0xe0/0x190 [ 759.263524] do_recvmmsg+0x2c5/0x6f0 [ 759.263544] ? __pfx_do_recvmmsg+0x10/0x10 [ 759.263563] ? lock_release+0x1c7/0x290 [ 759.263578] ? __mutex_unlock_slowpath+0x157/0x750 [ 759.263596] ? kernel_write+0x5e3/0x660 [ 759.263615] ? __fget_files+0x20d/0x3b0 [ 759.263632] __x64_sys_recvmmsg+0x211/0x260 [ 759.263651] ? ksys_write+0x1a3/0x240 [ 759.263668] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 759.263688] ? do_user_addr_fault+0x43a/0x12b0 [ 759.263704] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 759.263719] do_syscall_64+0xbf/0x390 [ 759.263739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.263751] RIP: 0033:0x7ff705a3db19 [ 759.263760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.263772] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 759.263783] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 759.263791] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 759.263799] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.263806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.263814] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 759.263827] 02:18:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 75) [ 759.370934] FAULT_INJECTION: forcing a failure. [ 759.370934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.371977] CPU: 0 UID: 0 PID: 6890 Comm: syz-executor.4 Tainted: G W 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 759.371997] Tainted: [W]=WARN [ 759.372001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 759.372008] Call Trace: [ 759.372013] [ 759.372017] dump_stack_lvl+0xfa/0x120 [ 759.372044] should_fail_ex+0x4d7/0x5e0 [ 759.372059] _copy_from_user+0x30/0xd0 [ 759.372072] copy_msghdr_from_user+0x88/0x150 [ 759.372102] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 759.372121] ? kfree+0x231/0x550 [ 759.372133] ? perf_trace_lock_acquire+0xc9/0x700 [ 759.372151] ___sys_recvmsg+0xbb/0x190 [ 759.372171] ? __pfx____sys_recvmsg+0x10/0x10 [ 759.372193] ? lock_acquire+0x18c/0x2f0 [ 759.372209] ? lock_acquire+0xc5/0x2f0 [ 759.372221] ? lock_acquire+0x18c/0x2f0 [ 759.372234] ? __fget_files+0x20d/0x3b0 [ 759.372249] ? lock_release+0x1c7/0x290 [ 759.372262] ? __might_fault+0xe0/0x190 [ 759.372280] do_recvmmsg+0x2c5/0x6f0 [ 759.372299] ? __pfx_do_recvmmsg+0x10/0x10 [ 759.372316] ? lock_release+0x1c7/0x290 [ 759.372330] ? __mutex_unlock_slowpath+0x157/0x750 [ 759.372348] ? kernel_write+0x5e3/0x660 [ 759.372366] ? __fget_files+0x20d/0x3b0 [ 759.372382] __x64_sys_recvmmsg+0x211/0x260 [ 759.372400] ? ksys_write+0x1a3/0x240 [ 759.372415] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 759.372433] ? do_user_addr_fault+0x43a/0x12b0 [ 759.372449] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 759.372464] do_syscall_64+0xbf/0x390 [ 759.372482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.372494] RIP: 0033:0x7ff705a3db19 [ 759.372503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.372515] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 759.372527] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 759.372534] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 759.372542] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.372549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.372556] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 759.372568] 02:18:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5429) 02:18:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3d) 02:18:28 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) (fail_nth: 29) 02:18:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1ff9, 0x99ad) 02:18:28 executing program 6: connect$netlink(0xffffffffffffffff, &(0x7f0000000040)=@unspec, 0xc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff}, 0x0, 0x0, 0x0, 0x9, 0x2, 0x80000000, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b3a) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x2c) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) 02:18:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) (fail_nth: 76) 02:18:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b44) 02:18:28 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0xc6, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x8, 0xff, 0xc1, 0x3f, 0x0, 0x20, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x40, 0x2, 0x10000, 0x4, 0x4, 0x7, 0x0, 0x0, 0x20, 0x0, 0x101}, 0x0, 0xb, 0xffffffffffffffff, 0x9) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x6) ioctl$VT_DISALLOCATE(r1, 