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", 0x1000}, {&(0x7f0000009380)="a60a0d1718920386a7c424dd65a5c36488adaa56e1d5359ec04b23587b69b926eb379926372b39cf3b891da81d8c985f0df075fafb18ebba689705ee7193c1ffb756b268e238d03e412c25d6de14d0998a2cbdb12cce69c8ec3708b4f36746e7e0da14b515f6797d01b524dfec181cd5a12e26ad6c12ae57d11ce764de8c10ad21238e5053d79ee15bc02fed75ab86113dc59068bea2eda0d6b6f1247b809203580f4a1bdbd67dd1de84dec6a3dab46e79a3fda4b55051e6e3ebbf325225e9e2263b2f73ed50159f992aab69ab6f04f32ca3a8dfa512e9d9df46", 0xda}], 0xa, &(0x7f0000009540)=[@dstopts={{0x60, 0x29, 0x37, {0x32, 0x8, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x0, 0x1e, "803f8f915370d814cd9603c90fab436ce48467a8e6e96ac6b1b31feee00d"}, @ra={0x5, 0x2, 0x8}, @pad1, @hao={0xc9, 0x10, @loopback}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xff}}], 0x78}}, {{&(0x7f00000095c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x4}, 0x1c, &(0x7f0000009700)=[{&(0x7f0000009600)="9bb466d3eaecf705eb55b8d451c19baf77fa081db0a7af5d098daf80e5935f68d4ee9a481efabd39d630289338ee207bcfaf3c68dbd73bb9a603de1bcbe494c7b33d6ef28b0b8714cfdf241e97abf61b6cab55683716fadee320ef6ffc2b8b20d7e30a7b22ed03eae403bb77989322a84a4d591011", 0x75}, {&(0x7f0000009680)="7c885314411a75ade1bbb9617aec59b631b1dc9c3595c9f5b1da1854d64e7b6ac490d9f7f5d7a9a2d41b74e2d2d75abd857e09a0b4f63a0a5325e49750e72d48c3711c6a1433f81bfe25e109e9f8fc", 0x4f}], 0x2, &(0x7f0000009740)=[@hopopts_2292={{0x148, 0x29, 0x36, {0x5e, 0x25, '\x00', [@ra={0x5, 0x2, 0x8000}, @hao={0xc9, 0x10, @remote}, @generic={0x62, 0xf1, "1035d1b05f5270261ca2c15351055cf78061f87fe3c0092a45d69993c10edcccf88534765673d2c4d77e419dbd07d5dedaad6c7590fe2c67a5bc8f129b21374f7481e6f255434a1c0c132bcf707dbcba085d2fac924d5eda5814f5e668a2aa13c4d64f216bb42bf1843dae3887dd45741f19be50b7e097634dcdd58e8e3875582604b9fe034096b6b7dd880fd8e5eada3bf399f623bd7f73fcbdff62508a8e4ee6735b756b3017bba4d38e27cc10d2bd769e959069ace3b7ec84022df0f3b8a93c99b205857d06146e323dda16cf73ae11afa9fa8933b84f49546e01bb1522c6b1268915f71f83ad9c19a2da315ad0dbe7"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3a}}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x7}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x0, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x170}}], 0x6, 0x8010) r6 = dup(r4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:34:38 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 2) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:34:38 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 24) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:34:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {0xffff8000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:34:38 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 23) 20:34:38 executing program 1: r0 = clone3(&(0x7f0000000940)={0x200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = clone3(&(0x7f0000000300)={0x100000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x39}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) tkill(r2, 0x17) r3 = clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380)=0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r1, r2], 0x2}, 0x58) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[0x0, 0x0], 0x2}, 0x58) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004ac0)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r7}}, './file1\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280), 0x0, 0x40000) sendfile(r4, r4, 0x0, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000180)=[{&(0x7f0000000040)="c90ebef38e2dce8520c60107364d71434f766889a1b5045909a31a8b78d917aab7d97a8b8d40468e8d2f80f31f03f78792e0a04ebca1a75bc2afa4e6e92fb4d04d0a74cb071f299ca336543cac988b120a211351a18e2ba09294b0276e42abbb2c4d92aba3af902a13e17fa9c04c55ca747706007e15b0de9fc17ed5e0273f89e00cb68a40d7e70ad1853348197e2c5c3c7bff3a5e1f7464869aea3218cec6889c51825449b5e5ac33a152ff", 0xac}, {&(0x7f0000000200)="e70f939fad0828aeed3791bd7ebcca8b372e69f753a8572f2b646dbf962d951866782f8a9d3b0bbf2dfec71305451cc0f068e774491704b3114da3c7bc4b0484600336d547aa0bc9f94cd39a7f62a55c5e4e172889ee924c23685f1ccd78d48ea174ebe627590b9c4e493de8ac", 0x6d}, {&(0x7f0000000280)="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", 0xda7}], 0x3, 0x0) r9 = syz_mount_image$nfs4(&(0x7f00000019c0), &(0x7f0000001a00)='./file1\x00', 0x4, 0x4, &(0x7f0000001cc0)=[{&(0x7f0000001a40)="cc369d9c0cffc52fc6564a5dc247aec10924f1fefe5802675f331e27d966b61221078bb5da420ef1e477aaa2462a1563e1f733375ddd3b9a830e80e55c7956b7a1bdeb0179e044c46898570ce8baa485ce18ea94488d13d59e125e967b94b6106818ca507c7c249d07ee9abc7ca839bf7c41eb5ae22f8327b9cf5573d89bd26bca762ec5280f112e35e197c04d6c4fc6a4740a25388f3f08d7f5d7208a90696c30e1fb9b9e66f4c6315d13ed919cd31fc9ce79d33fa460c727314437da1be96460a2795ac7125bbe60ecdba29ab5259f7d8696f0c62f2e790c1a5922ac351eecb1", 0xe1, 0x7c}, {&(0x7f0000001b40)="9a3d411e675aaa9a04d21fe1ce3d4e0c87b70586f19350a2049dfa78", 0x1c, 0x3}, {&(0x7f0000001b80)="b6862c3f9b2fb45c1b2460f1e135bdb8f2c56858f804651705572f50ee9f94efd6c59bdd3106b5a31cc0ca3dba8de1b99502247e02fec3e368bcafd20b2b758225f61dcfb6c616", 0x47, 0x4}, {&(0x7f0000001c00)="045d79f2ce81ae76f84eb4dc16980c98e4e4ca249ef17402261410ae6b20e85279ab850f920ace44a6a7138f5d4153069afcce281cf2d23b13f31cba7832d3a0c983669e1f07140f14faea0f26372f31ba396f08c61e55a32341ab083450435afa0d1d02d624bfed9e85ab5174acfac7b80c38282ead2ee072d75e8bc79f82254907307028c4d7f01aee34afc1c4a18eabc3aacfd040a953d6a1a7e7eeb90e24683f", 0xa2, 0x9}], 0x40800, &(0x7f0000001d40)={[{'+'}], [{@euid_lt}, {@fsname={'fsname', 0x3d, '(,!'}}, {@appraise_type}]}) r10 = syz_open_procfs$userns(r3, &(0x7f0000002180)) splice(r9, &(0x7f0000001d80)=0xe01, r10, &(0x7f00000021c0)=0x5, 0x1f, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10001) clone3(&(0x7f0000000240)={0x1000080, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/166, 0xa6, &(0x7f00000009c0)=""/4096, &(0x7f0000000200)=[r2, r0, r0, r5, r0], 0x5, {r8}}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 20:34:38 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x3, 0xa8, 0x3f, 0x0, 0x0, 0xffffffffffffe273, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x1, 0x1}, 0x3100, 0x1, 0x5, 0x8, 0x10000, 0x4, 0x5, 0x0, 0x7fff, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r0, &(0x7f00000003c0)='./file1/file0\x00', 0x408001, 0x4a) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) r4 = openat$cgroup_subtree(r2, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file1/file0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) ioctl$VT_RELDISP(r2, 0x5605) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') fcntl$dupfd(r3, 0x0, r0) 20:34:38 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 3) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 2247.824651] FAULT_INJECTION: forcing a failure. [ 2247.824651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2247.825650] CPU: 1 PID: 19133 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2247.826249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2247.827099] Call Trace: [ 2247.827303] [ 2247.827481] dump_stack_lvl+0x8b/0xb3 [ 2247.827793] should_fail.cold+0x5/0xa [ 2247.828097] _copy_from_user+0x2a/0x170 [ 2247.828417] copy_msghdr_from_user+0x89/0x150 [ 2247.828797] ? __copy_msghdr+0x4b0/0x4b0 [ 2247.829121] ? lock_is_held_type+0xd7/0x130 [ 2247.829471] ? find_held_lock+0x2c/0x110 [ 2247.829804] ? lock_release+0x3b2/0x750 [ 2247.830121] ___sys_sendmsg+0xdd/0x1b0 [ 2247.830440] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2247.830807] ? lock_is_held_type+0xd7/0x130 [ 2247.831152] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2247.831539] ? trace_rcu_dyntick+0x1a7/0x250 [ 2247.831895] ? exc_page_fault+0xc4/0x1a0 [ 2247.832226] ? exc_page_fault+0xc4/0x1a0 [ 2247.832548] ? lockdep_hardirqs_on+0x79/0x100 [ 2247.832906] ? exc_page_fault+0xc4/0x1a0 [ 2247.833232] ? asm_exc_page_fault+0x22/0x30 [ 2247.833573] ? lock_is_held_type+0xd7/0x130 [ 2247.833922] __sys_sendmmsg+0x18b/0x460 [ 2247.834240] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2247.834593] ? __sanitizer_cov_trace_pc+0x7/0x70 [ 2247.834997] ? lock_is_held_type+0xd7/0x130 [ 2247.835333] ? irqentry_enter+0x26/0x60 [ 2247.835648] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2247.836072] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2247.836490] ? lockdep_hardirqs_on+0x79/0x100 [ 2247.836849] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2247.837281] __x64_sys_sendmmsg+0x99/0x100 [ 2247.837611] do_syscall_64+0x3b/0x90 [ 2247.837904] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2247.838307] RIP: 0033:0x7fb1f7990b19 [ 2247.838608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.839983] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2247.840564] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2247.841108] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2247.841647] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2247.842193] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 2247.842746] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2247.843314] 20:34:38 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 25) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:34:38 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x3, 0xa8, 0x3f, 0x0, 0x0, 0xffffffffffffe273, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x1, 0x1}, 0x3100, 0x1, 0x5, 0x8, 0x10000, 0x4, 0x5, 0x0, 0x7fff, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r0, &(0x7f00000003c0)='./file1/file0\x00', 0x408001, 0x4a) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) r4 = openat$cgroup_subtree(r2, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file1/file0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) ioctl$VT_RELDISP(r2, 0x5605) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') fcntl$dupfd(r3, 0x0, r0) 20:34:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {0xffffff7f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:34:38 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cae, 0x1, @perf_bp={&(0x7f0000000600), 0x7}, 0xc44c, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0xb1, 0xe5, 0x81, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0xa043, 0x1}, 0x4000, 0x0, 0x7, 0x4, 0x31, 0x3, 0x3, 0x0, 0x40, 0x0, 0x3}, r0, 0xb, r0, 0x0) sendfile(r1, r0, &(0x7f0000000240)=0xff, 0x7) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)="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", 0xfe}], 0x1}, 0x4000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) [ 2247.899410] FAULT_INJECTION: forcing a failure. [ 2247.899410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2247.900414] CPU: 1 PID: 19181 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2247.901021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2247.901871] Call Trace: [ 2247.902078] [ 2247.902256] dump_stack_lvl+0x8b/0xb3 [ 2247.902574] should_fail.cold+0x5/0xa [ 2247.902877] _copy_from_user+0x2a/0x170 [ 2247.903191] copy_msghdr_from_user+0x89/0x150 [ 2247.903551] ? __copy_msghdr+0x4b0/0x4b0 [ 2247.903874] ? __lock_acquire+0x164d/0x5e70 [ 2247.904230] ___sys_sendmsg+0xdd/0x1b0 [ 2247.904540] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2247.904900] ? lock_is_held_type+0xd7/0x130 [ 2247.905254] ? lock_is_held_type+0xd7/0x130 [ 2247.905601] ? find_held_lock+0x2c/0x110 [ 2247.905920] ? lock_release+0x3b2/0x750 [ 2247.906227] ? __might_fault+0xd1/0x170 [ 2247.906551] ? lock_downgrade+0x6d0/0x6d0 [ 2247.906875] ? lock_is_held_type+0xd7/0x130 [ 2247.907224] __sys_sendmmsg+0x18b/0x460 [ 2247.907546] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2247.907905] ? bit_wait_timeout+0x170/0x170 [ 2247.908251] ? syscall_enter_from_user_mode+0x18/0x50 [ 2247.908653] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2247.909090] ? __traceiter_irq_enable+0xa0/0xa0 [ 2247.909454] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2247.909863] __x64_sys_sendmmsg+0x99/0x100 [ 2247.910206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2247.910618] do_syscall_64+0x3b/0x90 [ 2247.910916] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2247.911316] RIP: 0033:0x7f1f0562eb19 [ 2247.911606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.912968] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2247.913544] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2247.914084] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2247.914635] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2247.915166] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2247.915712] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2247.916274] 20:34:38 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 26) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) [ 2248.009571] FAULT_INJECTION: forcing a failure. [ 2248.009571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2248.010588] CPU: 1 PID: 19241 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2248.011196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2248.012038] Call Trace: [ 2248.012249] [ 2248.012431] dump_stack_lvl+0x8b/0xb3 [ 2248.012740] should_fail.cold+0x5/0xa [ 2248.013041] _copy_from_user+0x2a/0x170 [ 2248.013367] copy_msghdr_from_user+0x89/0x150 [ 2248.013725] ? __copy_msghdr+0x4b0/0x4b0 [ 2248.014046] ? __lock_acquire+0x164d/0x5e70 [ 2248.014406] ___sys_sendmsg+0xdd/0x1b0 [ 2248.014724] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2248.015084] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2248.015509] ? lock_is_held_type+0xd7/0x130 [ 2248.015857] ? find_held_lock+0x2c/0x110 [ 2248.016184] ? lock_release+0x3b2/0x750 [ 2248.016496] ? __might_fault+0xd1/0x170 [ 2248.016817] ? lock_downgrade+0x6d0/0x6d0 [ 2248.017148] ? lock_is_held_type+0xd7/0x130 [ 2248.017493] __sys_sendmmsg+0x18b/0x460 [ 2248.017825] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2248.018181] ? bit_wait_timeout+0x170/0x170 [ 2248.018529] ? syscall_enter_from_user_mode+0x18/0x50 [ 2248.018935] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2248.019361] ? __traceiter_irq_enable+0xa0/0xa0 [ 2248.019727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2248.020134] __x64_sys_sendmmsg+0x99/0x100 [ 2248.020464] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2248.020872] do_syscall_64+0x3b/0x90 [ 2248.021171] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2248.021574] RIP: 0033:0x7f1f0562eb19 [ 2248.021861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2248.023236] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2248.023813] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2248.024363] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2248.024900] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2248.025438] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2248.025977] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2248.026540] 20:34:39 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 4) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:34:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {0xffffffe4}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2248.135995] FAULT_INJECTION: forcing a failure. [ 2248.135995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2248.137198] CPU: 1 PID: 19248 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2248.137810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2248.138695] Call Trace: [ 2248.138893] [ 2248.139072] dump_stack_lvl+0x8b/0xb3 [ 2248.139394] should_fail.cold+0x5/0xa [ 2248.139698] _copy_from_user+0x2a/0x170 [ 2248.140015] copy_msghdr_from_user+0x89/0x150 [ 2248.140374] ? __copy_msghdr+0x4b0/0x4b0 [ 2248.140709] ? __lock_acquire+0x164d/0x5e70 [ 2248.141059] ___sys_sendmsg+0xdd/0x1b0 [ 2248.141378] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2248.141744] ? lock_is_held_type+0xd7/0x130 [ 2248.142099] ? lock_is_held_type+0xd7/0x130 [ 2248.142444] ? find_held_lock+0x2c/0x110 [ 2248.142766] ? lock_release+0x3b2/0x750 [ 2248.143091] ? __might_fault+0xd1/0x170 [ 2248.143411] ? lock_downgrade+0x6d0/0x6d0 [ 2248.143743] ? lock_is_held_type+0xd7/0x130 [ 2248.144085] __sys_sendmmsg+0x18b/0x460 [ 2248.144412] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2248.144767] ? bit_wait_timeout+0x170/0x170 [ 2248.145105] ? syscall_enter_from_user_mode+0x18/0x50 [ 2248.145508] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2248.145932] ? __traceiter_irq_enable+0xa0/0xa0 [ 2248.146300] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2248.146725] __x64_sys_sendmmsg+0x99/0x100 [ 2248.147075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2248.147489] do_syscall_64+0x3b/0x90 [ 2248.147790] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2248.148194] RIP: 0033:0x7fb1f7990b19 [ 2248.148479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2248.149861] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2248.150445] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2248.150979] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2248.151510] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2248.152054] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 2248.152593] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2248.153150] 20:34:55 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 24) [ 2264.749618] FAULT_INJECTION: forcing a failure. [ 2264.749618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2264.750879] CPU: 1 PID: 19260 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2264.751485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2264.752339] Call Trace: [ 2264.752545] [ 2264.752723] dump_stack_lvl+0x8b/0xb3 [ 2264.753038] should_fail.cold+0x5/0xa [ 2264.753345] _copy_from_user+0x2a/0x170 [ 2264.753668] copy_msghdr_from_user+0x89/0x150 [ 2264.754031] ? __copy_msghdr+0x4b0/0x4b0 [ 2264.754360] ? __lock_acquire+0x164d/0x5e70 [ 2264.754728] ___sys_sendmsg+0xdd/0x1b0 [ 2264.755048] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2264.755399] ? lock_is_held_type+0xd7/0x130 [ 2264.755760] ? lock_is_held_type+0xd7/0x130 [ 2264.756096] ? find_held_lock+0x2c/0x110 [ 2264.756427] ? lock_release+0x3b2/0x750 [ 2264.756753] ? __might_fault+0xd1/0x170 [ 2264.757077] ? lock_downgrade+0x6d0/0x6d0 [ 2264.757416] ? lock_is_held_type+0xd7/0x130 [ 2264.757768] __sys_sendmmsg+0x18b/0x460 [ 2264.758102] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2264.758461] ? bit_wait_timeout+0x170/0x170 [ 2264.759076] ? syscall_enter_from_user_mode+0x18/0x50 [ 2264.759493] ? perf_trace_preemptirq_template+0xa2/0x420 20:34:55 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x20, &(0x7f0000000000)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000020101020000001e0080007f5064f153d9906655b7f04fdc6c4f4d000213000008001a4000000000bb113d55298d7cc0fe01bd6cb838fb093d91cf084aef0bd27df08bad4262fcae497e9bb2e0d7066ce93f5079821da1c8b204e46b6b683cb1030ebe800dc56b95e459"], 0x1c}}, 0x0) readv(r4, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/240, 0xf0}, {&(0x7f0000000640)=""/9, 0x9}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/136, 0x88}], 0x8) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x80, 0x0) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000000800)) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r0) 20:34:55 executing program 1: clone3(&(0x7f0000000940)={0x200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 20:34:55 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r2, 0x88, 0x68, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'geneve0\x00', {0x4}, 0x7}) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:34:55 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x16, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) 20:34:55 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 5) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:34:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2264.759919] ? __traceiter_irq_enable+0xa0/0xa0 [ 2264.760402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.760867] __x64_sys_sendmmsg+0x99/0x100 [ 2264.761193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.761579] do_syscall_64+0x3b/0x90 [ 2264.761864] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2264.762254] RIP: 0033:0x7fb1f7990b19 [ 2264.762537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.762612] FAULT_INJECTION: forcing a failure. [ 2264.762612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2264.763940] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2264.763957] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2264.763969] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2264.763978] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2264.763988] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 2264.763997] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2264.764021] [ 2264.772861] CPU: 0 PID: 19264 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2264.773912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2264.775406] Call Trace: [ 2264.775763] [ 2264.776091] dump_stack_lvl+0x8b/0xb3 [ 2264.776655] should_fail.cold+0x5/0xa [ 2264.777211] _copy_from_user+0x2a/0x170 [ 2264.777795] copy_msghdr_from_user+0x89/0x150 [ 2264.778451] ? __copy_msghdr+0x4b0/0x4b0 [ 2264.779062] ? __lock_acquire+0x164d/0x5e70 [ 2264.779731] ___sys_sendmsg+0xdd/0x1b0 [ 2264.780309] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2264.780982] ? lock_is_held_type+0xd7/0x130 [ 2264.781642] ? lock_is_held_type+0xd7/0x130 [ 2264.782269] ? find_held_lock+0x2c/0x110 [ 2264.782917] ? lock_release+0x3b2/0x750 [ 2264.783491] ? __might_fault+0xd1/0x170 [ 2264.784068] ? lock_downgrade+0x6d0/0x6d0 [ 2264.784682] ? lock_is_held_type+0xd7/0x130 [ 2264.784873] FAULT_INJECTION: forcing a failure. [ 2264.784873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2264.785325] __sys_sendmmsg+0x18b/0x460 [ 2264.786788] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2264.787437] ? bit_wait_timeout+0x170/0x170 [ 2264.788062] ? syscall_enter_from_user_mode+0x18/0x50 [ 2264.788815] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2264.789604] ? __traceiter_irq_enable+0xa0/0xa0 [ 2264.790295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.791063] __x64_sys_sendmmsg+0x99/0x100 [ 2264.791678] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.792437] do_syscall_64+0x3b/0x90 [ 2264.792995] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2264.793742] RIP: 0033:0x7f67303d7b19 [ 2264.794270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.796789] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2264.797870] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2264.798883] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2264.799874] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2264.800889] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2264.801895] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2264.802963] [ 2264.803296] CPU: 1 PID: 19269 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2264.803915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2264.804738] Call Trace: [ 2264.804941] [ 2264.805121] dump_stack_lvl+0x8b/0xb3 [ 2264.805425] should_fail.cold+0x5/0xa [ 2264.805729] _copy_from_user+0x2a/0x170 [ 2264.806040] copy_msghdr_from_user+0x89/0x150 [ 2264.806401] ? __copy_msghdr+0x4b0/0x4b0 [ 2264.806734] ? __lock_acquire+0x164d/0x5e70 [ 2264.807084] ___sys_sendmsg+0xdd/0x1b0 [ 2264.807401] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2264.807768] ? lock_is_held_type+0xd7/0x130 [ 2264.808108] ? find_held_lock+0x2c/0x110 [ 2264.808435] ? lock_release+0x3b2/0x750 [ 2264.808745] ? __might_fault+0xd1/0x170 [ 2264.809064] ? lock_downgrade+0x6d0/0x6d0 [ 2264.809390] ? lock_is_held_type+0xd7/0x130 [ 2264.809738] __sys_sendmmsg+0x18b/0x460 [ 2264.810060] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2264.810411] ? bit_wait_timeout+0x170/0x170 [ 2264.810761] ? syscall_enter_from_user_mode+0x18/0x50 [ 2264.811160] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2264.811577] ? __traceiter_irq_enable+0xa0/0xa0 [ 2264.811944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.812416] __x64_sys_sendmmsg+0x99/0x100 [ 2264.812944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.813348] do_syscall_64+0x3b/0x90 [ 2264.813645] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2264.814043] RIP: 0033:0x7f1f0562eb19 [ 2264.814334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.815692] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2264.816270] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2264.816804] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2264.817345] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 20:34:55 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 27) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) [ 2264.817877] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2264.818565] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2264.819137] 20:34:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0}, 0x58) [ 2264.876145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:34:55 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 6) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:34:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x3, 0x0, 0x0}, 0x58) 20:34:55 executing program 6: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$setopts(0x4206, r0, 0x100000000001, 0x44) ptrace(0x4208, r0) ptrace(0x4208, r0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, r0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) [ 2264.965273] FAULT_INJECTION: forcing a failure. [ 2264.965273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2264.966338] CPU: 1 PID: 19335 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2264.966968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2264.967843] Call Trace: [ 2264.968047] [ 2264.968227] dump_stack_lvl+0x8b/0xb3 [ 2264.968544] should_fail.cold+0x5/0xa [ 2264.968847] _copy_from_user+0x2a/0x170 [ 2264.969161] copy_msghdr_from_user+0x89/0x150 [ 2264.969529] ? __copy_msghdr+0x4b0/0x4b0 [ 2264.969864] ? __lock_acquire+0x164d/0x5e70 [ 2264.970229] ___sys_sendmsg+0xdd/0x1b0 [ 2264.970546] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2264.970925] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2264.971375] ? lock_is_held_type+0xd7/0x130 [ 2264.971732] ? find_held_lock+0x2c/0x110 [ 2264.972061] ? lock_release+0x3b2/0x750 [ 2264.972381] ? __might_fault+0xd1/0x170 [ 2264.972706] ? lock_downgrade+0x6d0/0x6d0 [ 2264.973046] ? lock_is_held_type+0xd7/0x130 [ 2264.973404] __sys_sendmmsg+0x18b/0x460 [ 2264.973736] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2264.974099] ? bit_wait_timeout+0x170/0x170 [ 2264.974449] ? syscall_enter_from_user_mode+0x18/0x50 [ 2264.974872] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2264.975302] ? __traceiter_irq_enable+0xa0/0xa0 [ 2264.975670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.976081] __x64_sys_sendmmsg+0x99/0x100 [ 2264.976415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.976819] do_syscall_64+0x3b/0x90 [ 2264.977119] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2264.977531] RIP: 0033:0x7fb1f7990b19 [ 2264.977826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.979214] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2264.979793] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2264.980344] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2264.980892] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2264.981430] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 2264.981970] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2264.982521] 20:34:56 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 25) 20:34:56 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 28) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:34:56 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) clock_gettime(0x0, &(0x7f00000049c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004840)=[{{&(0x7f00000023c0)=@tipc=@name, 0x80, &(0x7f0000002600)=[{&(0x7f0000002440)=""/225, 0xe1}, {&(0x7f0000002540)=""/185, 0xb9}], 0x2}, 0xca73}, {{&(0x7f0000002640)=@nl=@unspec, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000026c0)=""/180, 0xb4}, {&(0x7f0000002780)}, {&(0x7f00000027c0)=""/45, 0x2d}, {&(0x7f0000002800)=""/215, 0xd7}, {&(0x7f0000002900)=""/205, 0xcd}, {&(0x7f0000002a00)=""/166, 0xa6}], 0x6, &(0x7f0000002b40)=""/173, 0xad}, 0x1}, {{&(0x7f0000002c00)=@phonet, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002c80)}], 0x1, &(0x7f0000002d00)}, 0x8}, {{&(0x7f0000002d40)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000002dc0)=""/199, 0xc7}, {&(0x7f0000002ec0)=""/89, 0x59}, {&(0x7f0000002f40)=""/38, 0x26}, {&(0x7f0000002f80)=""/236, 0xec}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x5, &(0x7f0000004100)=""/42, 0x2a}, 0x3f}, {{&(0x7f0000004140)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000004500)=[{&(0x7f00000041c0)=""/89, 0x59}, {&(0x7f0000004240)=""/218, 0xda}, {&(0x7f0000004340)=""/166, 0xa6}, {&(0x7f0000004400)=""/229, 0xe5}], 0x4, &(0x7f0000004540)=""/23, 0x17}, 0x80000000}, {{&(0x7f0000004580)=@x25, 0x80, &(0x7f0000004700)=[{&(0x7f0000004600)=""/35, 0x23}, {&(0x7f0000004640)=""/165, 0xa5}], 0x2, &(0x7f0000004740)=""/236, 0xec}, 0x4cd}], 0x6, 0x3, &(0x7f0000004a00)={r2, r3+10000000}) sendmmsg$inet6(r1, &(0x7f0000005bc0)=[{{&(0x7f0000002200)={0xa, 0x4e21, 0x40, @rand_addr=' \x01\x00', 0x101}, 0x1c, &(0x7f0000002380)=[{&(0x7f0000002240)="c084efef76edd498c096f1769272e843de51fcf2dc7e80a217e3e13c0b3a3f6cc4e9abf3ca8b5bbb3ee8ecd0cd957b98513eb17ad7f7127df214d7fad14ed0e81a1b9f7c8822f64321055e7a6ff56c91bc5013df00c168323ee3eeac1d15f0db4d29944c8359193aa8250ba7edb68b327350c8b848fdf2f3d3ff4548cb29660a34f348a79aa939224e67a7e62ce1da2d6b0c8426994ed9c8068fbf892ce81a6241d74bcea386cf83355d610c6cec61f6b1270750a393d5f4887525577a2032401bbe231b7800", 0xc6}, {&(0x7f0000002340)="94d7fde210fa6a7813f098765aa18d6630a01543f82e249faa23", 0x1a}], 0x2, &(0x7f0000005c00)=ANY=[@ANYBLOB="380000000000000029000000390000008904003f00000000fc020000000000000000000000000000fe8000000000000000000000000000bb38000000000000002900000039000000330402020000000020010000000000000000000000000000fe880000000000000000000000000001240000000000000029009a003200"/144, @ANYRES32=r4, @ANYBLOB="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"], 0x1158}}], 0x1, 0x7ffffff7) sendmmsg$sock(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="c4ff8bf4e71d8af66934c42b94f46ac7bcf9a6db700639150250cb6a148dc2d7301076d0e9bec256857aa9aaa6e2c674b1cd37e828aaceb60a0c0283fc491343ab167081270f87fd33be484ba40f40d14322d24e3e402052908c604b26d05879c9a36b1bd8a58edb0b05e73048f7508a7a6a9cadb102939a26067a33b5fa3bcebd7b04e414052f050eae45d0c4825dc657d7e254c8c30d7ab6e68d2bdc55f6d2fd7c424fc9a245597aa954ea82acca69b15504f98721efb250818bb25418d7b5c65763c331ce078de6d243d033b801448d0623b98e4a192b75a596720e741f069398d9ddc93e2411760e32627d91", 0xee}, {&(0x7f0000000000)="b72f0e01ad24703a2e7a7420b4ecbc736845cfd294ad99ad616bedf585470682c9b8f231e7d859d0b442b93226bac0aa565964e721eb96c0efa0859e7bf977c30045562ae2439c279dd49464f9e48f7262d3205987d20dfaf40843f58d00c1d320d7a44504f876aa3d79803663fc33be91f44f6daa5bd4699234d924da7b1bdd06a2934b7b7be48ea7373d0a5cd35e586d38d80befe6d58768e8fd6560725b70a63c005006ca4e2339", 0xa9}, {&(0x7f0000000200)="328bd7cfd1cc2e4292241fbe14b1c5b25b2e68f9ab14603bb99552d6ae02fc630ba5a0a2d32f7676717d5f804ca16056c4715c3a3a9589ffe3b74f1afed3bb6b2cdc4f31a07edcb68d1e09f51f7e3b687c57c7f80ad931084a6cfd02738ec3744abc3da7c467f53af17f9f5cf6", 0x6d}, {&(0x7f0000000300)="096df0f2efac4c7fdd5e8f1f66f9d8", 0xf}, {&(0x7f0000000340)="4afe1767ca5fdb8c438f70ab5ecb48189c384a04e6898b7fc7", 0x19}, {&(0x7f0000000380)="3ad8a8d5084c57692a4760d0d66f41fb70b35f4b14d5b7cac2b7807a54dd90c2eebe037bc5c15e14bec1d0fa62ab6f680d74a02bb92d646d6556a7bf5d2535fd4867e7b1ab2b54d68c510dd2015f3851de20d0d0842c90556083d9a5f1e289ebe44778a31e72e127630fd804fd0d6c84d708ae04cef9a21f0a6e62e4b5ac1e5fd8950ad5f80c65c7ec05ca95a158bdde4bf3b495200a3f80e078090ca366fb80565b91922fd73e1fa98e2ee8c6fd5fcf983dc8f3332714f5479fc307d4ef82", 0xbf}, {&(0x7f0000000440)="5e4e54433a59a2d44da4e6a6575d10703fb36e92abbeef162aa3cf20e8a8e1bde7be344856b2dd1b876a446162372d91ebafa75122d0f515780702e825e2b9d2eb4eab351127cd24ae9cf5d592ec3ccb356c7ec07b666bd86bd10a05e9b61c25a01cbf7c1a879c56651a27b5497eb7730509fd8f7a5046a69929ca16ed299b342f61d60f87c95486423e7f4dc5ba9bc4", 0x90}, {&(0x7f00000006c0)="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", 0x1000}], 0x8, &(0x7f00000016c0)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x18}}, {{&(0x7f0000001700)=@phonet={0x23, 0x3, 0xff, 0xff}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001780)="150dab53935941edd08adde876c6e693c5afaf5b7c8339253f9a2ee59dc5a85e80b39a99a5dc03c2180beeaba530ff683f61f284f0bb926de7f130e22f1bf05f8e9344c93ce7e127558eacefc7a01be1a5192d4f69c3c56d9bf8818ff6cc9c24d0507ed3e03c2d5e233df75ed32f14ebc90d85e813282283d132885da4c9ba5002e0", 0x82}, {&(0x7f0000001840)="83907e0ee19efbcf6e742e2f511784c5f944d03992a2c25c402bd8a8058598228028dd25a0a1a073457f933afc7636ccc4398513824baa838fe05cf530fb2678adf009c5aa4bf3b0fdfdcc99f426e44126e067f25ec4b2758e743dd64d0ff09594c5b616f5e242a0872f89e0edf0bb574b3271c5607f4c702fbd3b7fff39417e137ad438f32b871bdc1ea1", 0x8b}, {&(0x7f0000001900)="71ceb2869084ac0379b41fbf80727ec775f8137d5cdd50da0605c27b767969c9ac146640c7f807460a2292edf0411ea42a5319e5ad9c1201ba298f1ac4e8107e21", 0x41}, {&(0x7f0000001980)="00dae71b0fa3d2f423408f981a151f68e15901d5c756f1211c32e344ecf4962cd0be17317d717b74c126919b00f68e4a7101d053755c0b5a9e40ccc21f2edfe7ccf5bf9782222188fd2cbf2f2bdc22021a6d7c5949e7a321cbcc5d58519acc4aa165bbbc7c6534fa81", 0x69}, {&(0x7f0000001a00)="3c1c36d2ab48fb59c40a7169b82b26a0b5ef09d17c054eae3325e0e22f199c49d71ed35affe52cee98316ffdc98385cb28010fc20e6f0c30e6b3ca9b6e2979de1bcaf4ec4d4f3ccfad150b7e3839587bd69296502bf801a5a54b9d0b8c76911cbec487b3cdea9d858b4eccbcb519eab1dea82b95ef580a79fb5acd1984e0471be1", 0x81}], 0x5, &(0x7f0000001b40)=[@txtime={{0x18, 0x1, 0x3d, 0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x9b}}, @timestamping={{0x14, 0x1, 0x25, 0x4da}}, @timestamping={{0x14}}], 0x90}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001c00)="ea149e4e45a77b87e7738dfe4fa2cfcd7ce9c9f75944dbadc3d6ad70e4b32318168bbb88fc326231b383914c6be8318595ff070f063c5aa1ae5f233e032e17590e98eea18f9d13ef0c501683c7f21c4a30398ec72a6ede5d1990ac7920c38e28fa94653fbaa4ddd159fe8ec5c16b9990092c387f88df5da34a7da19a0e128130200fd063a3949288ee4bd85c48a5cf081deda82aede7af11aca32b335ed66b9fb0aadf037900d09be6533cf5677469347ef48382a016d643f555a2486aa4819c755ee5a4eea62baf50fa1ac309930229db47736de2abe43a4c19838a57f972d102722c9b962722aa8567363f52ae5b", 0xef}, {&(0x7f0000001d00)="71613abd9bc96e0c61652ade2b130532c401f58be78f3185b1950ad8389a65e2271bab22f8568dec350875c90b997a91500abf514c21b8e6699a6125d2c74369a5a135984464ecdd12ab1154f8afa6b8187110e02476b15132176144bdaf7424b85683e89ee9b7624137a0fad5603725cfba98e9850fdb8a0c203a46552a29f022afb0bb753147b50ae96402375cb0380b204b7d9ef5266c9f2a973ad1b05cfd31d27e1110ebd2d6eef9271403285ab8baf3cc53a26b8d11d826b401e8ecdccde1b2afc2fc2a60f1c4a6ae929b09ea6efe55ffa66584761b3684788340", 0xdd}, {&(0x7f0000001e00)="313fa3d4d31a47816a188d8d18ce51dd57357b52b8152000e41ff9807350eccc6619e9e664f2589b72b5778c06d7b3d974c28d32bf416eb9aa6cf2a16f48d2c9b977cee0286c1b7f516e4a24c3e9790d0ebd0b032d7152e8ba4f8d5510267be3b5b2cdeb8b43293afc98f6042b31252bce2b48d37e36e8336624dce2e85cc1221d1fab9b97f40886db98d13434a8c41273fefdfe", 0x94}, {&(0x7f0000001ec0)="446191da6fc8524a011d29ff749749e688fbf0d45e5f6bb5e5791ee113ec28b5d80275d29687cd5bb848115ca61f4d5549aaa258af94e0494a9fc16f91011d3ce85ab6eb445f3361e880e561aab1bcfc3a8bf9e94329e381420c9b56", 0x5c}, {&(0x7f0000001f40)="28eeb786114823a43523ed86355d4aaf0218b54496fab461da44f7d5d3355dc26520ddb2bd5c9536bbfa08441d2a6364b94c3342f5641f24fbccd0e01ab9814a469490da29e0c085cc365c14d96375b5961002141073", 0x56}, {&(0x7f0000001fc0)="b76ea81efa8f786635435b014d4d9e31ec7af169f03d7a8ad6731149ff271299a77f4cdaf09611aa60794f4652e0720e978c08e8e49ded424998910307f5ee8e852312aa932ac879ba1ce6710acf998bec2e1e20f555fd72924dd75ae60942e39b0cdc7a4b964f2f4f235d16a625a3d55b86afb72678d905c88413c9ca462e86742958f1811dd09e87610ce7165f080502a022aa0e7bb8807e1ffab0c1a5975931a218cee7ba", 0xa6}, {&(0x7f0000002080)="5ac63f3e6d53d4a4", 0x8}], 0x7}}], 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) [ 2265.097062] FAULT_INJECTION: forcing a failure. [ 2265.097062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2265.099011] CPU: 0 PID: 19391 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2265.099545] FAULT_INJECTION: forcing a failure. [ 2265.099545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2265.100203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2265.100225] Call Trace: [ 2265.100233] [ 2265.100244] dump_stack_lvl+0x8b/0xb3 [ 2265.100286] should_fail.cold+0x5/0xa [ 2265.104283] _copy_from_user+0x2a/0x170 [ 2265.104832] copy_msghdr_from_user+0x89/0x150 [ 2265.105462] ? __copy_msghdr+0x4b0/0x4b0 [ 2265.106028] ? __lock_acquire+0x164d/0x5e70 [ 2265.106653] ___sys_sendmsg+0xdd/0x1b0 [ 2265.107207] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2265.107872] ? lock_is_held_type+0xd7/0x130 [ 2265.108479] ? find_held_lock+0x2c/0x110 [ 2265.109052] ? lock_release+0x3b2/0x750 [ 2265.109605] ? __might_fault+0xd1/0x170 [ 2265.110163] ? lock_downgrade+0x6d0/0x6d0 [ 2265.110745] ? lock_is_held_type+0xd7/0x130 [ 2265.111360] __sys_sendmmsg+0x18b/0x460 [ 2265.111929] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2265.112580] ? bit_wait_timeout+0x170/0x170 [ 2265.113215] ? syscall_enter_from_user_mode+0x18/0x50 [ 2265.113937] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2265.114713] ? __traceiter_irq_enable+0xa0/0xa0 [ 2265.115361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.116094] __x64_sys_sendmmsg+0x99/0x100 [ 2265.116702] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.117414] do_syscall_64+0x3b/0x90 [ 2265.117956] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2265.118748] RIP: 0033:0x7f67303d7b19 [ 2265.119260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.121687] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2265.122726] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2265.123685] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2265.124677] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.125622] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2265.126573] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2265.127559] [ 2265.127896] CPU: 1 PID: 19395 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2265.128545] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2265.129408] Call Trace: [ 2265.129615] [ 2265.129797] dump_stack_lvl+0x8b/0xb3 [ 2265.130110] should_fail.cold+0x5/0xa [ 2265.130421] _copy_from_user+0x2a/0x170 [ 2265.130746] copy_msghdr_from_user+0x89/0x150 [ 2265.131111] ? __copy_msghdr+0x4b0/0x4b0 [ 2265.131442] ? __lock_acquire+0x164d/0x5e70 [ 2265.131803] ___sys_sendmsg+0xdd/0x1b0 [ 2265.132126] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2265.132504] ? lock_is_held_type+0xd7/0x130 [ 2265.132872] ? lock_is_held_type+0xd7/0x130 [ 2265.133218] ? find_held_lock+0x2c/0x110 [ 2265.133538] ? lock_release+0x3b2/0x750 [ 2265.133857] ? __might_fault+0xd1/0x170 [ 2265.134185] ? lock_downgrade+0x6d0/0x6d0 [ 2265.134518] ? lock_is_held_type+0xd7/0x130 [ 2265.134880] __sys_sendmmsg+0x18b/0x460 [ 2265.135201] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2265.135564] ? bit_wait_timeout+0x170/0x170 [ 2265.135908] ? syscall_enter_from_user_mode+0x18/0x50 [ 2265.136319] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2265.136743] ? __traceiter_irq_enable+0xa0/0xa0 [ 2265.137120] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.137536] __x64_sys_sendmmsg+0x99/0x100 [ 2265.137875] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.138289] do_syscall_64+0x3b/0x90 [ 2265.138590] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2265.139012] RIP: 0033:0x7f1f0562eb19 [ 2265.139307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.140708] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2265.141299] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2265.141853] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2265.142404] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.142978] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2265.143534] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2265.144101] 20:34:56 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 7) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 2265.200434] FAULT_INJECTION: forcing a failure. [ 2265.200434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2265.201483] CPU: 1 PID: 19399 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2265.202085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2265.202927] Call Trace: [ 2265.203125] [ 2265.203301] dump_stack_lvl+0x8b/0xb3 [ 2265.203601] should_fail.cold+0x5/0xa [ 2265.203903] _copy_from_user+0x2a/0x170 [ 2265.204214] copy_msghdr_from_user+0x89/0x150 [ 2265.204565] ? __copy_msghdr+0x4b0/0x4b0 [ 2265.204883] ? __lock_acquire+0x164d/0x5e70 [ 2265.205225] ___sys_sendmsg+0xdd/0x1b0 [ 2265.205532] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2265.205885] ? lock_is_held_type+0xd7/0x130 [ 2265.206236] ? lock_is_held_type+0xd7/0x130 [ 2265.206568] ? find_held_lock+0x2c/0x110 [ 2265.206889] ? lock_release+0x3b2/0x750 [ 2265.207194] ? __might_fault+0xd1/0x170 [ 2265.207499] ? lock_downgrade+0x6d0/0x6d0 [ 2265.207821] ? lock_is_held_type+0xd7/0x130 [ 2265.208157] __sys_sendmmsg+0x18b/0x460 [ 2265.208471] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2265.208815] ? bit_wait_timeout+0x170/0x170 [ 2265.209144] ? syscall_enter_from_user_mode+0x18/0x50 [ 2265.209538] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2265.209950] ? __traceiter_irq_enable+0xa0/0xa0 [ 2265.210309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.210720] __x64_sys_sendmmsg+0x99/0x100 [ 2265.211059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.211473] do_syscall_64+0x3b/0x90 [ 2265.211775] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2265.212184] RIP: 0033:0x7fb1f7990b19 [ 2265.212480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.213877] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2265.214457] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2265.215018] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2265.215557] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.216101] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 2265.216644] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2265.217213] [ 2265.611365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:35:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x4, 0x0, 0x0}, 0x58) 20:35:13 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 29) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:35:13 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$setopts(0x4206, r0, 0x100000000001, 0x44) ptrace(0x4208, r0) ptrace(0x4208, r0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0xb2, 0x3f, 0xff, 0x0, 0x9a9, 0x20000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x5, 0x9}, 0x4400, 0x0, 0x8b8b, 0x7, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x20d}, r0, 0xffffffffffffffff, r1, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:35:13 executing program 1: clone3(&(0x7f0000000940)={0x248213200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)={r0, 0x101}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058640)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x7, "07a8e5af1844cf"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000009c0)={r0, 0xc12}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x7, 0x200800) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r2, 0x0, r3, 0xffff}) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 20:35:13 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 8) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:35:13 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 26) 20:35:13 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x140) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "d71f526947f9cbbc5b3814e51803315f67444f7ccbb28cdf71ec7fdd6f903406a6d102a6107a1adfa9660ca4c58f2dd256d9b12752d000f56a838f2fddfeee8469bfe0d1d4144328b2b8eeebf195add2d75f997aaee346d1cf7cc4ad890b21a20e6c21f2e49dc442ddfec9a2ff7eb9a54d47164f71df85d56705c115aacc0ed61ced99e322a7f22bf57cd67bbdbcb88f67d737ff31ce162b49372b6cb2e9c1fc485d5b1abbe4169cb888ca33beb490b68302dac246ce6c70b68f4659796fedd368b90482bb9df3c6f0dbf143363400ce79b8cdf23086a02bdb91085074650f2c2e918179db8e7f4d6518c7f97c7eb4aa9ee6601ada4050b6ea20ad75923b8853", "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"}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0xb51f, 0xc002) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7, 0x2, 0x1, 0x2, 0x0, 0x400, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa2f9, 0x4, @perf_config_ext={0x5a1b6110, 0x217}, 0x4, 0x100000000, 0xf6e4b7ac, 0x5, 0x4, 0x3f, 0x1ff, 0x0, 0x0, 0x0, 0x9aea}, 0x0, 0xe, r3, 0xb) write$P9_RMKDIR(r2, &(0x7f0000000000)={0x14}, 0x14) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001240)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001640)={0x19, 0x0, {0x0, @usage=0x3ff, 0x0, 0x4, 0x1000, 0x1, 0x7fffffff, 0x7fffffff, 0xb9, @struct={0x0, 0x9c}, 0x7, 0x7, [0x0, 0xffffffff, 0x100000001, 0x0, 0x3, 0xa36]}, {0x10001, @usage=0x8, r5, 0x2, 0x0, 0x101, 0x4, 0x0, 0x32, @struct={0x5, 0x4}, 0x3, 0x2ba, [0x7f, 0xff, 0x4, 0x0, 0x7, 0x81]}, {0x8, @struct={0x83, 0x7}, 0x0, 0x4, 0x7f1, 0x7, 0x2995, 0x3f, 0x21, @struct={0xffffffff, 0x7f}, 0x80, 0x17c8, [0x80000001, 0x1, 0x6, 0x3f, 0x4, 0x10000000000]}, {0x2, 0x5, 0x400}}) r6 = openat(r2, &(0x7f0000000040)='./file1\x00', 0x505202, 0x5b719fb9bf1435ec) fallocate(r6, 0x0, 0x0, 0x87ffffc) 20:35:13 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)) keyctl$link(0x8, r0, r0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000240)="1759ad9a9e9d30f60577fecefcd254039b9062b5ac90b3832cc7fed72b790fe839b8b6f34f7db740b9febb04", 0x2c}, {&(0x7f0000000300)="973dedcbe1b7fc70b3eec5b778940066be", 0x11}, {&(0x7f00000006c0)="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", 0x1000}], 0x3, &(0x7f0000000380)}}], 0x1, 0x3cec15390b239c7f) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x4000) accept$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) [ 2282.442796] FAULT_INJECTION: forcing a failure. [ 2282.442796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2282.443940] CPU: 1 PID: 19418 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2282.444517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2282.445324] Call Trace: [ 2282.445523] [ 2282.445703] dump_stack_lvl+0x8b/0xb3 [ 2282.446024] should_fail.cold+0x5/0xa [ 2282.446327] _copy_from_user+0x2a/0x170 [ 2282.446637] copy_msghdr_from_user+0x89/0x150 [ 2282.447012] ? __copy_msghdr+0x4b0/0x4b0 [ 2282.447336] ? __traceiter_irq_enable+0xa0/0xa0 [ 2282.447707] ? mark_held_locks+0x9e/0xe0 [ 2282.448030] ___sys_sendmsg+0xdd/0x1b0 [ 2282.448343] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2282.448715] ? lock_is_held_type+0xd7/0x130 [ 2282.449056] ? find_held_lock+0x2c/0x110 [ 2282.449374] ? lock_release+0x3b2/0x750 [ 2282.449682] ? __might_fault+0xd1/0x170 [ 2282.449997] ? lock_downgrade+0x6d0/0x6d0 [ 2282.450334] ? lock_is_held_type+0xd7/0x130 [ 2282.450678] __sys_sendmmsg+0x18b/0x460 [ 2282.451006] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2282.451360] ? bit_wait_timeout+0x170/0x170 [ 2282.451700] ? syscall_enter_from_user_mode+0x18/0x50 [ 2282.452112] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2282.452528] ? __traceiter_irq_enable+0xa0/0xa0 [ 2282.452902] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2282.453313] __x64_sys_sendmmsg+0x99/0x100 [ 2282.453656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2282.454081] do_syscall_64+0x3b/0x90 [ 2282.454395] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2282.454808] RIP: 0033:0x7f67303d7b19 [ 2282.455132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2282.456517] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2282.457125] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2282.457673] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2282.458241] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2282.458808] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2282.459335] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2282.459881] [ 2282.482435] FAULT_INJECTION: forcing a failure. [ 2282.482435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2282.483607] CPU: 1 PID: 19423 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2282.484212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2282.485066] Call Trace: [ 2282.485269] [ 2282.485452] dump_stack_lvl+0x8b/0xb3 [ 2282.485474] FAULT_INJECTION: forcing a failure. [ 2282.485474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2282.485757] should_fail.cold+0x5/0xa [ 2282.485780] _copy_from_user+0x2a/0x170 [ 2282.485797] copy_msghdr_from_user+0x89/0x150 [ 2282.485820] ? __copy_msghdr+0x4b0/0x4b0 [ 2282.485845] ? __lock_acquire+0x164d/0x5e70 [ 2282.485875] ___sys_sendmsg+0xdd/0x1b0 [ 2282.489290] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2282.489656] ? lock_is_held_type+0xd7/0x130 [ 2282.490016] ? lock_is_held_type+0xd7/0x130 [ 2282.490364] ? find_held_lock+0x2c/0x110 [ 2282.490691] ? lock_release+0x3b2/0x750 [ 2282.491014] ? __might_fault+0xd1/0x170 [ 2282.491334] ? lock_downgrade+0x6d0/0x6d0 [ 2282.491665] ? lock_is_held_type+0xd7/0x130 [ 2282.492026] __sys_sendmmsg+0x18b/0x460 [ 2282.492348] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2282.492704] ? bit_wait_timeout+0x170/0x170 [ 2282.493043] ? syscall_enter_from_user_mode+0x18/0x50 [ 2282.493445] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2282.493873] ? __traceiter_irq_enable+0xa0/0xa0 [ 2282.494240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2282.494651] __x64_sys_sendmmsg+0x99/0x100 [ 2282.495000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2282.495402] do_syscall_64+0x3b/0x90 [ 2282.495703] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2282.496104] RIP: 0033:0x7fb1f7990b19 [ 2282.496397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2282.497758] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2282.498342] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2282.498922] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2282.499474] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2282.500018] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 2282.500571] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2282.501133] [ 2282.501326] CPU: 0 PID: 19425 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2282.502418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2282.503941] Call Trace: [ 2282.504303] [ 2282.504628] dump_stack_lvl+0x8b/0xb3 [ 2282.505178] should_fail.cold+0x5/0xa [ 2282.505720] _copy_from_user+0x2a/0x170 [ 2282.506286] copy_msghdr_from_user+0x89/0x150 [ 2282.506957] ? __copy_msghdr+0x4b0/0x4b0 [ 2282.507549] ? __lock_acquire+0x164d/0x5e70 [ 2282.508186] ___sys_sendmsg+0xdd/0x1b0 [ 2282.508745] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2282.509417] ? lock_is_held_type+0xd7/0x130 [ 2282.510045] ? find_held_lock+0x2c/0x110 [ 2282.510634] ? lock_release+0x3b2/0x750 [ 2282.511220] ? __might_fault+0xd1/0x170 [ 2282.511782] ? lock_downgrade+0x6d0/0x6d0 [ 2282.512370] ? lock_is_held_type+0xd7/0x130 [ 2282.512997] __sys_sendmmsg+0x18b/0x460 [ 2282.513576] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2282.514211] ? bit_wait_timeout+0x170/0x170 [ 2282.514819] ? syscall_enter_from_user_mode+0x18/0x50 [ 2282.515564] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2282.516318] ? __traceiter_irq_enable+0xa0/0xa0 [ 2282.516982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2282.517717] __x64_sys_sendmmsg+0x99/0x100 [ 2282.518324] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2282.519054] do_syscall_64+0x3b/0x90 [ 2282.519589] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2282.520320] RIP: 0033:0x7f1f0562eb19 [ 2282.520843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2282.523249] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2282.524273] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2282.525224] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2282.526183] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2282.527155] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2282.528107] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2282.529099] 20:35:13 executing program 1: clone3(&(0x7f0000000940)={0x200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 20:35:13 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 27) 20:35:13 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 9) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:35:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x5, 0x0, 0x0}, 0x58) 20:35:13 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 30) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) [ 2282.650182] FAULT_INJECTION: forcing a failure. [ 2282.650182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2282.651372] CPU: 1 PID: 19535 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2282.651991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2282.652861] Call Trace: [ 2282.653068] [ 2282.653247] dump_stack_lvl+0x8b/0xb3 [ 2282.653563] should_fail.cold+0x5/0xa [ 2282.653881] _copy_from_user+0x2a/0x170 [ 2282.654218] copy_msghdr_from_user+0x89/0x150 [ 2282.654590] ? __copy_msghdr+0x4b0/0x4b0 [ 2282.654934] ? __lock_acquire+0x164d/0x5e70 [ 2282.655296] ___sys_sendmsg+0xdd/0x1b0 [ 2282.655624] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2282.655999] ? lock_is_held_type+0xd7/0x130 [ 