0x4b3a) 02:18:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x5437) [ 759.554672] FAULT_INJECTION: forcing a failure. [ 759.554672] name fail_usercopy, interval 1, probability 0, space 0, times 0 02:18:28 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x28, 0x3, 0x1, 0x40, 0x0, 0x4, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000000c0), 0x3}, 0x2040, 0x71e851f9, 0x1, 0x6, 0xdf2b, 0x10000, 0x7, 0x0, 0x5b, 0x0, 0x8000}, 0xffffffffffffffff, 0x1, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x1f, 0x59, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp, 0x1001, 0x565d, 0x5, 0x8, 0x1, 0x0, 0x1000, 0x0, 0x8af, 0x0, 0x6}, 0xffffffffffffffff, 0xb, r2, 0x1) r3 = dup(r0) ioctl$VT_DISALLOCATE(r3, 0x4b3a) [ 759.555715] CPU: 0 UID: 0 PID: 6916 Comm: syz-executor.4 Tainted: G W 6.17.0-rc7-next-20250923 #1 PREEMPT(voluntary) [ 759.555735] Tainted: [W]=WARN [ 759.555739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 759.555747] Call Trace: [ 759.555751] [ 759.555756] dump_stack_lvl+0xfa/0x120 [ 759.555780] should_fail_ex+0x4d7/0x5e0 [ 759.555798] _copy_from_user+0x30/0xd0 [ 759.555810] copy_msghdr_from_user+0x88/0x150 [ 759.555831] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 759.555848] ? lock_release+0x1c7/0x290 [ 759.555866] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 759.555883] ? finish_task_switch.isra.0+0x206/0x840 [ 759.555904] ___sys_recvmsg+0xbb/0x190 [ 759.555922] ? __pfx____sys_recvmsg+0x10/0x10 [ 759.555940] ? __pfx___schedule+0x10/0x10 [ 759.555960] ? lock_acquire+0xc5/0x2f0 [ 759.555974] ? __fget_files+0x20d/0x3b0 [ 759.555988] ? lock_release+0x1c7/0x290 [ 759.556004] do_recvmmsg+0x2c5/0x6f0 [ 759.556023] ? __pfx_do_recvmmsg+0x10/0x10 [ 759.556040] ? lock_release+0x1c7/0x290 [ 759.556054] ? __mutex_unlock_slowpath+0x157/0x750 [ 759.556070] ? kernel_write+0x5e3/0x660 [ 759.556097] ? __fget_files+0x20d/0x3b0 [ 759.556113] __x64_sys_recvmmsg+0x211/0x260 [ 759.556131] ? ksys_write+0x1a3/0x240 [ 759.556145] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 759.556164] ? do_user_addr_fault+0x43a/0x12b0 [ 759.556180] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 759.556193] do_syscall_64+0xbf/0x390 [ 759.556212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.556225] RIP: 0033:0x7ff705a3db19 [ 759.556234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.556245] RSP: 002b:00007ff702fb3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 759.556257] RAX: ffffffffffffffda RBX: 00007ff705b50f60 RCX: 00007ff705a3db19 [ 759.556265] RDX: 000000000000050a RSI: 0000000020002e40 RDI: 0000000000000003 [ 759.556272] RBP: 00007ff702fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.556280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.556287] R13: 00007fffc7d2336f R14: 00007ff702fb3300 R15: 0000000000022000 [ 759.556300] 02:18:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$VT_DISALLOCATE(r1, 0x4b46) 02:18:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x99ad, 0x99ad) VM DIAGNOSIS: 02:18:28 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff828f3ef0 RDI=ffffffff8893b3a0 RBP=ffffffff8893b360 RSP=ffff88806ce08970 R8 =0000000000000000 R9 =ffffed100175c046 R10=00000000000fe503 R11=535f7972746e6520 R12=0000000000000823 R13=0000000000000060 R14=fffffbfff11276c6 R15=dffffc0000000000 RIP=ffffffff828f3f45 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f78b8053700 00000000 00000000 GS =0000 ffff8880e53c6000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f78b8052f78 CR3=0000000048650000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffff0000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff84e95405 RBX=dffffc0000000000 RCX=0000000000000005 RDX=0000000000000000 RSI=ffffffff85e1d9a0 RDI=ffffffff84e95400 RBP=ffffffff84e95400 RSP=ffff88806cf08588 R8 =0000000000000002 R9 =0000000000000000 R10=ffffffff85d24600 R11=0000000000000000 R12=ffffffff85e1d9b8 R13=ffff88806cf08670 R14=0000000000000000 R15=ffff88806cf087f0 RIP=ffffffff84ba7f68 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555569150400 00000000 00000000 GS =0000 ffff8880e54c6000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8c701cc318 CR3=0000000045c5b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=e2d5a4b7b7d56ad50000000000167c58 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=0a6af04885bc826f00000000000ae988 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000