2282.656371] ? lock_is_held_type+0xd7/0x130 [ 2282.656725] ? find_held_lock+0x2c/0x110 [ 2282.657059] ? lock_release+0x3b2/0x750 [ 2282.657382] ? __might_fault+0xd1/0x170 [ 2282.657724] ? lock_downgrade+0x6d0/0x6d0 [ 2282.658071] ? lock_is_held_type+0xd7/0x130 [ 2282.658430] __sys_sendmmsg+0x18b/0x460 [ 2282.658773] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2282.659168] ? bit_wait_timeout+0x170/0x170 [ 2282.659534] ? syscall_enter_from_user_mode+0x18/0x50 [ 2282.659962] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2282.660408] ? __traceiter_irq_enable+0xa0/0xa0 [ 2282.660798] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2282.661222] __x64_sys_sendmmsg+0x99/0x100 [ 2282.661584] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2282.662012] do_syscall_64+0x3b/0x90 [ 2282.662322] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2282.662743] RIP: 0033:0x7fb1f7990b19 [ 2282.663047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2282.664437] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2282.665019] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2282.665585] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2282.666135] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2282.666689] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 2282.667254] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2282.667834] [ 2282.681356] FAULT_INJECTION: forcing a failure. [ 2282.681356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2282.683169] CPU: 0 PID: 19538 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2282.684258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2282.685761] Call Trace: [ 2282.686123] [ 2282.686446] dump_stack_lvl+0x8b/0xb3 [ 2282.687017] should_fail.cold+0x5/0xa [ 2282.687569] _copy_from_user+0x2a/0x170 [ 2282.688130] copy_msghdr_from_user+0x89/0x150 [ 2282.688764] ? __copy_msghdr+0x4b0/0x4b0 [ 2282.689343] ? __lock_acquire+0x164d/0x5e70 [ 2282.689967] ___sys_sendmsg+0xdd/0x1b0 [ 2282.690524] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2282.691210] ? lock_is_held_type+0xd7/0x130 [ 2282.691890] ? find_held_lock+0x2c/0x110 [ 2282.692527] ? lock_release+0x3b2/0x750 [ 2282.693134] ? __might_fault+0xd1/0x170 [ 2282.693748] ? lock_downgrade+0x6d0/0x6d0 [ 2282.694387] ? lock_is_held_type+0xd7/0x130 [ 2282.695052] __sys_sendmmsg+0x18b/0x460 [ 2282.695672] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2282.696356] ? bit_wait_timeout+0x170/0x170 [ 2282.697026] ? syscall_enter_from_user_mode+0x18/0x50 [ 2282.697833] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2282.698653] ? __traceiter_irq_enable+0xa0/0xa0 [ 2282.699365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2282.700165] __x64_sys_sendmmsg+0x99/0x100 [ 2282.700814] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2282.701588] do_syscall_64+0x3b/0x90 [ 2282.702158] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2282.702974] RIP: 0033:0x7f67303d7b19 [ 2282.703529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2282.706138] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2282.706705] FAULT_INJECTION: forcing a failure. [ 2282.706705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2282.707234] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2282.707257] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2282.707276] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2282.707293] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2282.712221] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2282.713279] [ 2282.713634] CPU: 1 PID: 19592 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2282.714294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2282.715170] Call Trace: [ 2282.715383] [ 2282.715584] dump_stack_lvl+0x8b/0xb3 [ 2282.715906] should_fail.cold+0x5/0xa [ 2282.716209] _copy_from_user+0x2a/0x170 [ 2282.716532] copy_msghdr_from_user+0x89/0x150 [ 2282.716915] ? __copy_msghdr+0x4b0/0x4b0 [ 2282.717239] ? __lock_acquire+0x164d/0x5e70 [ 2282.717611] ___sys_sendmsg+0xdd/0x1b0 [ 2282.717950] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2282.718323] ? lock_is_held_type+0xd7/0x130 [ 2282.718695] ? lock_is_held_type+0xd7/0x130 [ 2282.719066] ? find_held_lock+0x2c/0x110 [ 2282.719395] ? lock_release+0x3b2/0x750 [ 2282.719719] ? __might_fault+0xd1/0x170 [ 2282.720046] ? lock_downgrade+0x6d0/0x6d0 [ 2282.720381] ? lock_is_held_type+0xd7/0x130 [ 2282.720745] __sys_sendmmsg+0x18b/0x460 [ 2282.721056] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2282.721407] ? bit_wait_timeout+0x170/0x170 [ 2282.721752] ? syscall_enter_from_user_mode+0x18/0x50 [ 2282.722164] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2282.722594] ? __traceiter_irq_enable+0xa0/0xa0 [ 2282.723017] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2282.723432] __x64_sys_sendmmsg+0x99/0x100 [ 2282.723780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2282.724202] do_syscall_64+0x3b/0x90 [ 2282.724505] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2282.724923] RIP: 0033:0x7f1f0562eb19 [ 2282.725221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2282.726614] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2282.727216] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2282.727766] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2282.728319] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2282.728861] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2282.729417] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2282.729978] 20:35:31 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$setopts(0x4206, r0, 0x100000000001, 0x44) ptrace(0x4208, r0) ptrace(0x4208, r0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0xb2, 0x3f, 0xff, 0x0, 0x9a9, 0x20000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x5, 0x9}, 0x4400, 0x0, 0x8b8b, 0x7, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x20d}, r0, 0xffffffffffffffff, r1, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:35:31 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 10) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:35:31 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:35:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x8, 0x0, 0x0}, 0x58) 20:35:31 executing program 1: clone3(&(0x7f0000000940)={0x10002200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x800) 20:35:31 executing program 7: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x13, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x9, 0x1, 0xfd, 0xff, 0x0, 0x5, 0x89040, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x8084, 0x7fff, 0x9, 0xf, 0x0, 0x5814, 0x1f, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x3) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)) sendmmsg$sock(r3, &(0x7f0000000100), 0x0, 0xe1991894eadaff72) socket$inet6_udp(0xa, 0x2, 0x0) 20:35:31 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 28) 20:35:31 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 31) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) [ 2300.320025] FAULT_INJECTION: forcing a failure. [ 2300.320025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.322030] CPU: 0 PID: 19650 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2300.323294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2300.325025] Call Trace: [ 2300.325452] [ 2300.325821] dump_stack_lvl+0x8b/0xb3 [ 2300.326455] should_fail.cold+0x5/0xa [ 2300.327094] _copy_from_user+0x2a/0x170 [ 2300.327721] copy_msghdr_from_user+0x89/0x150 [ 2300.328446] ? __copy_msghdr+0x4b0/0x4b0 [ 2300.329072] ? __lock_acquire+0x164d/0x5e70 [ 2300.329732] ___sys_sendmsg+0xdd/0x1b0 [ 2300.330322] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2300.331031] ? lock_is_held_type+0xd7/0x130 [ 2300.331721] ? find_held_lock+0x2c/0x110 [ 2300.332326] ? lock_release+0x3b2/0x750 [ 2300.332931] ? __might_fault+0xd1/0x170 [ 2300.333530] ? lock_downgrade+0x6d0/0x6d0 [ 2300.334161] ? lock_is_held_type+0xd7/0x130 [ 2300.334819] __sys_sendmmsg+0x18b/0x460 [ 2300.335446] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2300.336122] ? bit_wait_timeout+0x170/0x170 [ 2300.336768] ? syscall_enter_from_user_mode+0x18/0x50 [ 2300.337536] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2300.338340] ? __traceiter_irq_enable+0xa0/0xa0 [ 2300.339046] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.339842] __x64_sys_sendmmsg+0x99/0x100 [ 2300.340528] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.341306] do_syscall_64+0x3b/0x90 [ 2300.341875] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2300.342646] RIP: 0033:0x7fb1f7990b19 [ 2300.343224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.345852] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2300.346947] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2300.348009] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2300.349082] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.350125] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2300.351198] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2300.352283] [ 2300.367428] FAULT_INJECTION: forcing a failure. [ 2300.367428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.368668] CPU: 1 PID: 19659 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2300.369382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2300.370388] Call Trace: [ 2300.370641] [ 2300.370852] dump_stack_lvl+0x8b/0xb3 [ 2300.371255] should_fail.cold+0x5/0xa [ 2300.371619] _copy_from_user+0x2a/0x170 [ 2300.372027] copy_msghdr_from_user+0x89/0x150 [ 2300.372456] ? __copy_msghdr+0x4b0/0x4b0 [ 2300.372852] ? __lock_acquire+0x164d/0x5e70 [ 2300.373269] ___sys_sendmsg+0xdd/0x1b0 [ 2300.373651] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2300.374086] ? lock_is_held_type+0xd7/0x130 [ 2300.374511] ? lock_is_held_type+0xd7/0x130 [ 2300.374911] ? find_held_lock+0x2c/0x110 [ 2300.375316] ? lock_release+0x3b2/0x750 [ 2300.375702] ? __might_fault+0xd1/0x170 [ 2300.376087] ? lock_downgrade+0x6d0/0x6d0 [ 2300.376484] ? lock_is_held_type+0xd7/0x130 [ 2300.376903] __sys_sendmmsg+0x18b/0x460 [ 2300.377286] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2300.377710] ? bit_wait_timeout+0x170/0x170 [ 2300.378100] ? syscall_enter_from_user_mode+0x18/0x50 [ 2300.378571] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2300.379072] ? __traceiter_irq_enable+0xa0/0xa0 [ 2300.379529] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.380007] __x64_sys_sendmmsg+0x99/0x100 [ 2300.380405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.380879] do_syscall_64+0x3b/0x90 [ 2300.381239] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2300.381712] RIP: 0033:0x7f1f0562eb19 [ 2300.382054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.383649] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2300.384324] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2300.384960] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2300.385593] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.386233] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2300.386872] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2300.387538] [ 2300.396370] FAULT_INJECTION: forcing a failure. [ 2300.396370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.398377] CPU: 0 PID: 19664 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2300.399645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2300.401407] Call Trace: [ 2300.401819] [ 2300.402190] dump_stack_lvl+0x8b/0xb3 [ 2300.402824] should_fail.cold+0x5/0xa [ 2300.403462] _copy_from_user+0x2a/0x170 [ 2300.404102] copy_msghdr_from_user+0x89/0x150 [ 2300.404850] ? __copy_msghdr+0x4b0/0x4b0 [ 2300.405487] ? __lock_acquire+0x164d/0x5e70 [ 2300.406169] ___sys_sendmsg+0xdd/0x1b0 [ 2300.406769] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2300.407468] ? lock_is_held_type+0xd7/0x130 [ 2300.408155] ? lock_is_held_type+0xd7/0x130 [ 2300.408815] ? find_held_lock+0x2c/0x110 [ 2300.409443] ? lock_release+0x3b2/0x750 [ 2300.410038] ? __might_fault+0xd1/0x170 [ 2300.410641] ? lock_downgrade+0x6d0/0x6d0 [ 2300.411304] ? lock_is_held_type+0xd7/0x130 [ 2300.411977] __sys_sendmmsg+0x18b/0x460 [ 2300.412592] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2300.413273] ? bit_wait_timeout+0x170/0x170 [ 2300.413923] ? syscall_enter_from_user_mode+0x18/0x50 [ 2300.414732] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2300.415566] ? __traceiter_irq_enable+0xa0/0xa0 [ 2300.416283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.417078] __x64_sys_sendmmsg+0x99/0x100 [ 2300.417721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.418507] do_syscall_64+0x3b/0x90 [ 2300.419111] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2300.419889] RIP: 0033:0x7f67303d7b19 [ 2300.420446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.423076] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2300.424188] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2300.425233] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2300.426272] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.427326] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2300.428370] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2300.429468] 20:35:31 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getpeername$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) 20:35:31 executing program 6: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x702}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000000)={0x14, 0x49, 0x0, {0x1, 0x0, 0xfffffffffffffffe}}, 0x14) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xff, 0x4, 0x7f, 0x86, 0x0, 0x2, 0x10000, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8000, 0xfffffffffffffffb}, 0x800, 0xffffffffffffffc0, 0x5, 0x7, 0x5, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9}, r1, 0x8, r3, 0x2) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002880), 0x4000101, 0x7ffffff7) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000180)=0x4) write$P9_RMKDIR(r6, &(0x7f0000000000)={0x14}, 0x14) ioctl$BLKBSZGET(r6, 0x80081270, &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) 20:35:31 executing program 1: clone3(&(0x7f0000000940)={0x200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 20:35:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xe, 0x0, 0x0}, 0x58) 20:35:31 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 11) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:35:31 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) [ 2300.624164] FAULT_INJECTION: forcing a failure. [ 2300.624164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.625217] CPU: 1 PID: 19682 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2300.626079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2300.626946] Call Trace: [ 2300.627154] [ 2300.627334] dump_stack_lvl+0x8b/0xb3 [ 2300.627707] should_fail.cold+0x5/0xa [ 2300.628149] _copy_from_user+0x2a/0x170 [ 2300.628528] copy_msghdr_from_user+0x89/0x150 [ 2300.628899] ? __copy_msghdr+0x4b0/0x4b0 [ 2300.629240] ? __lock_acquire+0x164d/0x5e70 [ 2300.629593] ___sys_sendmsg+0xdd/0x1b0 [ 2300.629914] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2300.630278] ? lock_is_held_type+0xd7/0x130 [ 2300.630642] ? lock_is_held_type+0xd7/0x130 [ 2300.630990] ? find_held_lock+0x2c/0x110 [ 2300.631318] ? lock_release+0x3b2/0x750 [ 2300.631736] ? __might_fault+0xd1/0x170 [ 2300.632182] ? lock_downgrade+0x6d0/0x6d0 [ 2300.632533] ? lock_is_held_type+0xd7/0x130 [ 2300.632881] __sys_sendmmsg+0x18b/0x460 [ 2300.633202] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2300.633577] ? bit_wait_timeout+0x170/0x170 [ 2300.634043] ? syscall_enter_from_user_mode+0x18/0x50 [ 2300.634553] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2300.634992] ? __traceiter_irq_enable+0xa0/0xa0 [ 2300.635490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.635933] __x64_sys_sendmmsg+0x99/0x100 [ 2300.636267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.636754] do_syscall_64+0x3b/0x90 [ 2300.637100] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2300.637505] RIP: 0033:0x7f1f0562eb19 [ 2300.637800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.639303] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2300.639874] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2300.640423] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2300.641152] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.641694] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2300.642244] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2300.642798] 20:35:31 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 29) [ 2300.681603] FAULT_INJECTION: forcing a failure. [ 2300.681603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.683614] CPU: 0 PID: 19698 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2300.684782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2300.686403] Call Trace: [ 2300.686796] [ 2300.687154] dump_stack_lvl+0x8b/0xb3 [ 2300.687745] should_fail.cold+0x5/0xa [ 2300.688329] _copy_from_user+0x2a/0x170 [ 2300.688928] copy_msghdr_from_user+0x89/0x150 [ 2300.689619] ? __copy_msghdr+0x4b0/0x4b0 [ 2300.690246] ? __lock_acquire+0x164d/0x5e70 [ 2300.690926] ___sys_sendmsg+0xdd/0x1b0 [ 2300.691566] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2300.692265] ? lock_is_held_type+0xd7/0x130 [ 2300.692949] ? lock_is_held_type+0xd7/0x130 [ 2300.693622] ? find_held_lock+0x2c/0x110 [ 2300.694240] ? lock_release+0x3b2/0x750 [ 2300.694850] ? __might_fault+0xd1/0x170 [ 2300.695506] ? lock_downgrade+0x6d0/0x6d0 [ 2300.696151] ? lock_is_held_type+0xd7/0x130 [ 2300.696825] __sys_sendmmsg+0x18b/0x460 [ 2300.697452] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2300.698151] ? bit_wait_timeout+0x170/0x170 [ 2300.698820] ? syscall_enter_from_user_mode+0x18/0x50 [ 2300.699619] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2300.700447] ? __traceiter_irq_enable+0xa0/0xa0 [ 2300.701169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.701959] __x64_sys_sendmmsg+0x99/0x100 [ 2300.702618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.703430] do_syscall_64+0x3b/0x90 [ 2300.704013] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2300.704799] RIP: 0033:0x7fb1f7990b19 [ 2300.705363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.708014] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2300.709145] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2300.710201] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2300.711268] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.712312] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2300.713363] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2300.714436] 20:35:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x10, 0x0, 0x0}, 0x58) [ 2300.738690] FAULT_INJECTION: forcing a failure. [ 2300.738690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.740020] CPU: 1 PID: 19789 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2300.740768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2300.741626] Call Trace: [ 2300.741907] [ 2300.742145] dump_stack_lvl+0x8b/0xb3 [ 2300.742457] should_fail.cold+0x5/0xa [ 2300.742764] _copy_from_user+0x2a/0x170 [ 2300.743092] copy_msghdr_from_user+0x89/0x150 [ 2300.743578] ? __copy_msghdr+0x4b0/0x4b0 [ 2300.743951] ? __lock_acquire+0x164d/0x5e70 [ 2300.744308] ___sys_sendmsg+0xdd/0x1b0 [ 2300.744620] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2300.744994] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 2300.745548] ? lock_is_held_type+0xd7/0x130 [ 2300.745918] ? find_held_lock+0x2c/0x110 [ 2300.746241] ? lock_release+0x3b2/0x750 [ 2300.746561] ? __might_fault+0xd1/0x170 [ 2300.746931] ? lock_downgrade+0x6d0/0x6d0 [ 2300.747404] ? lock_is_held_type+0xd7/0x130 [ 2300.747777] __sys_sendmmsg+0x18b/0x460 [ 2300.748100] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2300.748481] ? bit_wait_timeout+0x170/0x170 [ 2300.748951] ? syscall_enter_from_user_mode+0x18/0x50 [ 2300.749363] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2300.749792] ? __traceiter_irq_enable+0xa0/0xa0 [ 2300.750304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.750729] __x64_sys_sendmmsg+0x99/0x100 [ 2300.751075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.751483] do_syscall_64+0x3b/0x90 [ 2300.751860] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2300.752346] RIP: 0033:0x7f67303d7b19 [ 2300.752639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.754136] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2300.754764] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2300.755487] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2300.756140] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.756689] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2300.757290] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2300.758038] 20:35:47 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 33) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:35:47 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$setopts(0x4206, r0, 0x100000000001, 0x44) ptrace(0x4208, r0) r1 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x20001, 0x176, 0x8}, 0x18) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x4, 0xf8, 0x5, 0xb0, 0x0, 0xfffffffffffffff8, 0x440, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7}, 0x800, 0x3, 0x0, 0x0, 0x1ff, 0x5, 0xff, 0x0, 0x3, 0x0, 0x4}, r0, 0x10, r1, 0x8) r2 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)='(%@\x00', r2) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}], 0x20}, 0x0) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x634, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000300)="b08e17a2c3596ebe16f9906ef98b06b51851b5720d36be430f8f0dacf39ae8c01dd5cd6945dec4af5a11aeef5871d42d6f8344415d82f770f75324553fc0a6164b2cdc12f0c5539f2579dca1bec21d63a0d320d1199e635458d964abc8980f43507efe57572ffb1fa81a", 0x6a}, {&(0x7f0000000380)="938a5022808c9245cd9ba6e4367a42d345d08c44ae832efc6313056fd77119770043a0622459d3a7ff71fe88ca30591cf781ec112a9b503d70982f39279930a9fcdd8b55e7fba0882237482fdd02ef234667ac35ba8820d2f20fa6b0f7ef17521bb88f9134cda1d0f11f26f5d01967ab11f9c8a57149c906b6264ef1d24bca2dccf5076680", 0x85}], 0x2, &(0x7f0000001f00)=ANY=[@ANYBLOB="2400005be117c7df1d8389d568f2e67e501c0019441cb900b80600000037000000aa00000000000000000000000014de00", @ANYRES32=r5, @ANYBLOB="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"], 0x258}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}, 0x6}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000940)=[@hopopts={{0xb8, 0x29, 0x36, {0x74, 0x13, '\x00', [@generic={0x5, 0x77, "9a2078d6a1d884d0fa46eb7620b3e363027767de8721b63d8bbb43f1ec403aca3974ccde6a5baacd294bbe9393fde912e6ead3b55e0905b613d6e553309d6d74fb2d1ac4a8bdd48c5c1c122b38dbe2539295dcffe6911a65a193cf4b7bfe44b2b984be14903185cbce5c2147abe73d21350a6e2acc5d0a"}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @ra]}}}, @rthdr={{0x48, 0x29, 0x39, {0x88, 0x6, 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x30}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x3c, 0x3, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x8, 0xffc0, [0x1000000000, 0x5]}}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x400}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x11, 0x2, 0x0, 0x3f, 0x0, [@remote]}}}], 0x190}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x1000, @loopback, 0x6}, 0x1c, &(0x7f0000001d00)=[{&(0x7f0000000b00)="0586a06e592d2f8f33b53c200e82e98d8bcbb24269651cb8c72a920430f928732151b2dd5a4de6da0c008307ea41a27343e2e286b20601688eb9aedf3e48b912", 0x40}, {&(0x7f0000000b40)="a64f78aa4a3ff42fcd33c2b91687fda450ba0b5043c32bf57e969c54a742f4f498f067a9e1729c2e81adca59245bf9bc3d757ceac6ce0d23350da72f17a5426a95ada16430503a5ba0c2bc153ceb7a1b016015bf82", 0x55}, {&(0x7f0000000bc0)="df6af4c136a8326ee33ba3ba5cc4473945fee36e7452937bad680b0f8e107b2e2997f95e5ca011cc387c4cc7", 0x2c}, {&(0x7f0000000c00)="1335a7366d43dd40d2f880ec518fcde1f459c6b3236094e65247bbbbb0ded4ec285f37819d6366503a8c85d0dcbb3e92dff9c08a065465853decb2086d973fe5b8adc81f6e8a04e1c4281604f5df17a476342d54807f2087a17b00c73ea83e70938e040f461a36c58c2ee0ebf2e3ed68fc74447f298e05ba7d03ff89a8d9ed5fb3f5cab5686df51165cc0d2d00cb017c7feb1124aefa515136181d9975abed9154413c292f519055dade6ba5c6b2e728af056601faf692cff5ea583a25a89b5b69404738df0afaf9d50072ad88f54ab6dcee6f0d3813809d33a0bf", 0xdb}, {&(0x7f0000000d00)="07e6158900b19fa974c9677951656f1866785d495e13877abe9678a2d2864c81c9b295270558119aad84027610c5552e320d3c7b365973c30410cdb0965edb64ad4aaf6e37acae4db28ad095904d9ea226ff3b14a76c9c42e7e024574cba410a1fc514304ee9aacc4d6054976dea6094e7e0e49b8e24799c7cc5053a7d332727a588cb28cdba44257f8aea5498a72f9403564bb0de8d222b6c56320613c275ae37c760010cf79c1c0cb7a51b2134279caf6eb2d8869ff56ef39680bff93dbc33813e9c8e6dfab239c50494a07e39513dd67f95853a659c50a24332342c527fd2b36b309a4609743dd97456a7f159a2b361493aa889004a8d6d4f9f24791cf8c8ea7a840fb02924bf1124eeeeab10b8691dfc65ab255459e19d696158e0fb47e1b495fa0b13b838e3747bd4ee1fbd4d1b8eede7a2ce346fb7dd181ab01774f5a6688daeff384b955f3e20122ec556e0f6abda2a1962f8e35680206d0c384ba962e9604539f716e0eed5638d8c625b4851854deeab2aac454bdd1a98d1e335e4986ffb168bd2fc6756dd4ebd8627cfc2f4089ae191dbf11bd80bd1d1a50f498604802bb682327bf1887ca6e2b8d6f07eb34016c1208b124c02a149a357248ecb6782681b7bf7f529fa50b8bf97c3ee1cd4d7f872c9e3ee7ad3c1667f9468bce28fae6a0e9a94807fd3162f71121f1e356d3aafdf741a709779f8577755309a339013153e055df26e3f9fd21bad5279e8f9446a6595345e237611473d0b8721bca6fa723ea2d455a6ea367847cdfda6ad2e0a649a610c0eafcab369662c284465e876f82e2edaae3f69b0b2188c5d9f6a405c457b1e0c705f16fd72c0d1a36c48e8ddc0642bcb01a2581fe89abf71a86310db47a9a34c7f919f854e055f13afdd12041b75f4033c46f3cfe090a997396316a6ac764ce545c06c67abfe53e503336f3fb808193e893fce62dc6762f2adebad04bc405deecebdd868a0fd2e7317fa9d7855470f0936df9a63f6e111418522b3486603aa9f7092a5bf56f33ccaeb16c15da2203f842713fa5dabbb173c9750e5e6f91aec27b6acec29493585d595cd6d359ab1ec6cb78ca4319d7298895836e3fec5edc5a4536062d61f9215ea0fad6a37e1f8d390e798e97aa5e8bb45d85f932690f7780871a6492d69ac731f7d7961993bffe16a814c883e09115885cbf8c732b1a0b72f253bacb950d792a9566755bae1552c48312f703beb606ce25bd565e5436c898025e33fc181407bbab98a18a6d553bd5c8463051b5a3d251d60ca6cffecbe432873f3240ce990a81e8cdfcca455abae977ba5fe8c79d9c4aac6fadf4a6ad26b1122e0bfefd0e8a0ad9c10d50d49f53873cfbc933bf62c608abc6980eb670072bc4f82bcb5fcc8c446261d92ae5ef2d5a707c76ff47ddc1a0c8de01e5c3f34fc30a0001fcb2e51ca61c39bd1119c7c4c68183e28920c010b7554490e84f6bb3dffb9b92eedd5f5972755c0b84b1a41e5bacd4eb11a95b7550406e38562aaabdbc10bba5a4ff93a507828680dfe342a8bf98845bc789e7ccc9254eab41079af195102fa45e0b65f42f2b85b0bdc70b6fea99e64da7fd4fd290b9250acbf2076898b6ca741b878f7e78e9f02d0d723e541df260f1ab8094e3e2268e7947d40365fcc0b4e166f8186656a824941642d1b99f168dda3d62576ee4789cd3c112073b81ef691a2704d4b7d30f2aed7a0ae959e6db37a00a7898f5a4811adec1cb7ed42b8056f42e14156401067ce6e9c605b04ae0343529c45a55ffea93dc43f24aad71b67732e1af3d0c11e3ffd1fd7655873866f6e63fb329144784d709f8d51fa6b1a25f1a7c9903b752370f1c263cc05c574de541c24cee6371c4a09091f4ec5e0564c730d070dd181411ac8412882e93003d40517060b1176e8c90e4e0718215241a6746e05ad23526260c21f4ec2651cd0dea62ce2534fe99b299c5ad1ca365b510a003bfa11e9e838b9fc888eb7f30770235522e6a0343cc0ed332860ce9ceeb3856f3c84647d6dbb9bc980d07c21a1e018948d2080da0c3162497bf205e44abe2d1496f3adb71f44afde881d664cbcea4e67cd8dd1b92ed90657941b0c3815c350f33c81e7044a13d32953c26f7449c61b0b8a9c1f6773a1dad3ce5a5aa48477a1274f3c2dedc3ebdd75e119ead34252c06500a8f4b77b87181f4789a9d06a95662e5d33e4d33fe189227ee9838a6d3ad7b82d9df6f0c5318df0dd29633ec214f69a0919ec932c5d3adcb76711246ce81dbc678ae328de0e213925805c7f1ad103f4d14657d5723a839a1feb8465896b80cf067a07b999a6ab6e46160aff64d58a0d9401d8ea763f5be2e77512aff0289fbb1bd0b167edef1c3e5e323a93b4122a7ea51b21f0ad6428fa315c8b599676f841e8db00310fc2a64fdafa7f9673a4db5d74437fc2ccc58d6e26eca8038ee82308946bf1d7c3b1945c9da894f0d728928f1f4584b947cddbd72fb7014e173cd26aab45cf2526b3fa67a694f9cf415415317a0c2384d1f5ea1c38fb75f496ec5445fd74b21b354cb91a87018da3f139e362d64df371e86d36f0bff51e473d1d1066d6e7c33e1b508f753f36d6c54273a91a9a6ff336012cfffb8d3d8568edc55848374fbe4b91d69bfe1bdc12e840d35b4cd65b5ba5471d0b40108ad9cf05893f66ef03d79c4dbfaa232871e5ef80af5c289896b67cdd09986dd1131ccf73422aa73162e70f06c0486401363af3053d9cadc228a132a808b75d66e11c6a9689184284b02c98d8767377024a7edd9b3cea664796ff53946f85c69e9c5f9b66514a0740c792695df661e83ff022045598e95e02a555d90f7cad1cea559c9b61fb7db476bf7ac17934000338fd54ef019cab0fef10c23de1c27d7b3723b59bb059e8a252fbe62fb6333f660e3de0c0b2c301eb39ab2cd160e52b4137ed4e498e3fa0b0f0a807214aefc5ca0bcc2d340b8e114ce8bdec0e51ee7ae338aeaa1f8c5d7e34b6b9d667d7dc00ce55e7e209df8feca784653c82376f4b7c1706af553b01395cf4ca13d72d5f3d53caba5a43656cb89d9ad3d7167ed7e1290cacfc532958688ac68e877bad6afa75973551dee46add33c01ef5136d409dffcc135ba7db23f90438a6518041c941dcdec360363b9a7de988dc859fd25c11926286af08481c0cf0e14e4f98f93fdeccdca99cc471f15ede0818b108a8b9d8485d529f132cf553042eb30c43c82cbb0c4f24e850ae8b7922d097b02726a22f3260c357ea65f9de94eaef42d20087125775b7b9293f8cb75ce6d2bdb3f543a26553b7416fa9d6cb95562a82ef83f541c8eacbdd267120cfbff675614eef25c6f4820c1a4470ddf9bc92b7e313c14c562177317eec73a18ff840d93ea75cc2f838c9cadc78f534d5e91c378072cff189d37ea5aaa18e1f6410a9e73cfb44644ffc48e901986175d28f855d12f2660d4c205fe2713ec6d37202f9bac488a8ad6587b31c9d3fa33cb215827f6a86e9083fb9dcdffb9b7a376fd05f944b999e4d0a5166b89266c07b006ded5f79d35e7c803904487530b7a444a48797cb2da292adafdff8780f079b999041f028b8c9f01ed97f9845a551c9a3162dd0e6b54b808a21ed6b8f7fd9c6cefed2fd2f889d9919327cdfa0f3274f60252aea43d642854db0f4d553207b8a93f824783b1ba9562ce15676bb96079235ce3aac04926b31122c1d86673e21efd5457f7136db83f029fef2d7fb1be11cede8cd55f5c4d53ec88e442dcc2f455c44e2f32709f5db9c290675aa8a8f3cf7200e954809e157fa32c0c0cdee38e02fcf54b8b00986ea0a2f5bc8761d0d2672c2bb4d716b64e1e0f084cf0a02fd9c440728bcd0219c64a87bba6f95257dce8fe4377abf01a2f5358557bf8b34379db493639a726b79f8dba0d50cc1fbf7d279199b40c475f7aa40a68ce5009b9f881f2f0b330f1379979c0744e431d65d79e5cf59af360395f966f0ebedda3f21c84acddbbc7f50287f8c5d68e44ea1cb1957b056da589c01e5ae2c7cb82ce7e80f334042747a833c162052295a9099c512da689c10d681e4d5829f8934f689e88c5b96638247efcdbf273d615106d616ca9b11a5dd2f995d7db32289c149c26115bfb0d7d80f27f64ce8963d46fe560cbbfdb82ab4b1dbfe397d027cbeb6193365088c763918388cd699c21c8c9ef36059afefc6ca1afff9acb1feb167e3bb8eea1f2f557230842db0370268b64ef6759f2c3d4802fb777e5e5de045854b0d1bb1a379016ffb31d0937e0804fc6a2cc35602c43c4bd66eb0dd48d7e9be0e5a5c6da5089ef953b6dc04f761066f573e6273fa2228c5f898bb26fc24ba618270799a2cfa51d91abded9d381fcccae876ba58371b2d6f0818ee7589dec42077b562461ac49db6532cfb7e65e830c52e5c9e8d54d8c8da3fa725cec3cf3122d29fa161ab6aaa8d388e4ad4f45b1e22799bdbb12f71c43469fd3a4d49482bcce085b0dd9999e4a20cb836f697e59f68613ce9b076e5dac21be56a7b9a998a13991ed1964ff6dda2f0cd8555655f58f2794d21c59ad6c7233daba4bee8c5e0a3f3dd154f2ef56e3800f582e9d5aff08963ff9caad708fcaa68f55a6b79c64696837d3cd1e30e30700bf0531a876456f00fda4a12d1b20e4a78dc89cac63fc9d1eba20df326577ded555d59ba0ca4a05fdc1b80cf3060550f65b798bdf57c31107255dba67b23def8e694fd63a2b7934f86ff3f087e647510dabdb323238fdf58ff20136eeb9bb5a0db8111c9165fea851c6f88db5fb505612c4ad73c25f2ce3161cee4bebc5f0bd8eeb83fc2d608b462f82f198630051ae090ce88b1c5df48f8619a63267f0b2e4385917cc7abb12d7a6eab9e078def733d3f0e9ee522149ecb4f4a4c1df1b95a544558fb8acdc3f31aad5f31abffeb06b323d4a207f4ee934f7c62d97c5cfe590f120b6acbfc4916e77a09a8b061d4d29ed15d72360c5e713a4bc4145c5aafe00bd25e414201b70c45ec8f383a8a0dc2e24b0a29d01d04220c094340529f48eb268205b3228de3cb68c54bfcbde2ec2197ec4e090ab9be0c831a6a05a0ff85d386949268d0bf5e338007e7f407e4c325da7064f25a44e83cdf5da2b1e38280d37142aa50322c278c4a84c276153228e68c0e8b5f5aa1ff1df8df79dd2ee4feae5818084fce9d2b622570c341dfe0e5250371a9df3ce6916a37d372ca468181de359e7e6cc1d191aa316e1bf39b41ad7b365b730706a66fd2a530d0f2b8cc2aa6c76a3a8d03ce53d9cd28eed7a1f5b9939afc6b27bf5affe6c5ba4ec0dc16a9783f426ea9966213100cea571409ee2032c20c4c59b3132816f66c2ae741494676df5608540a1cabc7d37635758b423572fbf13cdadcdb8ccaa663be26873068b0b2afd05f8f2f76f69c5a2b09da29666b29d126c49be76d86bf45da9b2ab35125218c6f37deb9a9476f83b715dda8fb2f3c7beefde19606f4b6fd44b9d715153431cac37f7abe9ad94cbaa7b5839590ca4c4ecb751771f5f977ec92b59c6caf163ce967456cfe425ffa1360490d8f390d130fb1c5444bcf3cd47a4b6abc02bfde0b976e0d82f37ae1f037127b48aaf792b8f252a18f50b0e9a9518289df37f74d56b86d3d1d6590f5ee14b8ac526ed18cd2114176b2f69c853a9b0cac9401019281533b2dfdc80f61def5d4d5f0e1318a090eca1f6e76ab0b72a74e7e94141c63b7538814046541a285a20b327431bd83b5eef4ed771ebb77171dc35266449c89b753edc6a8a0cea77705946a2573371bd48751d7547ec3c573", 0x1000}], 0x5, &(0x7f0000001d80)=[@tclass={{0x14, 0x29, 0x43, 0x7fff}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x29, 0x9, '\x00', [@hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x28, {0x0, 0x8, 0xe1, 0x5, [0x2, 0xfff, 0x9, 0xd5]}}, @padn, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xbad}}], 0x98}}], 0x3, 0x4040011) 20:35:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x11, 0x0, 0x0}, 0x58) 20:35:47 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x6}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x3, 0x0, 0x3f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)) keyctl$link(0x8, r2, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)) keyctl$link(0x8, 0x0, 0x0) add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300)="20a49de8483d9b743ce018de1317ffcbc239db6b6de7dc9ed1d09a6c7ea82a8620c106254d4455fc02639cfd2d44bedbe6c3658689b052fa5e743b9849879fcaf3c753727eb598e799ff3f9e3fa66fd063e1309e0d08a990b93f293804c6db58ba1de46947b0d4c0f38329b01c89c5dfd8d9c8f6e8fc383d94f2e1d7e86608c03d6aaf5bab9acfd3a691ea57b55da090bb66d55cc7c84cc11b8d95296dd7163d31475e3d0c9623c44c3fabc1", 0xac, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)) keyctl$link(0x8, r3, r3) add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r3) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:35:47 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 30) 20:35:47 executing program 1: clone3(&(0x7f0000000040)={0x200200, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, &(0x7f0000000140)) 20:35:47 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)=ANY=[], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000200)={0x0, @private=0xa010102, 0x0, 0x4, 'wlc\x00', 0x16, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000140), 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = clone3(&(0x7f0000000540)={0xc004900, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000240), {0x2a}, &(0x7f0000000640)=""/161, 0xa1, &(0x7f0000000300)=""/25, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x6, 0xac, 0x2, 0x1f, 0x0, 0x30, 0x612b8, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2e2ef838, 0x4, @perf_bp={&(0x7f0000000380), 0x5}, 0x8000, 0x1, 0x0, 0x7, 0x2, 0x8, 0x7, 0x0, 0x3, 0x0, 0x3}, r2, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0xeb, 0x1}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 20:35:47 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 12) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 2316.913865] FAULT_INJECTION: forcing a failure. [ 2316.913865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2316.914849] CPU: 0 PID: 19798 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2316.915463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2316.916328] Call Trace: [ 2316.916530] [ 2316.916709] dump_stack_lvl+0x8b/0xb3 [ 2316.917025] should_fail.cold+0x5/0xa [ 2316.917333] _copy_from_user+0x2a/0x170 [ 2316.917652] copy_msghdr_from_user+0x89/0x150 [ 2316.918011] ? __copy_msghdr+0x4b0/0x4b0 [ 2316.918340] ? __lock_acquire+0x164d/0x5e70 [ 2316.918691] ___sys_sendmsg+0xdd/0x1b0 [ 2316.918998] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2316.919382] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 2316.919785] ? lock_is_held_type+0xd7/0x130 [ 2316.920132] ? find_held_lock+0x2c/0x110 [ 2316.920453] ? lock_release+0x3b2/0x750 [ 2316.920771] ? __might_fault+0xd1/0x170 [ 2316.921084] ? lock_downgrade+0x6d0/0x6d0 [ 2316.921418] ? lock_is_held_type+0xd7/0x130 [ 2316.921766] __sys_sendmmsg+0x18b/0x460 [ 2316.922090] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2316.922443] ? bit_wait_timeout+0x170/0x170 [ 2316.922784] ? syscall_enter_from_user_mode+0x18/0x50 [ 2316.923198] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2316.923631] ? __traceiter_irq_enable+0xa0/0xa0 [ 2316.924006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.924413] __x64_sys_sendmmsg+0x99/0x100 [ 2316.924751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.925155] do_syscall_64+0x3b/0x90 [ 2316.925448] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2316.925858] RIP: 0033:0x7fb1f7990b19 [ 2316.926157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.927533] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2316.928107] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2316.928652] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2316.929190] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2316.929727] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2316.930264] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2316.930819] [ 2316.963701] FAULT_INJECTION: forcing a failure. [ 2316.963701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2316.965103] CPU: 0 PID: 19813 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2316.965721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2316.966569] Call Trace: [ 2316.966771] [ 2316.966948] dump_stack_lvl+0x8b/0xb3 [ 2316.967253] should_fail.cold+0x5/0xa [ 2316.967567] _copy_from_user+0x2a/0x170 [ 2316.967883] copy_msghdr_from_user+0x89/0x150 [ 2316.968236] ? __copy_msghdr+0x4b0/0x4b0 [ 2316.968561] ? __lock_acquire+0x164d/0x5e70 [ 2316.968908] ___sys_sendmsg+0xdd/0x1b0 [ 2316.969224] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2316.969585] ? lock_is_held_type+0xd7/0x130 [ 2316.969941] ? lock_is_held_type+0xd7/0x130 [ 2316.970285] ? find_held_lock+0x2c/0x110 [ 2316.970607] ? lock_release+0x3b2/0x750 [ 2316.970917] ? __might_fault+0xd1/0x170 [ 2316.971236] ? lock_downgrade+0x6d0/0x6d0 [ 2316.971575] ? lock_is_held_type+0xd7/0x130 [ 2316.971927] __sys_sendmmsg+0x18b/0x460 [ 2316.972250] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2316.972605] ? bit_wait_timeout+0x170/0x170 [ 2316.972949] ? syscall_enter_from_user_mode+0x18/0x50 [ 2316.973360] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2316.973780] ? __traceiter_irq_enable+0xa0/0xa0 [ 2316.974148] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.974555] __x64_sys_sendmmsg+0x99/0x100 [ 2316.974888] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.975311] do_syscall_64+0x3b/0x90 [ 2316.975606] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2316.976016] RIP: 0033:0x7f67303d7b19 [ 2316.976302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.977664] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2316.978245] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2316.978787] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2316.979346] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2316.979879] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2316.980425] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2316.980983] 20:35:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x21, 0x0, 0x0}, 0x58) 20:35:48 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 34) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:35:48 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 13) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:35:48 executing program 6: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000180)={{'\x00', 0x2}, {}, 0x80, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)="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", 0x111, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/388], 0x131}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x80, 0x5, 0x1, 0x4, 0x0, 0x8, 0x10082, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x2152, 0x2, 0x9, 0x4, 0x4, 0x7fffffff, 0x800, 0x0, 0x40, 0x0, 0x7693e59}, r1, 0xa, r2, 0xb) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x7ffffff7) r6 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000200)=[0xffffffffffffffff]) fchown(r6, 0x0, r7) [ 2317.089267] FAULT_INJECTION: forcing a failure. [ 2317.089267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2317.090304] CPU: 1 PID: 19871 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2317.090910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2317.091775] Call Trace: [ 2317.091983] [ 2317.092163] dump_stack_lvl+0x8b/0xb3 [ 2317.092476] should_fail.cold+0x5/0xa [ 2317.092791] _copy_from_user+0x2a/0x170 [ 2317.093109] copy_msghdr_from_user+0x89/0x150 [ 2317.093485] ? __copy_msghdr+0x4b0/0x4b0 [ 2317.093823] ? __lock_acquire+0x164d/0x5e70 [ 2317.094178] ___sys_sendmsg+0xdd/0x1b0 [ 2317.094514] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2317.094889] ? lock_is_held_type+0xd7/0x130 [ 2317.095294] ? lock_is_held_type+0xd7/0x130 [ 2317.095648] ? find_held_lock+0x2c/0x110 [ 2317.095983] ? lock_release+0x3b2/0x750 [ 2317.096307] ? __might_fault+0xd1/0x170 [ 2317.096644] ? lock_downgrade+0x6d0/0x6d0 [ 2317.096981] ? lock_is_held_type+0xd7/0x130 [ 2317.097342] __sys_sendmmsg+0x18b/0x460 [ 2317.097684] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2317.098056] ? bit_wait_timeout+0x170/0x170 [ 2317.098404] ? syscall_enter_from_user_mode+0x18/0x50 [ 2317.098799] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2317.099221] ? __traceiter_irq_enable+0xa0/0xa0 [ 2317.099601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2317.100007] __x64_sys_sendmmsg+0x99/0x100 [ 2317.100356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2317.100769] do_syscall_64+0x3b/0x90 [ 2317.101063] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2317.101468] RIP: 0033:0x7fb1f7990b19 [ 2317.101761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2317.103107] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2317.103692] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2317.104224] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2317.104766] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2317.105297] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2317.105827] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2317.106382] 20:35:48 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 31) [ 2317.109693] FAULT_INJECTION: forcing a failure. [ 2317.109693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2317.110650] CPU: 1 PID: 19868 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2317.111236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2317.112074] Call Trace: [ 2317.112271] [ 2317.112444] dump_stack_lvl+0x8b/0xb3 [ 2317.112747] should_fail.cold+0x5/0xa [ 2317.113051] _copy_from_user+0x2a/0x170 [ 2317.113356] copy_msghdr_from_user+0x89/0x150 [ 2317.113711] ? __copy_msghdr+0x4b0/0x4b0 [ 2317.114035] ? lock_is_held_type+0xd7/0x130 [ 2317.114371] ? find_held_lock+0x2c/0x110 [ 2317.114690] ? lock_release+0x3b2/0x750 [ 2317.115002] ? finish_task_switch.isra.0+0x228/0x8a0 [ 2317.115409] ___sys_sendmsg+0xdd/0x1b0 [ 2317.115716] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2317.116077] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 2317.116457] ? lockdep_hardirqs_on+0x79/0x100 [ 2317.116806] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 2317.117184] ? __switch_to+0x5bf/0xf20 [ 2317.117496] ? __schedule+0x895/0x2490 [ 2317.117801] ? io_schedule_timeout+0x150/0x150 [ 2317.118158] ? lock_is_held_type+0xd7/0x130 [ 2317.118503] ? __cond_resched+0x17/0x30 [ 2317.118810] __sys_sendmmsg+0x18b/0x460 [ 2317.119125] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2317.119481] ? bit_wait_timeout+0x170/0x170 [ 2317.119816] ? syscall_enter_from_user_mode+0x18/0x50 [ 2317.120215] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2317.120626] ? __traceiter_irq_enable+0xa0/0xa0 [ 2317.120986] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2317.121392] __x64_sys_sendmmsg+0x99/0x100 [ 2317.121727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2317.122126] do_syscall_64+0x3b/0x90 [ 2317.122420] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2317.122818] RIP: 0033:0x7f1f0562eb19 [ 2317.123102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2317.124449] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2317.125017] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2317.125554] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2317.126084] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2317.126620] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2317.127150] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2317.127712] 20:35:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x88, 0x0, 0x0}, 0x58) 20:35:48 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)=ANY=[], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000200)={0x0, @private=0xa010102, 0x0, 0x4, 'wlc\x00', 0x16, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000140), 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = clone3(&(0x7f0000000540)={0xc004900, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000240), {0x2a}, &(0x7f0000000640)=""/161, 0xa1, &(0x7f0000000300)=""/25, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x6, 0xac, 0x2, 0x1f, 0x0, 0x30, 0x612b8, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2e2ef838, 0x4, @perf_bp={&(0x7f0000000380), 0x5}, 0x8000, 0x1, 0x0, 0x7, 0x2, 0x8, 0x7, 0x0, 0x3, 0x0, 0x3}, r2, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0xeb, 0x1}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 2317.158985] FAULT_INJECTION: forcing a failure. [ 2317.158985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2317.160006] CPU: 0 PID: 19921 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2317.160618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2317.161481] Call Trace: [ 2317.161685] [ 2317.161870] dump_stack_lvl+0x8b/0xb3 [ 2317.162186] should_fail.cold+0x5/0xa [ 2317.162499] _copy_from_user+0x2a/0x170 [ 2317.162821] copy_msghdr_from_user+0x89/0x150 [ 2317.163195] ? __copy_msghdr+0x4b0/0x4b0 [ 2317.163526] ? __lock_acquire+0x164d/0x5e70 [ 2317.163887] ___sys_sendmsg+0xdd/0x1b0 [ 2317.164200] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2317.164568] ? lock_is_held_type+0xd7/0x130 [ 2317.164919] ? lock_is_held_type+0xd7/0x130 [ 2317.165266] ? find_held_lock+0x2c/0x110 [ 2317.165585] ? lock_release+0x3b2/0x750 [ 2317.165906] ? __might_fault+0xd1/0x170 [ 2317.166215] ? lock_downgrade+0x6d0/0x6d0 [ 2317.166563] ? lock_is_held_type+0xd7/0x130 [ 2317.166917] __sys_sendmmsg+0x18b/0x460 [ 2317.167247] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2317.167613] ? bit_wait_timeout+0x170/0x170 [ 2317.167963] ? syscall_enter_from_user_mode+0x18/0x50 [ 2317.168359] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2317.168793] ? __traceiter_irq_enable+0xa0/0xa0 [ 2317.168820] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2317.168848] __x64_sys_sendmmsg+0x99/0x100 20:35:48 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x54a6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) [ 2317.168871] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2317.168895] do_syscall_64+0x3b/0x90 [ 2317.168915] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2317.168938] RIP: 0033:0x7f67303d7b19 [ 2317.168951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2317.168966] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2317.168982] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2317.168993] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2317.169003] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 20:35:48 executing program 1: execveat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) [ 2317.169014] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2317.169024] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2317.169049] 20:35:48 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 35) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) [ 2317.306281] FAULT_INJECTION: forcing a failure. [ 2317.306281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2317.307312] CPU: 0 PID: 19947 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2317.307925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2317.308790] Call Trace: [ 2317.308998] [ 2317.309180] dump_stack_lvl+0x8b/0xb3 [ 2317.309493] should_fail.cold+0x5/0xa [ 2317.309811] _copy_from_user+0x2a/0x170 [ 2317.310136] copy_msghdr_from_user+0x89/0x150 [ 2317.310510] ? __copy_msghdr+0x4b0/0x4b0 [ 2317.310835] ? __lock_acquire+0x164d/0x5e70 [ 2317.311192] ___sys_sendmsg+0xdd/0x1b0 [ 2317.311510] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2317.311876] ? lock_is_held_type+0xd7/0x130 [ 2317.312233] ? lock_is_held_type+0xd7/0x130 [ 2317.312584] ? find_held_lock+0x2c/0x110 [ 2317.312904] ? lock_release+0x3b2/0x750 [ 2317.313224] ? __might_fault+0xd1/0x170 [ 2317.313540] ? lock_downgrade+0x6d0/0x6d0 [ 2317.313871] ? lock_is_held_type+0xd7/0x130 [ 2317.314214] __sys_sendmmsg+0x18b/0x460 [ 2317.314545] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2317.314898] ? bit_wait_timeout+0x170/0x170 [ 2317.315244] ? syscall_enter_from_user_mode+0x18/0x50 [ 2317.315654] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2317.316085] ? __traceiter_irq_enable+0xa0/0xa0 [ 2317.316465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2317.316875] __x64_sys_sendmmsg+0x99/0x100 [ 2317.317213] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2317.317624] do_syscall_64+0x3b/0x90 [ 2317.317928] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2317.318326] RIP: 0033:0x7f1f0562eb19 [ 2317.318614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2317.320013] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2317.320589] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2317.321126] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2317.321666] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2317.322210] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2317.322751] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2317.323307] 20:36:01 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 36) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:36:01 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/sco\x00') ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000040)) r3 = dup(r1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) 20:36:01 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 14) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:36:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x12c, 0x0, 0x0}, 0x58) 20:36:01 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 32) 20:36:01 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0xfffffedf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:36:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)=ANY=[], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000200)={0x0, @private=0xa010102, 0x0, 0x4, 'wlc\x00', 0x16, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000140), 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = clone3(&(0x7f0000000540)={0xc004900, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000240), {0x2a}, &(0x7f0000000640)=""/161, 0xa1, &(0x7f0000000300)=""/25, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x6, 0xac, 0x2, 0x1f, 0x0, 0x30, 0x612b8, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2e2ef838, 0x4, @perf_bp={&(0x7f0000000380), 0x5}, 0x8000, 0x1, 0x0, 0x7, 0x2, 0x8, 0x7, 0x0, 0x3, 0x0, 0x3}, r2, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0xeb, 0x1}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 20:36:01 executing program 1: clone3(&(0x7f0000000940)={0x200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8c) [ 2330.728088] FAULT_INJECTION: forcing a failure. [ 2330.728088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2330.729886] CPU: 1 PID: 19956 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2330.730982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2330.731003] Call Trace: [ 2330.731012] [ 2330.731023] dump_stack_lvl+0x8b/0xb3 [ 2330.731071] should_fail.cold+0x5/0xa [ 2330.731107] _copy_from_user+0x2a/0x170 [ 2330.731140] copy_msghdr_from_user+0x89/0x150 [ 2330.731183] ? __copy_msghdr+0x4b0/0x4b0 [ 2330.731226] ? __lock_acquire+0x164d/0x5e70 [ 2330.731281] ___sys_sendmsg+0xdd/0x1b0 [ 2330.731324] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2330.737327] ? lock_is_held_type+0xd7/0x130 20:36:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x29d, 0x0, 0x0}, 0x58) [ 2330.737976] ? lock_is_held_type+0xd7/0x130 [ 2330.738781] ? find_held_lock+0x2c/0x110 [ 2330.739369] ? lock_release+0x3b2/0x750 [ 2330.739959] ? __might_fault+0xd1/0x170 [ 2330.740524] ? lock_downgrade+0x6d0/0x6d0 [ 2330.741121] ? lock_is_held_type+0xd7/0x130 [ 2330.741747] __sys_sendmmsg+0x18b/0x460 [ 2330.742332] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2330.742967] ? bit_wait_timeout+0x170/0x170 [ 2330.743585] ? syscall_enter_from_user_mode+0x18/0x50 [ 2330.744313] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2330.745050] ? __traceiter_irq_enable+0xa0/0xa0 [ 2330.745721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2330.746442] __x64_sys_sendmmsg+0x99/0x100 [ 2330.747055] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2330.747781] do_syscall_64+0x3b/0x90 [ 2330.748321] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2330.749025] RIP: 0033:0x7fb1f7990b19 [ 2330.749554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2330.752021] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2330.753056] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2330.754032] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2330.755000] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2330.755982] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2330.756945] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2330.757942] [ 2330.778491] FAULT_INJECTION: forcing a failure. [ 2330.778491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2330.780300] CPU: 0 PID: 19954 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2330.781521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2330.783264] Call Trace: [ 2330.783675] [ 2330.784039] dump_stack_lvl+0x8b/0xb3 [ 2330.784655] should_fail.cold+0x5/0xa [ 2330.785272] _copy_from_user+0x2a/0x170 [ 2330.785921] copy_msghdr_from_user+0x89/0x150 [ 2330.786643] ? __copy_msghdr+0x4b0/0x4b0 [ 2330.787311] ? __lock_acquire+0x164d/0x5e70 [ 2330.788055] ___sys_sendmsg+0xdd/0x1b0 [ 2330.788692] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2330.789422] ? lock_is_held_type+0xd7/0x130 [ 2330.790142] ? lock_is_held_type+0xd7/0x130 [ 2330.790813] ? find_held_lock+0x2c/0x110 [ 2330.791473] ? lock_release+0x3b2/0x750 [ 2330.792085] ? __might_fault+0xd1/0x170 [ 2330.792726] ? lock_downgrade+0x6d0/0x6d0 [ 2330.793365] ? lock_is_held_type+0xd7/0x130 [ 2330.794078] __sys_sendmmsg+0x18b/0x460 [ 2330.794697] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2330.795393] ? bit_wait_timeout+0x170/0x170 [ 2330.796057] ? syscall_enter_from_user_mode+0x18/0x50 [ 2330.796834] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2330.797645] ? __traceiter_irq_enable+0xa0/0xa0 [ 2330.798416] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2330.799262] __x64_sys_sendmmsg+0x99/0x100 [ 2330.799967] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2330.800787] do_syscall_64+0x3b/0x90 [ 2330.801363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2330.802144] RIP: 0033:0x7f67303d7b19 [ 2330.802704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2330.805520] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2330.806702] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2330.807827] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2330.808934] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2330.810059] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2330.811184] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2330.812342] [ 2330.818419] FAULT_INJECTION: forcing a failure. [ 2330.818419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2330.820225] CPU: 1 PID: 19964 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2330.821332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2330.822890] Call Trace: [ 2330.823263] [ 2330.823605] dump_stack_lvl+0x8b/0xb3 [ 2330.824169] should_fail.cold+0x5/0xa [ 2330.824747] _copy_from_user+0x2a/0x170 [ 2330.825340] copy_msghdr_from_user+0x89/0x150 [ 2330.826028] ? __copy_msghdr+0x4b0/0x4b0 [ 2330.826640] ? __lock_acquire+0x164d/0x5e70 [ 2330.827321] ___sys_sendmsg+0xdd/0x1b0 [ 2330.827920] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2330.828599] ? lock_is_held_type+0xd7/0x130 [ 2330.829236] ? find_held_lock+0x2c/0x110 [ 2330.829802] ? lock_release+0x3b2/0x750 [ 2330.830379] ? __might_fault+0xd1/0x170 [ 2330.830961] ? lock_downgrade+0x6d0/0x6d0 [ 2330.831577] ? lock_is_held_type+0xd7/0x130 [ 2330.832237] __sys_sendmmsg+0x18b/0x460 [ 2330.832840] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2330.833491] ? bit_wait_timeout+0x170/0x170 [ 2330.834121] ? syscall_enter_from_user_mode+0x18/0x50 [ 2330.834874] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2330.835859] ? __traceiter_irq_enable+0xa0/0xa0 [ 2330.836637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2330.837483] __x64_sys_sendmmsg+0x99/0x100 [ 2330.838179] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2330.838998] do_syscall_64+0x3b/0x90 [ 2330.839635] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2330.840468] RIP: 0033:0x7f1f0562eb19 [ 2330.841067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2330.843624] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2330.844675] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2330.845662] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2330.846645] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2330.847661] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2330.848655] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2330.849718] 20:36:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)=ANY=[], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000200)={0x0, @private=0xa010102, 0x0, 0x4, 'wlc\x00', 0x16, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000140), 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = clone3(&(0x7f0000000540)={0xc004900, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000240), {0x2a}, &(0x7f0000000640)=""/161, 0xa1, &(0x7f0000000300)=""/25, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x6, 0xac, 0x2, 0x1f, 0x0, 0x30, 0x612b8, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2e2ef838, 0x4, @perf_bp={&(0x7f0000000380), 0x5}, 0x8000, 0x1, 0x0, 0x7, 0x2, 0x8, 0x7, 0x0, 0x3, 0x0, 0x3}, r2, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0xeb, 0x1}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 20:36:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x300, 0x0, 0x0}, 0x58) 20:36:02 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0x7, 0xfe, 0x7, 0x2, 0x0, 0xfffffffffffffffe, 0x1800, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffff7, 0x1, @perf_config_ext={0x3f, 0x4}, 0x1100, 0x40, 0x0, 0x6, 0x8001, 0x81, 0x6513, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xf, r0, 0x0) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) 20:36:02 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 33) 20:36:02 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 37) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:36:02 executing program 6: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001800)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) readv(r0, &(0x7f0000001780)=[{&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/168, 0xa8}, {&(0x7f00000016c0)=""/171, 0xab}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000500)=""/8, 0x8}, {&(0x7f0000000540)=""/40, 0x28}], 0x8) 20:36:02 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 15) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:36:02 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)=ANY=[], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000200)={0x0, @private=0xa010102, 0x0, 0x4, 'wlc\x00', 0x16, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000140), 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = clone3(&(0x7f0000000540)={0xc004900, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000240), {0x2a}, &(0x7f0000000640)=""/161, 0xa1, &(0x7f0000000300)=""/25, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x6, 0xac, 0x2, 0x1f, 0x0, 0x30, 0x612b8, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2e2ef838, 0x4, @perf_bp={&(0x7f0000000380), 0x5}, 0x8000, 0x1, 0x0, 0x7, 0x2, 0x8, 0x7, 0x0, 0x3, 0x0, 0x3}, r2, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0xeb, 0x1}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 20:36:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x3fd, 0x0, 0x0}, 0x58) 20:36:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000300)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="080025bd7000efdbdf253000000008000300a28054d31b3aeca0fea817f806d7993e2dd65bbbf155c07757ae9fcc181d9c3a06c2e83f42129cc08a2e2d675f0000000400000000ba27799fc7cad444ad318256c2b7515f09091423238677038f90d575063fc8c711efd209b18c8f9f8ae5ed2c239931baff12a9582457d34cb4c28b3e6c9bd63d1eb5fb071d1aa77bcc7afedc11ed49f8e7a47308818a37943f94885217d845ae961d128bd8945dcdd8267b44488ddac57ed508595e03eaac870f832c8f8051adee8d0a48155ccce448893b8f65c821758b2aac4d76", @ANYRES32=0x0, @ANYBLOB="0c0099000800000044000000060036000a0000000600360031000000060036000b00000006003600040000000600360038000000060036000e000000060036001c000000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x14000045) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000240)) [ 2331.271427] FAULT_INJECTION: forcing a failure. [ 2331.271427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2331.273272] CPU: 1 PID: 20089 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2331.274329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2331.275909] Call Trace: [ 2331.276285] [ 2331.276612] dump_stack_lvl+0x8b/0xb3 [ 2331.277177] should_fail.cold+0x5/0xa [ 2331.277724] _copy_from_user+0x2a/0x170 [ 2331.278300] copy_msghdr_from_user+0x89/0x150 [ 2331.278965] ? __copy_msghdr+0x4b0/0x4b0 [ 2331.279591] ? __lock_acquire+0x164d/0x5e70 [ 2331.280240] ___sys_sendmsg+0xdd/0x1b0 [ 2331.280821] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2331.281518] ? lock_is_held_type+0xd7/0x130 [ 2331.282164] ? find_held_lock+0x2c/0x110 [ 2331.282729] ? lock_release+0x3b2/0x750 [ 2331.283332] ? __might_fault+0xd1/0x170 [ 2331.283947] ? lock_downgrade+0x6d0/0x6d0 [ 2331.284578] ? lock_is_held_type+0xd7/0x130 [ 2331.285233] __sys_sendmmsg+0x18b/0x460 [ 2331.285827] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2331.286490] ? bit_wait_timeout+0x170/0x170 [ 2331.287143] ? syscall_enter_from_user_mode+0x18/0x50 [ 2331.287917] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2331.288748] ? __traceiter_irq_enable+0xa0/0xa0 [ 2331.289400] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2331.290151] __x64_sys_sendmmsg+0x99/0x100 [ 2331.290765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2331.291551] do_syscall_64+0x3b/0x90 [ 2331.292093] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2331.292845] RIP: 0033:0x7f1f0562eb19 [ 2331.293402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2331.296081] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2331.297183] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2331.298185] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2331.299116] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2331.300055] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2331.300991] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2331.301949] 20:36:02 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 34) [ 2331.347220] FAULT_INJECTION: forcing a failure. [ 2331.347220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2331.349057] CPU: 1 PID: 20093 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2331.350196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2331.351814] Call Trace: [ 2331.352192] [ 2331.352534] dump_stack_lvl+0x8b/0xb3 [ 2331.353110] should_fail.cold+0x5/0xa [ 2331.353674] _copy_from_user+0x2a/0x170 [ 2331.354267] copy_msghdr_from_user+0x89/0x150 [ 2331.354933] ? __copy_msghdr+0x4b0/0x4b0 [ 2331.355553] ? __lock_acquire+0x164d/0x5e70 [ 2331.356197] ___sys_sendmsg+0xdd/0x1b0 [ 2331.356770] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2331.357463] ? lock_is_held_type+0xd7/0x130 [ 2331.358097] ? find_held_lock+0x2c/0x110 [ 2331.358694] ? lock_release+0x3b2/0x750 [ 2331.359273] ? __might_fault+0xd1/0x170 [ 2331.359879] ? lock_downgrade+0x6d0/0x6d0 [ 2331.360482] ? lock_is_held_type+0xd7/0x130 [ 2331.361129] __sys_sendmmsg+0x18b/0x460 [ 2331.361713] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2331.362331] ? bit_wait_timeout+0x170/0x170 [ 2331.362928] ? syscall_enter_from_user_mode+0x18/0x50 [ 2331.363673] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2331.364414] ? __traceiter_irq_enable+0xa0/0xa0 [ 2331.365070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2331.365783] __x64_sys_sendmmsg+0x99/0x100 [ 2331.366372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2331.367077] do_syscall_64+0x3b/0x90 [ 2331.367609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2331.368315] RIP: 0033:0x7fb1f7990b19 [ 2331.368817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2331.371158] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2331.372167] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2331.373097] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2331.374058] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2331.375013] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2331.375985] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2331.376983] [ 2331.442155] FAULT_INJECTION: forcing a failure. [ 2331.442155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2331.443970] CPU: 1 PID: 20101 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2331.445066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2331.446567] Call Trace: [ 2331.446927] [ 2331.447244] dump_stack_lvl+0x8b/0xb3 [ 2331.447820] should_fail.cold+0x5/0xa [ 2331.448365] _copy_from_user+0x2a/0x170 [ 2331.448926] copy_msghdr_from_user+0x89/0x150 [ 2331.449572] ? __copy_msghdr+0x4b0/0x4b0 [ 2331.450157] ? lock_is_held_type+0xd7/0x130 [ 2331.450773] ? find_held_lock+0x2c/0x110 [ 2331.451361] ? lock_release+0x3b2/0x750 [ 2331.451954] ___sys_sendmsg+0xdd/0x1b0 [ 2331.452516] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2331.453168] ? lock_is_held_type+0xd7/0x130 [ 2331.453782] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2331.454467] ? trace_rcu_dyntick+0x1a7/0x250 [ 2331.455091] ? exc_page_fault+0xc4/0x1a0 [ 2331.455675] ? exc_page_fault+0xc4/0x1a0 [ 2331.456252] ? lockdep_hardirqs_on+0x79/0x100 [ 2331.456902] ? exc_page_fault+0xc4/0x1a0 [ 2331.457484] ? asm_exc_page_fault+0x22/0x30 [ 2331.458102] ? lock_is_held_type+0xd7/0x130 [ 2331.458722] __sys_sendmmsg+0x18b/0x460 [ 2331.459301] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2331.459948] ? bit_wait_timeout+0x170/0x170 [ 2331.460558] ? syscall_enter_from_user_mode+0x18/0x50 [ 2331.461280] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2331.462036] ? __traceiter_irq_enable+0xa0/0xa0 [ 2331.462700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2331.463432] __x64_sys_sendmmsg+0x99/0x100 [ 2331.464051] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2331.464784] do_syscall_64+0x3b/0x90 [ 2331.465315] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2331.466036] RIP: 0033:0x7f67303d7b19 [ 2331.466556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2331.469003] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2331.470022] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2331.470984] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2331.471950] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2331.472908] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2331.473861] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2331.474848] 20:36:18 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 38) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:36:18 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0xc9, 0x20, 0xff, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x4000a, 0x4f9, 0x9, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6e44, 0x0, 0xbb}, r0, 0xb, 0xffffffffffffffff, 0x3) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) write$P9_RMKDIR(r3, &(0x7f0000000000)={0x14}, 0x14) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x8, 0x0, 0x8, 0x5, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc79, 0x4, @perf_config_ext={0x0, 0x7}, 0x80, 0x7, 0x0, 0x4, 0x100000000, 0xe48, 0xc35, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 20:36:18 executing program 1: iopl(0x3) iopl(0x7) iopl(0x49) iopl(0x1) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0) iopl(0x1f) clock_gettime(0x0, &(0x7f0000005b00)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005880)=[{{&(0x7f00000025c0)=@abs, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002640)=""/185, 0xb9}, {&(0x7f0000002700)=""/186, 0xba}, {&(0x7f00000027c0)=""/12, 0xc}, {&(0x7f0000002800)=""/243, 0xf3}, {&(0x7f0000002900)=""/76, 0x4c}, {&(0x7f0000002980)=""/15, 0xf}], 0x6, &(0x7f0000002a40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x48}}, {{&(0x7f0000002ac0), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002b40)=""/113, 0x71}, {&(0x7f0000002bc0)=""/154, 0x9a}], 0x2}}, {{&(0x7f0000002cc0)=@abs, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002d40)=""/20, 0x14}], 0x1}}, {{&(0x7f0000002dc0), 0x6e, &(0x7f0000003f40)=[{&(0x7f0000002e40)=""/211, 0xd3}, {&(0x7f0000002f40)=""/4096, 0x1000}], 0x2, &(0x7f0000003f80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000040c0)=""/96, 0x60}], 0x1, &(0x7f0000004180)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000004240)=@abs, 0x6e, &(0x7f0000004440)=[{&(0x7f00000042c0)}, {&(0x7f0000004300)=""/46, 0x2e}, {&(0x7f0000004340)=""/4, 0x4}, {&(0x7f0000004380)=""/160, 0xa0}], 0x4, &(0x7f0000004480)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000004540), 0x6e, &(0x7f0000004700)=[{&(0x7f00000045c0)=""/29, 0x1d}, {&(0x7f0000004600)=""/142, 0x8e}, {&(0x7f00000046c0)=""/1, 0x1}], 0x3, &(0x7f0000004740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004800)=""/18, 0x12}, {&(0x7f0000004840)=""/102, 0x66}, {&(0x7f00000048c0)=""/28, 0x1c}, {&(0x7f0000004900)=""/188, 0xbc}, {&(0x7f00000049c0)=""/214, 0xd6}, {&(0x7f0000004ac0)=""/92, 0x5c}, {&(0x7f0000004b40)=""/12, 0xc}], 0x7, &(0x7f0000004c00)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000004c80), 0x6e, &(0x7f0000005280)=[{&(0x7f0000004d00)=""/66, 0x42}, {&(0x7f0000004d80)=""/235, 0xeb}, {&(0x7f0000004e80)=""/3, 0x3}, {&(0x7f0000004ec0)=""/13, 0xd}, {&(0x7f0000004f00)=""/63, 0x3f}, {&(0x7f0000004f40)=""/158, 0x9e}, {&(0x7f0000005000)=""/200, 0xc8}, {&(0x7f0000005100)=""/98, 0x62}, {&(0x7f0000005180)=""/247, 0xf7}], 0x9, &(0x7f0000005340)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000005440)=""/49, 0x31}, {&(0x7f0000005480)=""/81, 0x51}, {&(0x7f0000005500)=""/218, 0xda}, {&(0x7f0000005600)=""/170, 0xaa}, {&(0x7f00000056c0)=""/72, 0x48}], 0x5, &(0x7f00000057c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0xa, 0x0, &(0x7f0000005b40)={r0, r1+60000000}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x100, 0x7, &(0x7f0000002500)=[{&(0x7f0000000080)="6d9dbc9ee08776d604e066ad4b6e032df0fd3e8b04d29051a303a644413e31e0325b5266ad574973edc2d9cc24f832961386933756f5ba0932c3339c154d1c7cdf07105a683e2bf80d4700b4789b4cc0bef0f8c2260ff29190d449f789b617c1d19ff381d2090a4fa1891f0e8a89a66146f1e0a1814b7868aba82a19d09aad92dc7c38c0f4883c64fca16620490a2eca6d1e9f34c0a6478e897e0ee8e7acde474ccc8cb8b9c97548aa95b08a28999129fe93466b57ff1dec172f5b82e796405556cbb392f2a859a32f923d509cfb6f6fc37480fbc398fb5656293f7ca1ee67cd1ef7a1820228e17047b589a61969b9cdb13bb54df295009da0d280", 0xfb}, {&(0x7f0000000180)="953c09edfc37afa81691e7d7727247be6caf7c984cc72fe2765607ac99aa74c3d3aa45505928f0367d0bc13af1c290c432606a97459f2c16c1646c4ca35b94616b147b80b971c358da43634d89135ac74b984a3a676f026bd706f020e3357ea01844b4c5bf49b6ca6de6d7e797125a966a895a597109760bf549fde50e3b6630e471dd2e5d7d7bf2612a6ff38107e8bf276dd36d26aebac9b357", 0x9a}, {&(0x7f0000000240)="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", 0x1000, 0xfffffffffffffff7}, {&(0x7f0000001240)="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", 0xfc, 0x80000001}, {&(0x7f0000001340)="162f6c259bb381cb9f191f9a157712dc53da5e7b8e85c3daacb49abc1e52a635233321a85fe8ed77beefcf8bcf1d85c8f70c7a284e1da5f1d24827100bf40b8e65b5c946747a9f16e159742373ac8778cfa5ee4cd0ebe6b4c1adc315fdf0f712a6219a5b78e68fd104ac38b87ec304948c74f8b063963a4db1129f90a884506d5fcc23f9d16b3ea0060a712361a4483d63b3c6d636c59952bf3bd4e88ee7be599444d46a56a632555fbe8343ddb0c4987dd39576288680c32d81de18cd91ad0fdec2eac4595e7c44d78a8fe9", 0xcc, 0xfffffffffffffffb}, {&(0x7f0000001440)="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", 0x1000, 0x5}, {&(0x7f0000002440)="5068ac9e8b8d5a1ee3854c898f496aaf8977ee805eaa29857e9e429bb490ad36e6edf81654c355061f852172a24444286a73e557636428d6227f553c05b33b97cdb1ffffd5ce96faa555b99bd4d34c25f493be749851590518b1397398bbb0456845d73da5544db2510c969c58c00eb08cdd1e5d4c8e3e6283fa9a882d772f3f946b164a12922c7560508259aa9b75423a0d8ca7c543546c8d39bb5c1cb7425711b5f4edf65cf037822fffdfcb91c2205532499bcee2c69a8830e1145d6f", 0xbe}], 0x14028, &(0x7f0000005b80)={[{@size={'size', 0x3d, [0x35, 0x37, 0x6d, 0x37, 0x74]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x36, 0x35, 0x2d]}}, {@huge_always}, {@size={'size', 0x3d, [0x78, 0x78, 0x34, 0x78]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x31, 0x35, 0x37, 0x38, 0x38, 0x35, 0x65]}}, {@size={'size', 0x3d, [0x74, 0x55, 0x65, 0x78, 0x65, 0x36, 0x6b]}}], [{@subj_user={'subj_user', 0x3d, '#'}}, {@uid_gt={'uid>', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise_type}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, r2}}, {@seclabel}]}) 20:36:18 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 35) 20:36:18 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 16) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:36:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) clone3(&(0x7f0000000440)={0x80000800, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100), {0x3b}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000000240)=""/2, &(0x7f0000000380)=[r1, r2, r0], 0x3}, 0x58) gettid() r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000004c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) write$P9_RMKDIR(r5, &(0x7f0000000000)={0x14}, 0x14) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)=ANY=[@ANYBLOB="01001e84113900000180e4bdd9000000", @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="00c464587b14c2d5fa8f0f34"]) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000400)={0x5831, 0x40, 0x0, 0x200, 0x81, 0x69f5}) ioctl$KDDISABIO(r5, 0x4b37) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x4, 0x85, 0xf, 0x9, 0x0, 0xb6, 0x10, 0x4ce85b42c354d306, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0x8}, 0x4000, 0x4, 0x0, 0x8, 0x3195, 0x3, 0xfffa, 0x0, 0xfac, 0x0, 0x81}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x3) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000500)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000600)={0x10004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:36:18 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)) keyctl$link(0x8, r2, r2) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)="a261f863a1289f2a31f118a554df725a6857f2de54de41b8d87fca2e6cce78993a545fc424fd75351f8d1a8f35f1dcb97cebbd8e436d64d7b3b19c9bc29857396e98c681961ea6889facab636b2b7497a63f123e076f64687e01178a0523799fa4406086d0e13f2479e1af1fcb214646be74453eb5f961ee717e60d8335f75a3b1041f2034f59daa52aa4a8612f023ad0213655e2cad0c73282e055787df8c52c575dda5439981e9af51085d8b7a8eec89eaa3733d9f98927065ad03a485dbb0f74090d789d03d58ae", 0xc9, r2) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000006c0)={0x0, 0xef5a, 0x1, [0xd85, 0x9, 0x6, 0x40], [0x7fffffff, 0x6, 0x99d1, 0x8, 0x9, 0x5, 0x11b, 0x7, 0x1, 0x5, 0xb1ae, 0x8, 0x20, 0xfff, 0x400, 0x4, 0x3, 0x9, 0x2, 0x400, 0x40, 0x6, 0x6b, 0x401, 0x1, 0x6, 0x0, 0x100000000, 0x8, 0x22a, 0x2, 0x5, 0xffffffff7fffffff, 0x4, 0x8000, 0x101, 0xab3, 0xffffffffffffffc0, 0x5, 0x67c6, 0x282b, 0x0, 0x7, 0x2, 0x7, 0x401, 0x8, 0xcc, 0x6, 0x1, 0x1ff, 0x4, 0xff, 0x8, 0x0, 0x1, 0x200, 0x2, 0x0, 0x9, 0x800, 0x3, 0x81, 0x8, 0x3, 0x80000001, 0x1000, 0x7, 0x1f000000000, 0x7ff, 0xe3, 0x0, 0xe3, 0x8, 0x6, 0xd2e, 0x7, 0x4, 0x961e, 0x1, 0xb8, 0x4, 0x101, 0x1, 0x9, 0x5b61, 0xf98e, 0xffff, 0xffffffffffffffc0, 0xfd0e, 0x4bf1, 0xf1d, 0x8, 0x0, 0x4, 0x6, 0x0, 0x9, 0x2, 0x7, 0xffff, 0x5, 0x5, 0x8000, 0x0, 0x100, 0x3f, 0x5, 0xfd8, 0x80000000, 0x7fffffff, 0x7, 0x100000000, 0x7fff, 0x2, 0x2, 0x40, 0x2, 0x4, 0x9]}) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) [ 2347.186438] FAULT_INJECTION: forcing a failure. [ 2347.186438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2347.187476] CPU: 1 PID: 20118 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2347.188105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2347.188958] Call Trace: [ 2347.189164] [ 2347.189337] FAULT_INJECTION: forcing a failure. [ 2347.189337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2347.189351] dump_stack_lvl+0x8b/0xb3 [ 2347.189380] should_fail.cold+0x5/0xa [ 2347.191537] _copy_from_user+0x2a/0x170 [ 2347.191870] copy_msghdr_from_user+0x89/0x150 [ 2347.192240] ? __copy_msghdr+0x4b0/0x4b0 [ 2347.192557] ? __lock_acquire+0x164d/0x5e70 [ 2347.192912] ___sys_sendmsg+0xdd/0x1b0 [ 2347.193229] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2347.193591] ? lock_is_held_type+0xd7/0x130 [ 2347.193950] ? lock_is_held_type+0xd7/0x130 [ 2347.194284] ? find_held_lock+0x2c/0x110 [ 2347.194610] ? lock_release+0x3b2/0x750 [ 2347.194924] ? __might_fault+0xd1/0x170 [ 2347.195234] ? lock_downgrade+0x6d0/0x6d0 [ 2347.195567] ? lock_is_held_type+0xd7/0x130 [ 2347.195931] __sys_sendmmsg+0x18b/0x460 [ 2347.196249] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2347.196600] ? bit_wait_timeout+0x170/0x170 [ 2347.196939] ? syscall_enter_from_user_mode+0x18/0x50 [ 2347.197350] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2347.197767] ? __traceiter_irq_enable+0xa0/0xa0 [ 2347.198144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2347.198562] __x64_sys_sendmmsg+0x99/0x100 [ 2347.198896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2347.199296] do_syscall_64+0x3b/0x90 [ 2347.199600] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2347.200025] RIP: 0033:0x7f1f0562eb19 [ 2347.200313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2347.201683] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2347.202266] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2347.202807] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2347.203337] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2347.203881] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2347.204421] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2347.204973] [ 2347.205162] CPU: 0 PID: 20116 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2347.206324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2347.207942] Call Trace: [ 2347.208325] [ 2347.208657] dump_stack_lvl+0x8b/0xb3 [ 2347.209233] should_fail.cold+0x5/0xa [ 2347.209805] _copy_from_user+0x2a/0x170 [ 2347.210406] copy_msghdr_from_user+0x89/0x150 [ 2347.211102] ? __copy_msghdr+0x4b0/0x4b0 [ 2347.211740] ? __lock_acquire+0x164d/0x5e70 [ 2347.212383] ___sys_sendmsg+0xdd/0x1b0 [ 2347.212950] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2347.213610] ? lock_is_held_type+0xd7/0x130 [ 2347.214261] ? lock_is_held_type+0xd7/0x130 [ 2347.214890] ? find_held_lock+0x2c/0x110 [ 2347.215484] ? lock_release+0x3b2/0x750 [ 2347.216065] ? __might_fault+0xd1/0x170 [ 2347.216632] ? lock_downgrade+0x6d0/0x6d0 [ 2347.217238] ? lock_is_held_type+0xd7/0x130 [ 2347.217872] __sys_sendmmsg+0x18b/0x460 [ 2347.218464] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2347.219109] ? bit_wait_timeout+0x170/0x170 [ 2347.219744] ? syscall_enter_from_user_mode+0x18/0x50 [ 2347.220487] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2347.221256] ? __traceiter_irq_enable+0xa0/0xa0 [ 2347.221934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2347.222686] __x64_sys_sendmmsg+0x99/0x100 [ 2347.223286] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2347.224041] do_syscall_64+0x3b/0x90 [ 2347.224577] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2347.225315] RIP: 0033:0x7f67303d7b19 [ 2347.225849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2347.228319] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2347.229377] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2347.230375] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2347.231358] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2347.232367] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2347.233355] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2347.234369] [ 2347.240057] FAULT_INJECTION: forcing a failure. [ 2347.240057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2347.241870] CPU: 0 PID: 20117 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 20:36:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x500, 0x0, 0x0}, 0x58) [ 2347.242959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2347.244614] Call Trace: [ 2347.244983] [ 2347.245303] dump_stack_lvl+0x8b/0xb3 [ 2347.245859] should_fail.cold+0x5/0xa [ 2347.246411] _copy_from_user+0x2a/0x170 [ 2347.246974] copy_msghdr_from_user+0x89/0x150 [ 2347.247625] ? __copy_msghdr+0x4b0/0x4b0 [ 2347.248236] ? __lock_acquire+0x164d/0x5e70 [ 2347.248873] ___sys_sendmsg+0xdd/0x1b0 [ 2347.249440] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2347.250116] ? lock_is_held_type+0xd7/0x130 [ 2347.250736] ? find_held_lock+0x2c/0x110 [ 2347.251326] ? lock_release+0x3b2/0x750 [ 2347.251913] ? __might_fault+0xd1/0x170 [ 2347.252487] ? lock_downgrade+0x6d0/0x6d0 [ 2347.253085] ? lock_is_held_type+0xd7/0x130 [ 2347.253718] __sys_sendmmsg+0x18b/0x460 [ 2347.254283] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2347.254929] ? bit_wait_timeout+0x170/0x170 [ 2347.255551] ? syscall_enter_from_user_mode+0x18/0x50 [ 2347.256266] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2347.257040] ? __traceiter_irq_enable+0xa0/0xa0 [ 2347.257709] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2347.258452] __x64_sys_sendmmsg+0x99/0x100 [ 2347.259060] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2347.259815] do_syscall_64+0x3b/0x90 [ 2347.260363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2347.261104] RIP: 0033:0x7fb1f7990b19 [ 2347.261126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2347.261152] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2347.261180] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2347.261201] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2347.261220] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2347.261238] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2347.261255] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2347.261301] 20:36:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xe00, 0x0, 0x0}, 0x58) 20:36:37 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 39) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:36:37 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 17) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:36:37 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0xc9, 0x20, 0xff, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x4000a, 0x4f9, 0x9, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6e44, 0x0, 0xbb}, r0, 0xb, 0xffffffffffffffff, 0x3) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) write$P9_RMKDIR(r3, &(0x7f0000000000)={0x14}, 0x14) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x8, 0x0, 0x8, 0x5, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc79, 0x4, @perf_config_ext={0x0, 0x7}, 0x80, 0x7, 0x0, 0x4, 0x100000000, 0xe48, 0xc35, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 20:36:37 executing program 7: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000100)=0x1) getsockopt$inet6_opts(r5, 0x88, 0x68, 0x0, &(0x7f00000002c0)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000000)={0x0, 0xa, '\x00', [@ra={0x5, 0x2, 0x5}, @generic={0xd5, 0x4a, "d4072688663460534403bd7a4239a5816989235ae44b5bf1bf0af04ba5d8ab7fcf13f7945ec13b0cc19162304739f5c4d52c6095abf5003e75d07f9b00c707a4ee77ab935b4fced6f141"}]}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf9}, 0x1c) 20:36:37 executing program 6: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x0, 0x0, 0x9, 0x9, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x1, 0x1, 0x6, 0x0, 0x1f, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x20, 0x3}, 0x44101, 0x3, 0x6, 0x7, 0x9, 0x8000, 0x3f, 0x0, 0x5, 0x0, 0x9}, r1, 0xa, r0, 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x7ffffff7) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}]}, 0x64}, 0x1, 0x0, 0x0, 0x405c000}, 0x80b0) 20:36:37 executing program 1: iopl(0x3) iopl(0x7) iopl(0x49) iopl(0x1) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0) iopl(0x1f) clock_gettime(0x0, &(0x7f0000005b00)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005880)=[{{&(0x7f00000025c0)=@abs, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002640)=""/185, 0xb9}, {&(0x7f0000002700)=""/186, 0xba}, {&(0x7f00000027c0)=""/12, 0xc}, {&(0x7f0000002800)=""/243, 0xf3}, {&(0x7f0000002900)=""/76, 0x4c}, {&(0x7f0000002980)=""/15, 0xf}], 0x6, &(0x7f0000002a40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x48}}, {{&(0x7f0000002ac0), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002b40)=""/113, 0x71}, {&(0x7f0000002bc0)=""/154, 0x9a}], 0x2}}, {{&(0x7f0000002cc0)=@abs, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002d40)=""/20, 0x14}], 0x1}}, {{&(0x7f0000002dc0), 0x6e, &(0x7f0000003f40)=[{&(0x7f0000002e40)=""/211, 0xd3}, {&(0x7f0000002f40)=""/4096, 0x1000}], 0x2, &(0x7f0000003f80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000040c0)=""/96, 0x60}], 0x1, &(0x7f0000004180)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000004240)=@abs, 0x6e, &(0x7f0000004440)=[{&(0x7f00000042c0)}, {&(0x7f0000004300)=""/46, 0x2e}, {&(0x7f0000004340)=""/4, 0x4}, {&(0x7f0000004380)=""/160, 0xa0}], 0x4, &(0x7f0000004480)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000004540), 0x6e, &(0x7f0000004700)=[{&(0x7f00000045c0)=""/29, 0x1d}, {&(0x7f0000004600)=""/142, 0x8e}, {&(0x7f00000046c0)=""/1, 0x1}], 0x3, &(0x7f0000004740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004800)=""/18, 0x12}, {&(0x7f0000004840)=""/102, 0x66}, {&(0x7f00000048c0)=""/28, 0x1c}, {&(0x7f0000004900)=""/188, 0xbc}, {&(0x7f00000049c0)=""/214, 0xd6}, {&(0x7f0000004ac0)=""/92, 0x5c}, {&(0x7f0000004b40)=""/12, 0xc}], 0x7, &(0x7f0000004c00)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000004c80), 0x6e, &(0x7f0000005280)=[{&(0x7f0000004d00)=""/66, 0x42}, {&(0x7f0000004d80)=""/235, 0xeb}, {&(0x7f0000004e80)=""/3, 0x3}, {&(0x7f0000004ec0)=""/13, 0xd}, {&(0x7f0000004f00)=""/63, 0x3f}, {&(0x7f0000004f40)=""/158, 0x9e}, {&(0x7f0000005000)=""/200, 0xc8}, {&(0x7f0000005100)=""/98, 0x62}, {&(0x7f0000005180)=""/247, 0xf7}], 0x9, &(0x7f0000005340)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000005440)=""/49, 0x31}, {&(0x7f0000005480)=""/81, 0x51}, {&(0x7f0000005500)=""/218, 0xda}, {&(0x7f0000005600)=""/170, 0xaa}, {&(0x7f00000056c0)=""/72, 0x48}], 0x5, &(0x7f00000057c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0xa, 0x0, &(0x7f0000005b40)={r0, r1+60000000}) [ 2366.484646] FAULT_INJECTION: forcing a failure. [ 2366.484646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2366.485957] CPU: 1 PID: 20241 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2366.486656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2366.487634] Call Trace: [ 2366.487871] [ 2366.488088] dump_stack_lvl+0x8b/0xb3 [ 2366.488449] should_fail.cold+0x5/0xa [ 2366.488801] _copy_from_user+0x2a/0x170 [ 2366.489166] copy_msghdr_from_user+0x89/0x150 [ 2366.489582] ? __copy_msghdr+0x4b0/0x4b0 [ 2366.489962] ? __lock_acquire+0x164d/0x5e70 [ 2366.490373] ___sys_sendmsg+0xdd/0x1b0 [ 2366.490737] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2366.491158] ? lock_is_held_type+0xd7/0x130 [ 2366.491565] ? lock_is_held_type+0xd7/0x130 [ 2366.491992] ? find_held_lock+0x2c/0x110 [ 2366.492366] ? lock_release+0x3b2/0x750 [ 2366.492733] ? __might_fault+0xd1/0x170 [ 2366.493099] ? lock_downgrade+0x6d0/0x6d0 [ 2366.493488] ? lock_is_held_type+0xd7/0x130 [ 2366.493896] __sys_sendmmsg+0x18b/0x460 [ 2366.494273] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2366.494686] ? bit_wait_timeout+0x170/0x170 [ 2366.495087] ? syscall_enter_from_user_mode+0x18/0x50 [ 2366.495559] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2366.496253] ? __traceiter_irq_enable+0xa0/0xa0 [ 2366.496691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.497166] __x64_sys_sendmmsg+0x99/0x100 [ 2366.497588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.498345] do_syscall_64+0x3b/0x90 [ 2366.498858] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2366.499553] RIP: 0033:0x7f1f0562eb19 [ 2366.499952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2366.502304] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x100, 0x7, &(0x7f0000002500)=[{&(0x7f0000000080)="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", 0xfb}, {&(0x7f0000000180)="953c09edfc37afa81691e7d7727247be6caf7c984cc72fe2765607ac99aa74c3d3aa45505928f0367d0bc13af1c290c432606a97459f2c16c1646c4ca35b94616b147b80b971c358da43634d89135ac74b984a3a676f026bd706f020e3357ea01844b4c5bf49b6ca6de6d7e797125a966a895a597109760bf549fde50e3b6630e471dd2e5d7d7bf2612a6ff38107e8bf276dd36d26aebac9b357", 0x9a}, {&(0x7f0000000240)="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", 0x1000, 0xfffffffffffffff7}, {&(0x7f0000001240)="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", 0xfc, 0x80000001}, {&(0x7f0000001340)="162f6c259bb381cb9f191f9a157712dc53da5e7b8e85c3daacb49abc1e52a635233321a85fe8ed77beefcf8bcf1d85c8f70c7a284e1da5f1d24827100bf40b8e65b5c946747a9f16e159742373ac8778cfa5ee4cd0ebe6b4c1adc315fdf0f712a6219a5b78e68fd104ac38b87ec304948c74f8b063963a4db1129f90a884506d5fcc23f9d16b3ea0060a712361a4483d63b3c6d636c59952bf3bd4e88ee7be599444d46a56a632555fbe8343ddb0c4987dd39576288680c32d81de18cd91ad0fdec2eac4595e7c44d78a8fe9", 0xcc, 0xfffffffffffffffb}, {&(0x7f0000001440)="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", 0x1000, 0x5}, {&(0x7f0000002440)="5068ac9e8b8d5a1ee3854c898f496aaf8977ee805eaa29857e9e429bb490ad36e6edf81654c355061f852172a24444286a73e557636428d6227f553c05b33b97cdb1ffffd5ce96faa555b99bd4d34c25f493be749851590518b1397398bbb0456845d73da5544db2510c969c58c00eb08cdd1e5d4c8e3e6283fa9a882d772f3f946b164a12922c7560508259aa9b75423a0d8ca7c543546c8d39bb5c1cb7425711b5f4edf65cf037822fffdfcb91c2205532499bcee2c69a8830e1145d6f", 0xbe}], 0x14028, &(0x7f0000005b80)={[{@size={'size', 0x3d, [0x35, 0x37, 0x6d, 0x37, 0x74]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x36, 0x35, 0x2d]}}, {@huge_always}, {@size={'size', 0x3d, [0x78, 0x78, 0x34, 0x78]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x31, 0x35, 0x37, 0x38, 0x38, 0x35, 0x65]}}, {@size={'size', 0x3d, [0x74, 0x55, 0x65, 0x78, 0x65, 0x36, 0x6b]}}], [{@subj_user={'subj_user', 0x3d, '#'}}, {@uid_gt={'uid>', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise_type}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, r2}}, {@seclabel}]}) 20:36:37 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 36) [ 2366.503300] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2366.504199] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2366.505116] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.505746] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2366.506369] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2366.507009] [ 2366.552986] FAULT_INJECTION: forcing a failure. [ 2366.552986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2366.554557] CPU: 0 PID: 20251 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2366.555506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2366.556838] Call Trace: [ 2366.557162] [ 2366.557448] dump_stack_lvl+0x8b/0xb3 [ 2366.557929] should_fail.cold+0x5/0xa [ 2366.558406] _copy_from_user+0x2a/0x170 [ 2366.558896] copy_msghdr_from_user+0x89/0x150 [ 2366.559465] ? __copy_msghdr+0x4b0/0x4b0 [ 2366.559980] ? __lock_acquire+0x164d/0x5e70 [ 2366.560522] ___sys_sendmsg+0xdd/0x1b0 [ 2366.561032] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2366.561592] ? lock_is_held_type+0xd7/0x130 [ 2366.562143] ? lock_is_held_type+0xd7/0x130 [ 2366.562704] ? find_held_lock+0x2c/0x110 [ 2366.563199] ? lock_release+0x3b2/0x750 [ 2366.563670] ? __might_fault+0xd1/0x170 [ 2366.564179] ? lock_downgrade+0x6d0/0x6d0 [ 2366.564697] ? lock_is_held_type+0xd7/0x130 [ 2366.565235] __sys_sendmmsg+0x18b/0x460 [ 2366.565728] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2366.566319] ? bit_wait_timeout+0x170/0x170 [ 2366.566832] ? syscall_enter_from_user_mode+0x18/0x50 [ 2366.567402] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2366.568097] ? __traceiter_irq_enable+0xa0/0xa0 [ 2366.568625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.569220] __x64_sys_sendmmsg+0x99/0x100 [ 2366.569694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.570282] do_syscall_64+0x3b/0x90 [ 2366.570701] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2366.571334] RIP: 0033:0x7f67303d7b19 [ 2366.571769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2366.573682] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2366.574523] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2366.575288] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2366.576111] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.576958] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2366.577777] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2366.578627] [ 2366.584640] FAULT_INJECTION: forcing a failure. [ 2366.584640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2366.586027] CPU: 0 PID: 20250 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2366.586850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2366.588043] Call Trace: [ 2366.588329] [ 2366.588586] dump_stack_lvl+0x8b/0xb3 [ 2366.589020] should_fail.cold+0x5/0xa [ 2366.589450] _copy_from_user+0x2a/0x170 [ 2366.589903] copy_msghdr_from_user+0x89/0x150 [ 2366.590408] ? __copy_msghdr+0x4b0/0x4b0 [ 2366.590873] ? __lock_acquire+0x164d/0x5e70 [ 2366.591369] ___sys_sendmsg+0xdd/0x1b0 [ 2366.591814] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2366.592342] ? lock_is_held_type+0xd7/0x130 [ 2366.592847] ? lock_is_held_type+0xd7/0x130 [ 2366.593333] ? find_held_lock+0x2c/0x110 [ 2366.593799] ? lock_release+0x3b2/0x750 [ 2366.594294] ? __might_fault+0xd1/0x170 [ 2366.594775] ? lock_downgrade+0x6d0/0x6d0 [ 2366.595272] ? lock_is_held_type+0xd7/0x130 [ 2366.595792] __sys_sendmmsg+0x18b/0x460 [ 2366.596331] ? __ia32_sys_sendmsg+0xb0/0xb0 20:36:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x1100, 0x0, 0x0}, 0x58) [ 2366.596875] ? bit_wait_timeout+0x170/0x170 [ 2366.597518] ? syscall_enter_from_user_mode+0x18/0x50 [ 2366.598146] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2366.598794] ? __traceiter_irq_enable+0xa0/0xa0 [ 2366.599352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.599969] __x64_sys_sendmmsg+0x99/0x100 [ 2366.600475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.601108] do_syscall_64+0x3b/0x90 [ 2366.601564] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2366.602172] RIP: 0033:0x7fb1f7990b19 [ 2366.602619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2366.604679] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2366.605534] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2366.606346] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2366.607153] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.607946] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2366.608754] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2366.609581] 20:36:37 executing program 6: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0xff, 0x88, 0x0, 0x0, 0x7fff, 0x24880, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x33e, 0x2, @perf_config_ext={0x7, 0x5}, 0x501, 0x8001, 0x80000001, 0x6, 0x3ff, 0x1ff, 0x726, 0x0, 0xfff, 0x0, 0x7fffffff}, 0x0, 0xc, r0, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)) keyctl$link(0x8, r3, r3) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, r4, 0x1) ioctl(r2, 0x6, &(0x7f0000000100)="0c6d013018845afd88c35daad6e6ea27824413f5ce63617757cfd7d544b02de168e19bea3240f72e2eb7295a4e2e774dd62f74a992234eabaf33d7c2d0e57247af1d2fc949bc259d172a4da2248e1ab55ad5b5a8ca239ae5a6ff768c30f2b5cce2a22c2fffa0e1becbb72e3ee040df460c08c9ea8cfca89f24f70ed0e93bb104df39bb6abd2cc89dcd6e10") r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xfc, 0x9, 0xfb, 0x8, 0x0, 0x2, 0x40001, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6, 0x2}, 0x40340, 0x2, 0x10000, 0x4, 0xfff, 0x100, 0xfffa, 0x0, 0x401, 0x0, 0xe0a}, r7, 0x1, 0xffffffffffffffff, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:36:37 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 40) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:36:37 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 18) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:36:37 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 37) 20:36:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x2000, 0x0, 0x0}, 0x58) [ 2366.757993] FAULT_INJECTION: forcing a failure. [ 2366.757993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2366.759299] CPU: 1 PID: 20267 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2366.759952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2366.760970] Call Trace: [ 2366.761264] [ 2366.761526] dump_stack_lvl+0x8b/0xb3 [ 2366.761967] should_fail.cold+0x5/0xa [ 2366.762393] _copy_from_user+0x2a/0x170 [ 2366.762845] copy_msghdr_from_user+0x89/0x150 [ 2366.763352] ? __copy_msghdr+0x4b0/0x4b0 [ 2366.763812] ? __lock_acquire+0x164d/0x5e70 [ 2366.764321] ___sys_sendmsg+0xdd/0x1b0 [ 2366.764763] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2366.765279] ? lock_is_held_type+0xd7/0x130 [ 2366.765770] ? lock_is_held_type+0xd7/0x130 [ 2366.766254] ? find_held_lock+0x2c/0x110 [ 2366.766716] ? lock_release+0x3b2/0x750 [ 2366.767160] ? __might_fault+0xd1/0x170 [ 2366.767608] ? lock_downgrade+0x6d0/0x6d0 [ 2366.768097] ? lock_is_held_type+0xd7/0x130 [ 2366.768592] __sys_sendmmsg+0x18b/0x460 [ 2366.768713] FAULT_INJECTION: forcing a failure. [ 2366.768713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2366.769038] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2366.770894] ? bit_wait_timeout+0x170/0x170 [ 2366.771368] ? syscall_enter_from_user_mode+0x18/0x50 [ 2366.771954] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2366.772544] ? __traceiter_irq_enable+0xa0/0xa0 [ 2366.773059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.773629] __x64_sys_sendmmsg+0x99/0x100 [ 2366.774094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.774652] do_syscall_64+0x3b/0x90 [ 2366.775069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2366.775637] RIP: 0033:0x7f67303d7b19 [ 2366.776058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2366.777976] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2366.778789] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2366.779551] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2366.780331] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.781105] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2366.781867] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2366.782654] [ 2366.782920] CPU: 0 PID: 20270 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2366.783941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2366.785322] Call Trace: [ 2366.785660] [ 2366.785959] dump_stack_lvl+0x8b/0xb3 [ 2366.786460] should_fail.cold+0x5/0xa [ 2366.786960] _copy_from_user+0x2a/0x170 [ 2366.787467] copy_msghdr_from_user+0x89/0x150 [ 2366.788078] ? __copy_msghdr+0x4b0/0x4b0 [ 2366.788610] ? __lock_acquire+0x164d/0x5e70 [ 2366.789183] ___sys_sendmsg+0xdd/0x1b0 [ 2366.789702] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2366.790297] ? lock_is_held_type+0xd7/0x130 [ 2366.790872] ? lock_is_held_type+0xd7/0x130 [ 2366.791429] ? find_held_lock+0x2c/0x110 [ 2366.791964] ? lock_release+0x3b2/0x750 [ 2366.792478] ? __might_fault+0xd1/0x170 [ 2366.792999] ? lock_downgrade+0x6d0/0x6d0 [ 2366.793538] ? lock_is_held_type+0xd7/0x130 [ 2366.794105] __sys_sendmmsg+0x18b/0x460 [ 2366.794629] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2366.795210] ? bit_wait_timeout+0x170/0x170 [ 2366.795748] ? syscall_enter_from_user_mode+0x18/0x50 [ 2366.796410] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2366.797080] ? __traceiter_irq_enable+0xa0/0xa0 [ 2366.797674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.798322] __x64_sys_sendmmsg+0x99/0x100 [ 2366.798851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.799496] do_syscall_64+0x3b/0x90 [ 2366.799978] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2366.800622] RIP: 0033:0x7fb1f7990b19 [ 2366.801091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2366.803212] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2366.804250] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2366.805090] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2366.805932] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.806776] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2366.807622] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2366.808509] [ 2366.821613] FAULT_INJECTION: forcing a failure. [ 2366.821613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2366.822649] CPU: 1 PID: 20269 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2366.823276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2366.824145] Call Trace: [ 2366.824352] [ 2366.824535] dump_stack_lvl+0x8b/0xb3 [ 2366.824851] should_fail.cold+0x5/0xa [ 2366.825168] _copy_from_user+0x2a/0x170 [ 2366.825484] copy_msghdr_from_user+0x89/0x150 [ 2366.825850] ? __copy_msghdr+0x4b0/0x4b0 [ 2366.826180] ? __lock_acquire+0x164d/0x5e70 [ 2366.826646] ___sys_sendmsg+0xdd/0x1b0 [ 2366.826975] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2366.827468] ? lock_is_held_type+0xd7/0x130 [ 2366.827833] ? lock_is_held_type+0xd7/0x130 [ 2366.828312] ? find_held_lock+0x2c/0x110 [ 2366.828751] ? lock_release+0x3b2/0x750 [ 2366.829182] ? __might_fault+0xd1/0x170 [ 2366.829607] ? lock_downgrade+0x6d0/0x6d0 [ 2366.830056] ? lock_is_held_type+0xd7/0x130 [ 2366.830526] __sys_sendmmsg+0x18b/0x460 [ 2366.830964] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2366.831299] ? bit_wait_timeout+0x170/0x170 [ 2366.831643] ? syscall_enter_from_user_mode+0x18/0x50 [ 2366.832023] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2366.832406] ? __traceiter_irq_enable+0xa0/0xa0 [ 2366.832775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.833150] __x64_sys_sendmmsg+0x99/0x100 [ 2366.833486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.833887] do_syscall_64+0x3b/0x90 [ 2366.834185] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2366.834585] RIP: 0033:0x7f1f0562eb19 [ 2366.834873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2366.836229] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2366.836797] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2366.837333] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2366.837876] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.838408] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2366.838945] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2366.839500] 20:36:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x2c01, 0x0, 0x0}, 0x58) 20:36:37 executing program 7: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) flock(r2, 0xe) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000018c0)={'ip6tnl0\x00', &(0x7f0000001840)={'syztnl0\x00', 0x0, 0x0, 0xf9, 0x4, 0x2, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8000, 0x4c77, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002040)={'ip6gre0\x00', &(0x7f0000001fc0)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x0, 0x800, 0x27, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x700, 0x80, 0x3, 0x3}}) sendmmsg$inet6(r3, &(0x7f0000002240)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb96, @remote, 0x81}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000080)="07d44ddb845f6c393beb9acf4e6e6223", 0x10}, {&(0x7f0000000100)="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", 0xfc}, {&(0x7f00000003c0)="6a69cf3a144e00ed1c8b74689ef795e015d58edaaf280483d4284f3b757a2fca461cf06d3b270e86e0c5856d4ee95501fb58081c30056b68c3d23a756c94d540270954513e22df7c3d5c130c4f7f430aef1c0eb7ee06d0a26f29db26f5422be662621c70d959f0461f312e552592c19de8c1a9cb4fa5d3a2ccf7fb0b0b08a499703bcb94523886dfe6cbb6ec4aed9327d5", 0x91}, {&(0x7f0000000480)="10f1f57beb74653a45c997116c9925120da2e96b52cc34e618c1f2e0c06b46e398f9351e19fa0c65214cde6e23ba351633199b3028645e9d1048d8e8732d9b90a7537e0f2097ff99e2a0fc2d0e7442785b053c4eb6838c30b6ead7440f927426e0f22fe0c89e4804e411dc67c76758d4839a975d2c140668c6ecaa3101cd32c51d39cc4625ea22c48a09654ce10973b2485916f07698adec8afabbb8f23729c668a80854bc004503", 0xa8}, {&(0x7f0000000700)="4ffeb6af1821c0960df532c43a867369221bac68c08b7a0e794c8bca75304b7e402c43c758593e634981d722c9097c9cfe90909aa42b9900f4576b33dd95c189efb4ecce7ec31596d4ee6ca0116712d9460eb8f80fc018db8f31c3bda4b5ad1df775805bd566279398433ac25c0562106fb05b5363acab8d91a55158f9f0a7eda889d7230ad5ac616ad08cf21b49c3ca0b41b417797f33ced8", 0x99}, {&(0x7f00000008c0)="96b6cc8cceae56a17cf152374eb98d5a2153f69b8959bce2458dd7e0543485ede1de9e87f414655889e013a30e12cf8d29d6f0f1f933fd9835333bc3e344544f0df03584c1a82240d3540f35030268babf1c691c469c25ed5566ff2c4584b8a3d60702921c99c378581b79978c15a2e150404d2f1c67e3559393147d2c4c74bfd3e02105d48bebe67c0f8c672a05c0f4696dc52c9416bb1e76815ec13772d01297433846e31a80fdd5cc3a1fe1b9dcd882c6eac28547bd08fe842e7e5aa629e20ca53d52014f630a37329f9519eb45d00c23f9b80d14833849db36ca02c11f60b79e304973d2cccc2cbc9df2acc3d4a67e8cb245d66a", 0xf6}, {&(0x7f0000000200)="afa94f2e61cb98fe23ee5c3b470c486ab10512b5a3ed29418449f36229a5ffb16de6cd23c21ec7a0ebeb0807227fcfefe777423221696c06a2d07f485f5b49f1831631bc081f35af76b55f14b46913cb4ece6beb47a2f15f55c91df7ef44b2e826d31f559a02029c6018962abbde9d495aa2", 0x72}, {&(0x7f00000009c0)="10e959c1df46a2ae0dea594b4a5a602b5ea6c6621db4f683c0b7d92d2a71a94153dd85c08a5207a1beb004b5dcd28d1427857e73d2120d9d896d67d0984e38cf1fbd9d91fff0381b4446667ed48edbe1ffe02520603ac13cf7d62abf1a3c748c6a6368800f5f6eadb82396b14019e1a5b6ba0058a239e551dbdc92883e804bdae4e86a343b2fda036c71f7c5bd914917f6b13b3f16a1fac338b26688467d3d9a02dc0011fc346bf43f1c09838d9543786191deeea14169e3847b65d9017f115d857acd03fc5ab862", 0xc8}, {&(0x7f00000007c0)="9b7408e8837a625dae9078081f83651e9ee4810149fb3a7f7341c1a0c9cce293fe1ca7a2283e38a72be298cc4e91c1a33a5e21d8e3f5245593fba2f0e69d242a203bf78368b6f1c7f749d35b070797cb6cee596d2fb8887db75316e8f31bf5eb15f10db5fd9061cdbb444cfb29e1910513ebdfd5f6cee7a1e88f18", 0x7b}, {&(0x7f0000000ac0)="ded466fcded2f073f6c59f241b8afc949d62e01561a47ec35021724f7ca2a4918b693f3c4788e94b3e438a86e3eb5993343322186a1fa2992028c6853650a06f525ef14a76f21ced7c2ca27a1e495a00423e31e59f4b26f0797826029ce8b7cc36369506a124677d0e823d64fe84cefe764ea919a68189486eb5d7a6af56ed1cce569ca3044130be3d19fe", 0x8b}], 0xa, &(0x7f0000000c40)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x62, 0x2, '\x00', [@ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x0, 0x2, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x78}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x8, @loopback, 0xce}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000cc0)="9497769133b651f91ae19dab628c6568fe331668cb5107e644ba81dd5557efefb797d93c3c40dcc9b8d932417ad8f86b48ba7ebad38dd0d43977b4dfa7e3daccb8a4e5c6c997e6ede9ad3b758c032489b23e274500625c6bb893b0e689dcc6d1fecedc8e84a90a98ea0ff4a67f46281894fad893d4d90ed622f640834612d98a0e2b93b33a8da166c113c0c0804a061599d861c3d8e08df6f651d17a2d8fcae68f919cd2ab3cf294278fc2fb4c384449c758118b0031caaf57951cefde", 0xbd}, {&(0x7f0000000d80)="71542d27729af626675dabd638c26e663706b0ee291aed287d5c452baee5a8e10b5aa13b7048c91a", 0x28}, {&(0x7f0000000dc0)="544aad21316d5e33892946edb21b300919df697178990c9c53653b52312880aa4bf1944e326b24107fb1b61c7097", 0x2e}, {&(0x7f0000000e00)="f45dc6e4db3ff4b63197339ae5616123059390961b992fa68acd017f0417fb0b2470fc4efe445d6ea171b1fbf5746f37475ed5a1c3017841ced12eb159d706a8a5458ba24005540f391b584780aaa166e4193d938c431bd8b8663b0fabd5eeca9c4e2eca00241387c760b8e23d1fd41374b9089e2932461dafce2b0446d674643f449a2787e85504676a6bf73532985a6379cd0e701675872b3f7125b740fa", 0x9f}, {&(0x7f0000000ec0)="586c0f4d8f612c708328a0a20b0f0bcba145caeb73768173dc34574cfcf6fc293be68d3aa299a6f55124bd84fd6a922bf42b1e6f5826096fbf18c3d3c8afdd931bd709140e89774615444ebf354b4a9da68a76e67bc9d894ddf14bb5a276081b8c3e415f8bf3bb73ac31388512466bd5572451abbcfd6343cec733f533adb358124d883bdff118d810310a0b99df02cf060c8f9a4722de56ffbd9d59e289231c1b69393a93abf81fca4993f78368340aad8ad5576e1f6141029c010187f7bed309f52b667f58199430f4e9de1769a295ba77857fdee7149735f15af2fe7bf64e85c0430ff8", 0xe5}, {&(0x7f0000001040)="bb14b2814c006764ce4c66af2e5567c4d5248be61921372a4bccdd4da5fa3135d75c34ace77928c5feed67e8e0633b3a47a61ee0255121e455af715d9fad0423d99e47170d7d40033ed4bfeffd7b7933ec48758fff2bf95d1184bcbb410462fc04e7a786ce14e721dce3301aa00eba41f56cda6bae137063c518dfa30dee64cfba444ef68cdb387682c444f24eb50da99b298d7eb0c0", 0x96}, {&(0x7f0000001100)="637ff3e72c462d5e88e8624a7d5ad58980acbbc50938058b2c61142578497348a0192beead5d3088273e48a5d31d724e878e4ab94462148f6248f69678c6fbef89caca0da0b794dbe7fd63258d8a4f6a258f5a0c0a251b14340be4e93bd99fe3b8bce2ee7f58c6932b66c92946dacbef49c2bb50c6e1e34815ecb829f245f3060e52babe6871bf0b55ce2c4cfd3b75bed80ff9255d606d458332237684c8578fff117a6fa7c4f31d84c5f3f3990b2a837fe1b77b4f7c2f", 0xb7}, {&(0x7f00000011c0)="bb7c4cc1db2bc6bd15f365e5e52b217b0ee962a5c66c819a32436c43d421bb27a1686cfa408eec30bf7ccd7f3e69950fe57ab9df12a99003531a8f61400312914aec8904735c0ffee78cf4ab5fcd59ad8be843ec203fd5d2d819f19b0545215cb111271176ad9295ba453c4f4d49daeb975f6f15", 0x74}], 0x8, &(0x7f00000012c0)=[@rthdrdstopts={{0x88, 0x29, 0x37, {0x5e, 0xd, '\x00', [@ra={0x5, 0x2, 0x80}, @pad1, @generic={0x6, 0xf, "46c7e75b3d014d1e1f403586c871e3"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x20, 0x6, [0x9, 0x297f, 0x9, 0xb1, 0x401]}}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts={{0x38, 0x29, 0x37, {0x2b, 0x3, '\x00', [@ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0xdd}, @enc_lim, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7f}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x5c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5a6}]}}}], 0x110}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000fc0)="e53744daa2c1bce4b08f289175ec6a5a29bb09b607942f208df0934acf402c75a21b3056670e1a9132f82df5d41122b7", 0x30}, {&(0x7f0000001400)="877634379c9e35c11aeea3011eb33bde4b2a9ec72d8d42481cfefb62062897a842e9acb6e1a0fea4fc9114dc7ced9fececa82bc5f949ed59ddac36c9007d44ba234599abcfd2db08de6294835996fd7f70ca6abbf623716ff58235cf4b1d5338d446981c691505819f341cb20f9f410e447127af6bae6f1d49ae2577842a6e62ae32651d0d5f5380c59e41b262fd5f7fc27a291c71c0b17dc4733d9aca5d750e75d2a2e7e859ec7c47a6746192b4855b59717ce4ae5a3a69f9444a9a775906c56e124b8466b8fc3a8cf76d6fba4ad3244b41a00a49b5d7d9ad82dea1aa132e4c3093ccb3", 0xe4}, {&(0x7f0000001500)="9e7a4c3455dc1a3511d7e354926b964bc8a243f49d8ce2e79e6279dd92e3e9c2f83e7044b9e6ab254ba97b69ce42c622b4a3d269f27d4edb5b5306a7eb8908b8090631f16148eb53b92350d20f5ba80d803f2ed48120500e5b148e1197bf39d7da899c2903483ee6d9c909c0538ae17b6c0c317c24e49a990f11bbb6f3bf6a80816ddc0f297aabebade65f2edb088955db53774e0d4e14e4636bf5834fc0e15b01b204f361c6d174484d4591d532fd5d12065a9308f49d", 0xb7}, {&(0x7f00000015c0)="a238d60c1b714264deb1b252d9a33df6d10fa43506792cb1ce6fe544171094388a8155ca4bf72dca67906f7dada6250613d6379046646f8d90fb3b4511ce05a99395ee6d3feb015d03e9278756410a59a0b52ab1f45593043b2753fe50", 0x5d}, {&(0x7f0000001640)="2e075f62af003407329433901d441500ab06f6ac65b9d7772ed1c8f9e0909dc26dea53b6d3b2e8427d9b99d8b593b6fe15c28b9c18304a7ef39c4c8a03f409c0b780f39c4c3c574f7f5a49233b8064c223a9a3c9b867ccae9abee10b0f226e50fe415df1bfa3965a", 0x68}, {&(0x7f00000016c0)="d81f79e53ab083e48002b39c7f693f155111532d969315107c072e516c6854cafaee01d10b96bb7d98ae3a38aee8cdf3df0b8b988ee7f061a70e063b749bdded9ef21c90fdc75e2ffa7e8a67c599adfccfa61177838fed78ba3b871861ce817e85852655066039ed03396841dbefdf1499eb0f54586b30e396e3c6290dce425d38a491907fd2b006ae1ebcaf759a9eb485fd65b6dcfb889d849d71", 0x9b}], 0x6, &(0x7f0000001900)=[@rthdrdstopts={{0x70, 0x29, 0x37, {0x16, 0xa, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x6, 0x2, [0x80000001]}}, @generic={0x80, 0x4, "dbdf6377"}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x15}, @ra={0x5, 0x2, 0xffff}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x81}, @calipso={0x7, 0x10, {0x2, 0x2, 0x2, 0x4, [0x8000]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdrdstopts={{0x158, 0x29, 0x37, {0x1d, 0x28, '\x00', [@hao={0xc9, 0x10, @empty}, @pad1, @generic={0x4, 0xe1, "9b0cec390bbace71ca8700a4ca767e69a371b98a876e8040e9741b094a165f1d2e7bb77088c4d4d7ec1631c5e554a14e3a7b43237a126df1c0c28738022e4bb4bb1d9a7afff843d4c227a7ba54f8d6b26bf6020f16db90afdbcf936ae8914b8aafface5e3a1b45cf51a5e50d335d99ea4063e1f4f6cd84a1d737fa58d7ef33b7a9bc212061208d264cf18d283a5c88ec9fbea4fdca236ba95ee1d11819e45b353adc00b1cbe36108c14ab933bce9c6fe82c0b313172ed5c920e39ee2d1ae6f7451e572f48f0b635549a69cee105b64fef57ab9b8e6bbe7bf0647c8dd027dfaf374"}, @jumbo={0xc2, 0x4, 0x7dfd}, @calipso={0x7, 0x40, {0x2, 0xe, 0x9, 0x0, [0x8, 0x400, 0x800, 0x2, 0x74a5, 0x5, 0x5]}}]}}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x1d, 0x1a, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x1f, 0x100, [0x8b6, 0x3ff]}}, @ra={0x5, 0x2, 0x1}, @generic={0xa1, 0x98, "3c204d177e6182e91439fae8ea8becc2e8fd30618243e479d6be953bf427060748a80997e80413c231b171a5c1448a4be871e82f6a68618e752a17e9d5b691e7a33bac8726b93a221c989fa0beeb766559f92b162bf1ec27e366f86e204495223d1669f2a7d3401d5b35c9871455f6e219a4793c25fd182759882f7250801f7a00042ea405a50209cea302a5ed56ec9c79172a5520338379"}, @enc_lim={0x4, 0x1, 0x1f}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x4}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}, r4}}}], 0x2e0}}, {{&(0x7f0000001c00)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c, &(0x7f0000001f80)=[{&(0x7f0000001c40)="e008ab9b125581beb831ce6cbff02af4f796c647107f068f0cecfa9d5b292316ad2c45358972af811e3aa4cafa7c62cad7ec977770566c67690f07a6daccbbba4d4f89b9aaf48ff19c5084387625e60369692621fe9659c30d9a46c0c6d45022b2601ea6082adc9c20654f312bf2f396f7de5e2ed9f6aa4077e14dc0c991654a28e45909eb9de9aadf1697e49e3028f33801d1e9", 0x94}, {&(0x7f0000001d00)="055922c060fb2f5539b0eb386721d197790ba11099bc218ae5fa90c3a4b139272b887397b0da443cab02171dbb8e1624867145eee5ab92b9c72638650d3245528693e60d9889e400bf61f59c5bf1fba4c0a53c66f127f7deb6f2b6d7b1b78bb201a2fab6b550ae8194de668f9e65b16f1a71545b8cbc4b3909304e15e4a4d2", 0x7f}, {&(0x7f0000001d80)="f5682d0078e84f492bcb192bbcab4175c7c1bd3de8c10617cb68240421aed0cf36b9064de4909bc4c0d72364333f6a98ca914b8b54a37a4f8943b1c0b23c37fb3438884b395697740e2a6bac4a7fcbac3d04af2255497a3a9b35d538efcd1848a78b096c4e0f8c35989d4aa43f50a36c8e0d3eacf175cb4296059d9e0edaff13d1bd6a25bb8b5dbdc01527e029c2237f9647bd782289dd68233bb9879bd19ba8afa6b69cc5ef2ee7a07e1a914db23e56de93ca335453081fb0cd80c837446e3af4da5dc3e697fdaf4a808ccc848b5c181e171c0a24b31a4959a21c0df8", 0xdd}, {&(0x7f0000001e80)="dba43ed471035e1e33691b5d2a5b3fdd6b16f3aa33d296349f003115509897ed45d076977f015094af9cc2d43920d19aa16f91e139bd10cf6a49b93a948bebf1a3ea5b218d5e0e64e5d4869ee0a625fbd71caa3357ce499f35262b52c1afb1ef37ac5378e4e98382fb2555074271f469c9a0f879752d4d2d3a563beab2d98bb7a6da60d9466bf7a680d0be47e771ec53ec728685ce18e778cd0f0ea110a7b9b27335e80b68abc31bcc50af922d007750980a338f0bbef4c6e3e214bd39edcfbdc6570e91c945", 0xc6}], 0x4, &(0x7f0000002080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @rthdr={{0x48, 0x29, 0x39, {0x2c, 0x6, 0x3, 0x3f, 0x0, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x2f, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x4442}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x81}, @calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x3, [0x49a, 0xffffffffffff8001, 0x81, 0x5d]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x982a}}, @hopopts={{0x38, 0x29, 0x36, {0x1d, 0x3, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x2c, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x4537}, @pad1, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0xaf}, @enc_lim={0x4, 0x1, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2e, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r5}}}], 0x1b8}}], 0x4, 0x804) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000340), &(0x7f0000000380)=0x4) dup(r6) 20:36:37 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 38) 20:36:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x31d5, 0x0, 0x0}, 0x58) [ 2366.894674] FAULT_INJECTION: forcing a failure. [ 2366.894674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2366.895777] CPU: 1 PID: 20281 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2366.896391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2366.897222] Call Trace: [ 2366.897423] [ 2366.897599] dump_stack_lvl+0x8b/0xb3 [ 2366.897904] should_fail.cold+0x5/0xa [ 2366.898207] _copy_from_user+0x2a/0x170 [ 2366.898518] copy_msghdr_from_user+0x89/0x150 [ 2366.898871] ? __copy_msghdr+0x4b0/0x4b0 [ 2366.899194] ? __lock_acquire+0x164d/0x5e70 [ 2366.899539] ___sys_sendmsg+0xdd/0x1b0 [ 2366.899826] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2366.900201] ? lock_is_held_type+0xd7/0x130 [ 2366.900549] ? lock_is_held_type+0xd7/0x130 [ 2366.900889] ? find_held_lock+0x2c/0x110 [ 2366.901204] ? lock_release+0x3b2/0x750 [ 2366.901512] ? __might_fault+0xd1/0x170 [ 2366.901827] ? lock_downgrade+0x6d0/0x6d0 [ 2366.902155] ? lock_is_held_type+0xd7/0x130 [ 2366.902499] __sys_sendmmsg+0x18b/0x460 [ 2366.902788] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2366.903139] ? bit_wait_timeout+0x170/0x170 [ 2366.903443] ? syscall_enter_from_user_mode+0x18/0x50 [ 2366.903804] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2366.904239] ? __traceiter_irq_enable+0xa0/0xa0 [ 2366.904657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.905095] __x64_sys_sendmmsg+0x99/0x100 [ 2366.905442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2366.905883] do_syscall_64+0x3b/0x90 [ 2366.906206] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2366.906649] RIP: 0033:0x7f67303d7b19 [ 2366.906958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2366.908365] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2366.908951] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2366.909489] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2366.910021] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2366.910596] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2366.911216] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2366.911891] 20:36:37 executing program 1: syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, &(0x7f0000001980), 0x0, &(0x7f00000019c0)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r1}}, './file1\x00'}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file1\x00'}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [{0x2, 0x7, 0xee01}], {0x4, 0x6}, [{}, {0x8, 0x4, r1}, {0x8, 0x1, r3}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x3) 20:36:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "6c62e7deeb22aa6f7b44a852762e3cc1b69e00d0d8a075d2236be3bd56b82bbc2662de4d4cbb17edf8315db949c5a5a12e70d0b9015b9318e7d6aab0128f26a909"}}}}}}, 0x0) 20:36:53 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={&(0x7f0000000600), 0x2}, 0x9001, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="330a04057f180000fe8000000000000000000000000000bb000000000000000000000000000000000200aafc02000000000000000000090000000100000000000023f40000ffff000000009bd7a799b991"], 0x58) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:36:53 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 41) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:36:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x3f00, 0x0, 0x0}, 0x58) 20:36:53 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 39) 20:36:53 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 19) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:36:53 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$setopts(0x4206, r0, 0x100000000001, 0x44) ptrace(0x4208, r0) ptrace(0x4207, r0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = fork() perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x43, 0xff, 0x7f, 0x0, 0x0, 0x9, 0xc1120, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0xcd7a, 0x4}, 0xf76da24dc24838eb, 0x8, 0xfe6e, 0x8, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x6, 0x0, 0x6}, r2, 0x10, r1, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000006c0)=""/4096, &(0x7f0000000000)=0x1000) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000001c0)={0x4, 0x8, 0x2, 0x472b, 0x3, [0x8000, 0x9, 0x81, 0x7ac3]}) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) 20:36:53 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0x20, 0x2c, 0x0, @empty, @local, {[@routing={0x88, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 2382.689497] FAULT_INJECTION: forcing a failure. [ 2382.689497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2382.691339] CPU: 1 PID: 20409 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2382.692416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2382.693881] Call Trace: [ 2382.694233] [ 2382.694549] dump_stack_lvl+0x8b/0xb3 [ 2382.695083] should_fail.cold+0x5/0xa [ 2382.695609] _copy_from_user+0x2a/0x170 [ 2382.696161] copy_msghdr_from_user+0x89/0x150 [ 2382.696781] ? __copy_msghdr+0x4b0/0x4b0 [ 2382.697355] ? __lock_acquire+0x164d/0x5e70 [ 2382.697962] ___sys_sendmsg+0xdd/0x1b0 [ 2382.698499] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2382.699127] ? lock_is_held_type+0xd7/0x130 [ 2382.699735] ? lock_is_held_type+0xd7/0x130 [ 2382.700359] ? find_held_lock+0x2c/0x110 [ 2382.700918] ? lock_release+0x3b2/0x750 [ 2382.701462] ? __might_fault+0xd1/0x170 [ 2382.702011] ? lock_downgrade+0x6d0/0x6d0 [ 2382.702581] ? lock_is_held_type+0xd7/0x130 [ 2382.703190] __sys_sendmmsg+0x18b/0x460 [ 2382.703746] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2382.704381] ? bit_wait_timeout+0x170/0x170 [ 2382.704972] ? syscall_enter_from_user_mode+0x18/0x50 [ 2382.705661] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2382.706394] ? __traceiter_irq_enable+0xa0/0xa0 [ 2382.707061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2382.707796] __x64_sys_sendmmsg+0x99/0x100 [ 2382.708400] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2382.709118] do_syscall_64+0x3b/0x90 [ 2382.709648] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2382.710353] RIP: 0033:0x7f1f0562eb19 [ 2382.710857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2382.713294] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2382.714327] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2382.715272] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2382.716196] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2382.717124] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2382.718045] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2382.719011] [ 2382.725478] FAULT_INJECTION: forcing a failure. [ 2382.725478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2382.727360] CPU: 1 PID: 20410 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2382.728454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2382.729964] Call Trace: [ 2382.730317] [ 2382.730629] dump_stack_lvl+0x8b/0xb3 [ 2382.731149] should_fail.cold+0x5/0xa [ 2382.731678] _copy_from_user+0x2a/0x170 [ 2382.732248] copy_msghdr_from_user+0x89/0x150 [ 2382.732900] ? __copy_msghdr+0x4b0/0x4b0 [ 2382.733488] ? __lock_acquire+0x164d/0x5e70 [ 2382.734118] ___sys_sendmsg+0xdd/0x1b0 [ 2382.734669] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2382.735295] ? lock_is_held_type+0xd7/0x130 [ 2382.735915] ? lock_is_held_type+0xd7/0x130 [ 2382.736568] ? find_held_lock+0x2c/0x110 [ 2382.737136] ? lock_release+0x3b2/0x750 [ 2382.737688] ? __might_fault+0xd1/0x170 [ 2382.738234] ? lock_downgrade+0x6d0/0x6d0 [ 2382.738805] ? lock_is_held_type+0xd7/0x130 [ 2382.739412] __sys_sendmmsg+0x18b/0x460 [ 2382.739969] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2382.740598] ? bit_wait_timeout+0x170/0x170 [ 2382.741198] ? syscall_enter_from_user_mode+0x18/0x50 [ 2382.741911] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2382.742646] ? __traceiter_irq_enable+0xa0/0xa0 [ 2382.743301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2382.744006] __x64_sys_sendmmsg+0x99/0x100 [ 2382.744650] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2382.745377] do_syscall_64+0x3b/0x90 [ 2382.745921] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2382.746079] FAULT_INJECTION: forcing a failure. [ 2382.746079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2382.746638] RIP: 0033:0x7f67303d7b19 [ 2382.746660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2382.751196] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2382.752248] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2382.753227] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2382.754206] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2382.755191] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2382.756174] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2382.757189] [ 2382.757525] CPU: 0 PID: 20418 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2382.758628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2382.760158] Call Trace: [ 2382.760527] [ 2382.760854] dump_stack_lvl+0x8b/0xb3 [ 2382.761419] should_fail.cold+0x5/0xa [ 2382.761964] _copy_from_user+0x2a/0x170 [ 2382.762524] copy_msghdr_from_user+0x89/0x150 [ 2382.763173] ? __copy_msghdr+0x4b0/0x4b0 [ 2382.763761] ? __lock_acquire+0x164d/0x5e70 [ 2382.764421] ___sys_sendmsg+0xdd/0x1b0 [ 2382.764986] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2382.765639] ? lock_is_held_type+0xd7/0x130 [ 2382.766267] ? lock_is_held_type+0xd7/0x130 [ 2382.766886] ? find_held_lock+0x2c/0x110 [ 2382.767468] ? lock_release+0x3b2/0x750 [ 2382.768033] ? __might_fault+0xd1/0x170 [ 2382.768612] ? lock_downgrade+0x6d0/0x6d0 [ 2382.769210] ? lock_is_held_type+0xd7/0x130 [ 2382.769849] __sys_sendmmsg+0x18b/0x460 [ 2382.770425] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2382.771067] ? bit_wait_timeout+0x170/0x170 [ 2382.771675] ? syscall_enter_from_user_mode+0x18/0x50 [ 2382.772411] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2382.773165] ? __traceiter_irq_enable+0xa0/0xa0 [ 2382.773830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2382.774560] __x64_sys_sendmmsg+0x99/0x100 [ 2382.775165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2382.775894] do_syscall_64+0x3b/0x90 [ 2382.776450] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2382.777170] RIP: 0033:0x7fb1f7990b19 [ 2382.777684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2382.780123] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2382.781164] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2382.782139] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2382.783111] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2382.784089] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2382.785074] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2382.786180] 20:36:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x4000, 0x0, 0x0}, 0x58) 20:36:53 executing program 1: r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read(r2, &(0x7f0000000180)=""/136, 0x88) sendfile(r2, r2, 0x0, 0x100000) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000, &(0x7f0000000240)={0x70, 0x100071, 0xc0000, {r2}}, 0x20) 20:36:53 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='incremental-fs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:36:53 executing program 0: mkdir(&(0x7f0000002bc0)='./file0\x00', 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount$cgroup2(0x0, &(0x7f0000003100)='./file0\x00', &(0x7f0000003140), 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') 20:36:53 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 40) 20:36:54 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 42) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:36:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x60ff, 0x0, 0x0}, 0x58) 20:36:54 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 20) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 2383.131609] FAULT_INJECTION: forcing a failure. [ 2383.131609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2383.133365] CPU: 1 PID: 20489 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2383.134407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2383.135845] Call Trace: [ 2383.136197] [ 2383.136510] dump_stack_lvl+0x8b/0xb3 [ 2383.137040] should_fail.cold+0x5/0xa [ 2383.137562] _copy_from_user+0x2a/0x170 [ 2383.138103] copy_msghdr_from_user+0x89/0x150 [ 2383.138719] ? __copy_msghdr+0x4b0/0x4b0 [ 2383.139279] ? __lock_acquire+0x164d/0x5e70 [ 2383.139877] ___sys_sendmsg+0xdd/0x1b0 [ 2383.140437] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2383.141058] ? lock_is_held_type+0xd7/0x130 [ 2383.141666] ? lock_is_held_type+0xd7/0x130 [ 2383.142251] ? find_held_lock+0x2c/0x110 [ 2383.142783] ? lock_release+0x3b2/0x750 [ 2383.143315] ? __might_fault+0xd1/0x170 [ 2383.143850] ? lock_downgrade+0x6d0/0x6d0 [ 2383.144427] ? lock_is_held_type+0xd7/0x130 [ 2383.145027] __sys_sendmmsg+0x18b/0x460 [ 2383.145573] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2383.146187] ? bit_wait_timeout+0x170/0x170 [ 2383.146776] ? syscall_enter_from_user_mode+0x18/0x50 [ 2383.147469] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2383.148214] ? __traceiter_irq_enable+0xa0/0xa0 [ 2383.148851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.149550] __x64_sys_sendmmsg+0x99/0x100 [ 2383.150125] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.150823] do_syscall_64+0x3b/0x90 [ 2383.151331] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2383.152003] RIP: 0033:0x7f67303d7b19 [ 2383.152509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2383.154853] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2383.155841] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2383.156781] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2383.157704] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2383.158616] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2383.159536] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2383.160473] [ 2383.169514] FAULT_INJECTION: forcing a failure. [ 2383.169514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2383.171391] CPU: 0 PID: 20519 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2383.172500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2383.174049] Call Trace: [ 2383.174421] [ 2383.174758] dump_stack_lvl+0x8b/0xb3 [ 2383.175328] should_fail.cold+0x5/0xa [ 2383.175892] _copy_from_user+0x2a/0x170 [ 2383.176498] copy_msghdr_from_user+0x89/0x150 [ 2383.177168] ? __copy_msghdr+0x4b0/0x4b0 [ 2383.177772] ? __lock_acquire+0x164d/0x5e70 [ 2383.178412] ___sys_sendmsg+0xdd/0x1b0 [ 2383.178984] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2383.179646] ? lock_is_held_type+0xd7/0x130 [ 2383.180308] ? lock_is_held_type+0xd7/0x130 [ 2383.180941] ? find_held_lock+0x2c/0x110 [ 2383.181535] ? lock_release+0x3b2/0x750 [ 2383.182113] ? __might_fault+0xd1/0x170 [ 2383.182688] ? lock_downgrade+0x6d0/0x6d0 [ 2383.183302] ? lock_is_held_type+0xd7/0x130 [ 2383.183939] __sys_sendmmsg+0x18b/0x460 [ 2383.184543] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2383.185198] ? bit_wait_timeout+0x170/0x170 [ 2383.185832] ? syscall_enter_from_user_mode+0x18/0x50 [ 2383.186570] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2383.187347] ? __traceiter_irq_enable+0xa0/0xa0 [ 2383.188030] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.188798] __x64_sys_sendmmsg+0x99/0x100 [ 2383.189413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.190161] do_syscall_64+0x3b/0x90 [ 2383.190702] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2383.191444] RIP: 0033:0x7f1f0562eb19 [ 2383.191955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2383.194479] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2383.195535] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2383.196540] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2383.197520] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2383.198504] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2383.199502] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2383.200537] [ 2383.225208] FAULT_INJECTION: forcing a failure. [ 2383.225208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2383.226927] CPU: 0 PID: 20522 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2383.227997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2383.229510] Call Trace: [ 2383.229869] [ 2383.230192] dump_stack_lvl+0x8b/0xb3 [ 2383.230735] should_fail.cold+0x5/0xa [ 2383.231278] _copy_from_user+0x2a/0x170 [ 2383.231834] copy_msghdr_from_user+0x89/0x150 [ 2383.232481] ? __copy_msghdr+0x4b0/0x4b0 [ 2383.233059] ? __lock_acquire+0x164d/0x5e70 [ 2383.233669] ___sys_sendmsg+0xdd/0x1b0 [ 2383.234227] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2383.234867] ? lock_is_held_type+0xd7/0x130 [ 2383.235477] ? lock_is_held_type+0xd7/0x130 [ 2383.236108] ? find_held_lock+0x2c/0x110 [ 2383.236697] ? lock_release+0x3b2/0x750 [ 2383.237286] ? __might_fault+0xd1/0x170 [ 2383.237860] ? lock_downgrade+0x6d0/0x6d0 [ 2383.238475] ? lock_is_held_type+0xd7/0x130 [ 2383.239125] __sys_sendmmsg+0x18b/0x460 [ 2383.239722] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2383.240404] ? bit_wait_timeout+0x170/0x170 [ 2383.241030] ? syscall_enter_from_user_mode+0x18/0x50 [ 2383.241768] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2383.242537] ? __traceiter_irq_enable+0xa0/0xa0 [ 2383.243218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.243938] __x64_sys_sendmmsg+0x99/0x100 [ 2383.244566] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.245312] do_syscall_64+0x3b/0x90 [ 2383.245862] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2383.246608] RIP: 0033:0x7fb1f7990b19 [ 2383.247144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2383.249652] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2383.250720] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2383.251704] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2383.252711] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2383.253695] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2383.254682] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2383.255701] 20:37:09 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 43) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:37:09 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 21) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:37:09 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003040)=0x0) perf_event_open(&(0x7f0000002fc0)={0x3, 0x80, 0xb7, 0x0, 0x7, 0x1, 0x0, 0x1, 0x18808, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000002f80), 0x10}, 0x500a, 0x40, 0x6, 0x6, 0x9, 0x7fffffff, 0x3, 0x0, 0xf888, 0x0, 0x1}, r1, 0xe, r0, 0xc) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) r3 = dup(r0) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000040)="08081d10868ca1880bf175553b4a8108dc767be872063c9aa86fa681c3dbaa46b8d715c6546ea07424849402c3de9f99039f42c60304654389b591d9554cc2bc1129dd0f271602d4eb", 0x49}, {&(0x7f0000000100)="a31347d2073b70c6ba052074e36e5c02cc44b2e0285f680a0b58925968275015dc2178f711c26f1af12f4d85a2bbb56a5ac6596d973f0c097410a3cfc4bd6765d8", 0x41}, {&(0x7f0000000180)="9b3871d784812675fb4e30c0df91d067e9645c50c9d77f4dcf7d755b11c4098c0600d4923a8d22fc15d73a629ca6a84423d8f8969553883758ce33f34a43bdf36df283c00a3d8dc6fd03", 0x4a}], 0x4, &(0x7f0000000300)=[@ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x5e, [@empty, @local, @remote, @multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast1]}, @timestamp={0x44, 0x8, 0xa3, 0x0, 0x9, [0x1]}, @timestamp={0x44, 0x8, 0xb3, 0x0, 0x7, [0x8]}, @generic={0x94, 0x3, "ac"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x54, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x1a, [@local]}, @generic={0x89, 0x7, "7df2b5552d"}, @end, @timestamp={0x44, 0x28, 0x4a, 0x0, 0x0, [0x1, 0x5, 0x1, 0x4, 0x80000000, 0x2, 0x93c3, 0x73c2, 0x40]}, @lsrr={0x83, 0xb, 0x30, [@private=0xa010100, @rand_addr=0x64010102]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}], 0x138}}, {{&(0x7f0000000240)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="d3", 0x1}, {&(0x7f0000000480)="93491dee7185670cb8f27f29ed00bd0add1a08f63e2e552b5167aa85f39881f52dcb061b0fcafa9cccc3a2b34cc4a02aeb2a5315614771d97ce4d74bd3eaf9077f04bb7ca93a66fdf6e217e11dd2d6ee267f3704c2c415ee2a73bfa9e5b988f2aaa410b7dd8b2df7c0a122423270c026bcfd7cbae47a1f7ac147a3ae3fbb9c6ebcc11dca2d7f6fd338179820021c80a30bd2e2f7f0e42fe8b1522cc106d455fce9b899279d08e36c6a95f0f536215b55dff638fb4d08", 0xb6}, {&(0x7f00000016c0)="9d438b54d6cc1f190d19f8271ba32e7725059901f7f3fc84ddc01fab3db1ab8ec71ada21279850cb2750a11f870c5edaa27563160b696a44c67ca45f72f655b19d4b162d3ea217305387312e6ada7f2093fde1e065ebc8a0f8a56eb84905b4db3667db3bb1094a10ddef9a30cc51514029a20d219a41c61805c49cb0635331f59bf695fe90829498dead14209ed538d67f", 0x91}, {&(0x7f0000001780)="3b58565c61344c1d92b1c19e0080ba5e95caba2e04f11fca2bc64f4b2019131d4af44d62eca0e8f245bdaba4f5181a8a1a704f286596e29da4524348cd298cf6ef0c4a874bb63574b530ae4cfe31b9f1421e146a29bc46c158d469675dcf0ffe742261aa07a02196ae69f109ee629b6212d550b3895426783fbd11a6eaa1b4a7bab5", 0x82}], 0x4}}, {{&(0x7f0000001840)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001880)="4beec9b57936ae1fca7e444d0a1090830cb1a82cc2551f4868ecbdf7834afbaed936c42feb6f5e0418baf9fb4f0e9c7b4f74c063c09db3e8fe9128b7c8b122fcc06a20b5978a8d0a6fa67ea07b6dfb936a6e2b980c47590903381139e4e8", 0x5e}, {&(0x7f0000001900)}, {&(0x7f0000001940)="f026ef36503314a5f00f5bcb259daaf28796c82ac31a06f7814e1be3f2ec9f794fa5d1849e6ab31e296dbb1b9fa7d536fb2f4e1f5617b7f5a50cac9f4021196907b0b3ece28a6e46a865df2a445c797b7bf82a0f7dcf271f19fd76eff78b4f42c85f70dbb3279163df4f8bc7314494a22e7f0ad646fedc2707b5c98667cc05bbbe7dadc3a62a932b30940b2238924d304439a098b97e594999e170432971d9dfc4f6119a35e262b8366862f00257c0acad691a", 0xb3}, {&(0x7f0000001a00)="d0710f10e4e67ff6694253605d02b4d382aeecb96c5603b82dfc2b38771a7caa583d87a3e4689a6882d95be8b8571676b72e50caa815f84448e1d443c83eb6fe6e997b9c9593e435967c392cce6668deda879cfbf486888c8eb3585099e58c01d160bb1d4dfde356f13123b600a2a9e4ae04d861b307ac92e445e8", 0x7b}, {&(0x7f0000001a80)="397aa11bf9651ec566b085c5d12cfc9f7197405a03c7a7ed655827dd06b714061ed72565dca7f561bedc3b27909c97ff48544fa2209c38cf4653ed838ee5f1229d5227111e3de456825f4885c1f8aad126911ff53a24ffbdd4c9b9a6a3b1c36a6f4a1fab45bbaf7c7261f8e412e2ddf3db014c82d690d17c8eb1bd8f1439ab424981e1937128aa80046d807df26ec2ee4670d9a0810d8507472afd0a63e90fc7f4bdc2e5494ecc42a7b7428122a477352c2295faf12e5e99805c634b6b874a63a1368c1c75c029f403c2fac217826292bcfb4b78a90b20", 0xd7}, {&(0x7f0000001b80)="6259d15874375325d55ed198a9cdbd4cbb7a22b654b2a086fd206e57989c72a3b9b2cfd79eff34d29b76b5fb5e7372cc477cd075135f7db81b1c89f4f989339248920d2a36ffd883d1254220e5eeb69c0c1804f5ee643a337d167537721aff68cfc3be58c65a1a4e4bd0f03c7f2abce5cd3c29606a908d5170517fd95984fe589644b5101801e9dd87c502e6", 0x8c}], 0x6, &(0x7f0000001cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe3}}], 0xfffffffffffffd78}}, {{&(0x7f0000001d00)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000001d40)="c2022166804d80c808ddf485ee85155f69dae5c0e2fdf0dbc4990faffcfd4508ed2397e0554a94ecd34ce5bc8810adb5f187e8f37a557105d4f5e786bac33c30b4856c2edb6272880b593b28417d217f4603eec285d7b02b4bc46e", 0x5b}, {&(0x7f0000001dc0)="606b0e8c6c5b898ef1a098aecfb5ba2e5a280ad6d4c2173eefad86ea49e7b29ad1d15df8c384c452c03305f47d159a882eb4", 0x32}], 0x2}}], 0x4, 0x20000045) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x8010, r2, 0x8000000) syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000002f40)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x0, 0x0, &(0x7f0000001f40)="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", 0x9}, 0x6) 20:37:09 executing program 1: r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read(r2, &(0x7f0000000180)=""/136, 0x88) sendfile(r2, r2, 0x0, 0x100000) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000, &(0x7f0000000240)={0x70, 0x100071, 0xc0000, {r2}}, 0x20) 20:37:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x8800, 0x0, 0x0}, 0x58) 20:37:09 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 41) 20:37:09 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x53, 0x1, 0x2, 0x5, 0x0, 0x80000001, 0x8000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x83}, 0x100, 0x1, 0x200, 0x3, 0x19, 0x6, 0x4, 0x0, 0xa2, 0x0, 0xad}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) accept$unix(r3, &(0x7f0000000000), &(0x7f0000000080)=0x6e) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)) keyctl$link(0x8, r4, r4) keyctl$link(0x8, r4, r1) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:37:09 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2398.139538] FAULT_INJECTION: forcing a failure. [ 2398.139538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.140542] CPU: 0 PID: 20563 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2398.141165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.141996] Call Trace: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r0, &(0x7f00000003c0)='./file1/file0\x00', 0x408001, 0x4a) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) r3 = openat$cgroup_subtree(r1, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000000000000002e2f66696c65312f66696c65300093b95a4e106c4b72849b1a10ad4459ac6853929c0c44400fc1084f869b9695c8c08c1a4385e73911fa9d575db554428f46955802e4dfff2490"]) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) [ 2398.142193] [ 2398.142625] dump_stack_lvl+0x8b/0xb3 [ 2398.142941] should_fail.cold+0x5/0xa [ 2398.143243] _copy_from_user+0x2a/0x170 [ 2398.143555] copy_msghdr_from_user+0x89/0x150 [ 2398.143910] ? __copy_msghdr+0x4b0/0x4b0 [ 2398.144231] ? __lock_acquire+0x164d/0x5e70 [ 2398.144585] ___sys_sendmsg+0xdd/0x1b0 [ 2398.144893] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2398.145253] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 2398.145650] ? lock_is_held_type+0xd7/0x130 [ 2398.145990] ? find_held_lock+0x2c/0x110 [ 2398.146308] ? lock_release+0x3b2/0x750 [ 2398.146617] ? __might_fault+0xd1/0x170 [ 2398.146932] ? lock_downgrade+0x6d0/0x6d0 [ 2398.147269] ? lock_is_held_type+0xd7/0x130 [ 2398.147621] __sys_sendmmsg+0x18b/0x460 [ 2398.147939] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2398.148287] ? bit_wait_timeout+0x170/0x170 [ 2398.148627] ? syscall_enter_from_user_mode+0x18/0x50 [ 2398.149031] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2398.149465] ? __traceiter_irq_enable+0xa0/0xa0 [ 2398.149852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.150261] __x64_sys_sendmmsg+0x99/0x100 [ 2398.150595] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.151000] do_syscall_64+0x3b/0x90 [ 2398.151294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2398.151697] RIP: 0033:0x7f1f0562eb19 [ 2398.151989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.153368] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2398.153956] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2398.154504] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2398.155044] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.155585] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2398.156130] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2398.156709] ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000700)={0xe4d, 0x200, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r4, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') r5 = clone3(&(0x7f0000000300)={0x100000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x39}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) tkill(r6, 0x17) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r5, r6], 0x2}, 0x58) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x6, 0x1, 0x8, 0x0, 0x0, 0x4, 0x40002, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0xfff}, 0x4000, 0x40, 0x9, 0x4, 0x7, 0x40, 0x401, 0x0, 0x2, 0x0, 0x9}, r6, 0xe, 0xffffffffffffffff, 0x3) fcntl$dupfd(r2, 0x0, r0) 20:37:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x9d02, 0x0, 0x0}, 0x58) [ 2398.162322] FAULT_INJECTION: forcing a failure. [ 2398.162322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.163341] CPU: 0 PID: 20566 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2398.163947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.164804] Call Trace: [ 2398.165006] [ 2398.165182] dump_stack_lvl+0x8b/0xb3 [ 2398.165489] should_fail.cold+0x5/0xa [ 2398.165797] _copy_from_user+0x2a/0x170 [ 2398.166100] copy_msghdr_from_user+0x89/0x150 [ 2398.166462] ? __copy_msghdr+0x4b0/0x4b0 [ 2398.166783] ? __lock_acquire+0x164d/0x5e70 [ 2398.167138] ___sys_sendmsg+0xdd/0x1b0 [ 2398.167456] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2398.167821] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 2398.168215] ? lock_is_held_type+0xd7/0x130 [ 2398.168576] ? find_held_lock+0x2c/0x110 [ 2398.168889] ? lock_release+0x3b2/0x750 [ 2398.169201] ? __might_fault+0xd1/0x170 [ 2398.169518] ? lock_downgrade+0x6d0/0x6d0 [ 2398.169846] ? lock_is_held_type+0xd7/0x130 [ 2398.170190] __sys_sendmmsg+0x18b/0x460 [ 2398.170504] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2398.170865] ? bit_wait_timeout+0x170/0x170 [ 2398.171204] ? syscall_enter_from_user_mode+0x18/0x50 [ 2398.171615] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2398.172039] ? __traceiter_irq_enable+0xa0/0xa0 [ 2398.172428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.172855] __x64_sys_sendmmsg+0x99/0x100 [ 2398.173195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.173600] do_syscall_64+0x3b/0x90 [ 2398.173901] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2398.174303] RIP: 0033:0x7fb1f7990b19 [ 2398.174583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.175993] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2398.176592] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2398.177142] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2398.177512] FAULT_INJECTION: forcing a failure. [ 2398.177512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.177676] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.177688] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2398.180476] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2398.181043] [ 2398.181226] CPU: 1 PID: 20572 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2398.182401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.184047] Call Trace: [ 2398.184437] [ 2398.184777] dump_stack_lvl+0x8b/0xb3 [ 2398.185376] should_fail.cold+0x5/0xa [ 2398.186131] _copy_from_user+0x2a/0x170 [ 2398.186906] copy_msghdr_from_user+0x89/0x150 [ 2398.187757] ? __copy_msghdr+0x4b0/0x4b0 [ 2398.188514] ? __lock_acquire+0x164d/0x5e70 [ 2398.189204] ___sys_sendmsg+0xdd/0x1b0 [ 2398.189806] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2398.190534] ? lock_is_held_type+0xd7/0x130 [ 2398.191256] ? lock_is_held_type+0xd7/0x130 [ 2398.191925] ? find_held_lock+0x2c/0x110 [ 2398.192552] ? lock_release+0x3b2/0x750 [ 2398.193165] ? __might_fault+0xd1/0x170 [ 2398.193777] ? lock_downgrade+0x6d0/0x6d0 [ 2398.194432] ? lock_is_held_type+0xd7/0x130 [ 2398.195101] __sys_sendmmsg+0x18b/0x460 [ 2398.195710] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2398.196400] ? bit_wait_timeout+0x170/0x170 [ 2398.197063] ? syscall_enter_from_user_mode+0x18/0x50 [ 2398.197837] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2398.198680] ? __traceiter_irq_enable+0xa0/0xa0 [ 2398.199398] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.200201] __x64_sys_sendmmsg+0x99/0x100 [ 2398.200860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.201655] do_syscall_64+0x3b/0x90 [ 2398.202252] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2398.203041] RIP: 0033:0x7f67303d7b19 [ 2398.203557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.206219] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2398.207328] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2398.208384] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2398.209539] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.210860] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2398.212180] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2398.213566] 20:37:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xd531, 0x0, 0x0}, 0x58) 20:37:09 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 42) 20:37:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) 20:37:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xfd03, 0x0, 0x0}, 0x58) 20:37:09 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 44) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) [ 2398.402068] FAULT_INJECTION: forcing a failure. 20:37:09 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 22) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 2398.402068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.403450] CPU: 0 PID: 20588 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2398.404054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.404901] Call Trace: [ 2398.405103] [ 2398.405287] dump_stack_lvl+0x8b/0xb3 [ 2398.405596] should_fail.cold+0x5/0xa [ 2398.405898] _copy_from_user+0x2a/0x170 [ 2398.406204] copy_msghdr_from_user+0x89/0x150 [ 2398.406565] ? __copy_msghdr+0x4b0/0x4b0 [ 2398.406892] ? __lock_acquire+0x164d/0x5e70 [ 2398.407238] ___sys_sendmsg+0xdd/0x1b0 [ 2398.407545] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2398.407909] ? lock_is_held_type+0xd7/0x130 [ 2398.408254] ? lock_is_held_type+0xd7/0x130 [ 2398.408592] ? find_held_lock+0x2c/0x110 [ 2398.408911] ? lock_release+0x3b2/0x750 [ 2398.409223] ? __might_fault+0xd1/0x170 [ 2398.409532] ? lock_downgrade+0x6d0/0x6d0 [ 2398.409858] ? lock_is_held_type+0xd7/0x130 [ 2398.410204] __sys_sendmmsg+0x18b/0x460 [ 2398.410520] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2398.410867] ? bit_wait_timeout+0x170/0x170 [ 2398.411202] ? syscall_enter_from_user_mode+0x18/0x50 [ 2398.411601] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2398.412022] ? __traceiter_irq_enable+0xa0/0xa0 [ 2398.412406] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.412812] __x64_sys_sendmmsg+0x99/0x100 [ 2398.413142] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.413539] do_syscall_64+0x3b/0x90 [ 2398.413839] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2398.414245] RIP: 0033:0x7f67303d7b19 [ 2398.414532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.415885] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2398.416456] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2398.416994] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2398.417523] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.418046] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2398.418579] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2398.419123] [ 2398.476208] FAULT_INJECTION: forcing a failure. [ 2398.476208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.477280] CPU: 0 PID: 20596 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2398.477879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.478712] Call Trace: [ 2398.478916] [ 2398.479092] dump_stack_lvl+0x8b/0xb3 [ 2398.479401] should_fail.cold+0x5/0xa [ 2398.479698] _copy_from_user+0x2a/0x170 [ 2398.480005] copy_msghdr_from_user+0x89/0x150 [ 2398.480361] ? __copy_msghdr+0x4b0/0x4b0 [ 2398.480686] ? __lock_acquire+0x164d/0x5e70 [ 2398.481034] ___sys_sendmsg+0xdd/0x1b0 [ 2398.481344] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2398.481703] ? lock_is_held_type+0xd7/0x130 [ 2398.482054] ? lock_is_held_type+0xd7/0x130 [ 2398.482397] ? find_held_lock+0x2c/0x110 [ 2398.482712] ? lock_release+0x3b2/0x750 [ 2398.483022] ? __might_fault+0xd1/0x170 [ 2398.483330] ? lock_downgrade+0x6d0/0x6d0 [ 2398.483655] ? lock_is_held_type+0xd7/0x130 [ 2398.484001] __sys_sendmmsg+0x18b/0x460 [ 2398.484327] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2398.484701] ? bit_wait_timeout+0x170/0x170 20:37:09 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r3, r4, &(0x7f0000000040)=0x8, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) [ 2398.485038] ? syscall_enter_from_user_mode+0x18/0x50 [ 2398.485636] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2398.486046] ? __traceiter_irq_enable+0xa0/0xa0 [ 2398.486409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.486807] __x64_sys_sendmmsg+0x99/0x100 [ 2398.487136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.487532] do_syscall_64+0x3b/0x90 [ 2398.487834] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2398.488226] RIP: 0033:0x7f1f0562eb19 [ 2398.488526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.489854] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2398.490435] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2398.490988] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2398.491530] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.492072] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2398.492622] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2398.493175] [ 2398.518579] FAULT_INJECTION: forcing a failure. [ 2398.518579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.520567] CPU: 1 PID: 20598 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2398.521715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2398.523402] Call Trace: [ 2398.523819] [ 2398.524157] dump_stack_lvl+0x8b/0xb3 [ 2398.524732] should_fail.cold+0x5/0xa [ 2398.525316] _copy_from_user+0x2a/0x170 [ 2398.525912] copy_msghdr_from_user+0x89/0x150 [ 2398.526562] ? __copy_msghdr+0x4b0/0x4b0 [ 2398.527170] ? __lock_acquire+0x164d/0x5e70 [ 2398.527838] ___sys_sendmsg+0xdd/0x1b0 [ 2398.528433] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2398.529217] ? lock_is_held_type+0xd7/0x130 [ 2398.529864] ? lock_is_held_type+0xd7/0x130 [ 2398.530482] ? find_held_lock+0x2c/0x110 [ 2398.531117] ? lock_release+0x3b2/0x750 [ 2398.531789] ? __might_fault+0xd1/0x170 [ 2398.532438] ? lock_downgrade+0x6d0/0x6d0 [ 2398.533076] ? lock_is_held_type+0xd7/0x130 [ 2398.533826] __sys_sendmmsg+0x18b/0x460 [ 2398.534465] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2398.535131] ? bit_wait_timeout+0x170/0x170 [ 2398.535781] ? syscall_enter_from_user_mode+0x18/0x50 [ 2398.536666] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2398.537468] ? __traceiter_irq_enable+0xa0/0xa0 [ 2398.538184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.539037] __x64_sys_sendmmsg+0x99/0x100 [ 2398.539641] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.540402] do_syscall_64+0x3b/0x90 [ 2398.541006] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2398.541818] RIP: 0033:0x7fb1f7990b19 [ 2398.542391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.545561] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2398.546966] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2398.548263] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2398.549538] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.550793] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2398.552053] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2398.553378] 20:37:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x20010, 0x0, 0x0}, 0x58) 20:37:26 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat(r0, &(0x7f00000003c0)='./file1/file0\x00', 0x408001, 0x4a) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) r3 = openat$cgroup_subtree(r1, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000000000000002e2f66696c65312f66696c65300093b95a4e106c4b72849b1a10ad4459ac6853929c0c44400fc1084f869b9695c8c08c1a4385e73911fa9d575db554428f46955802e4dfff2490"]) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000700)={0xe4d, 0x200, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r4, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') r5 = clone3(&(0x7f0000000300)={0x100000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x39}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) tkill(r6, 0x17) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r5, r6], 0x2}, 0x58) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x6, 0x1, 0x8, 0x0, 0x0, 0x4, 0x40002, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0xfff}, 0x4000, 0x40, 0x9, 0x4, 0x7, 0x40, 0x401, 0x0, 0x2, 0x0, 0x9}, r6, 0xe, 0xffffffffffffffff, 0x3) fcntl$dupfd(r2, 0x0, r0) 20:37:26 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 45) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:37:26 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 23) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:37:26 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 43) 20:37:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x5, 0x11, 0x0, 0x1, [@generic="1c"]}]}, 0x1c}], 0x1}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f00000004c0)=""/118, 0x76}, {&(0x7f00000007c0)=""/133, 0x85}], 0x3}, 0x0, 0x40000000}, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000000)) 20:37:26 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x7, 0x7f, 0x1, 0x0, 0xbfa, 0x45202, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x401f, 0x82}, 0x1, 0x0, 0x3, 0xe, 0x100000, 0x9, 0x101, 0x0, 0x4000000, 0x0, 0x800000000000}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000100)) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xdb4, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x44080) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) 20:37:26 executing program 6: ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)=@v2={0x2000000, [{0x7fffffff, 0x7}, {0x18a6, 0x4}]}, 0x14, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r4, 0x0, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfe60}}, {0x10, 0xb, 0x4}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040894) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) [ 2415.136393] FAULT_INJECTION: forcing a failure. [ 2415.136393] name fail_usercopy, interval 1, probability 0, space 0, times 0 20:37:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x3ffff, 0x0, 0x0}, 0x58) [ 2415.138155] CPU: 1 PID: 20714 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2415.139392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2415.140902] Call Trace: [ 2415.141256] [ 2415.141571] dump_stack_lvl+0x8b/0xb3 [ 2415.142115] should_fail.cold+0x5/0xa [ 2415.142639] _copy_from_user+0x2a/0x170 [ 2415.143177] copy_msghdr_from_user+0x89/0x150 [ 2415.143795] ? __copy_msghdr+0x4b0/0x4b0 [ 2415.144361] ? __lock_acquire+0x164d/0x5e70 [ 2415.144991] ___sys_sendmsg+0xdd/0x1b0 [ 2415.145537] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2415.146194] ? lock_is_held_type+0xd7/0x130 [ 2415.146811] ? lock_is_held_type+0xd7/0x130 [ 2415.147413] ? find_held_lock+0x2c/0x110 [ 2415.147978] ? lock_release+0x3b2/0x750 [ 2415.148530] ? __might_fault+0xd1/0x170 [ 2415.149113] ? lock_downgrade+0x6d0/0x6d0 [ 2415.149699] ? lock_is_held_type+0xd7/0x130 [ 2415.150314] __sys_sendmmsg+0x18b/0x460 [ 2415.150885] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2415.151509] ? bit_wait_timeout+0x170/0x170 [ 2415.152101] ? syscall_enter_from_user_mode+0x18/0x50 [ 2415.152811] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2415.153549] ? __traceiter_irq_enable+0xa0/0xa0 [ 2415.154202] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.154920] __x64_sys_sendmmsg+0x99/0x100 [ 2415.155511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.156219] do_syscall_64+0x3b/0x90 [ 2415.156752] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2415.157456] RIP: 0033:0x7f1f0562eb19 [ 2415.157960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2415.160309] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2415.161344] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2415.162284] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2415.163225] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2415.164161] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2415.165112] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2415.166082] [ 2415.182508] FAULT_INJECTION: forcing a failure. [ 2415.182508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2415.184323] CPU: 0 PID: 20726 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2415.185399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2415.186865] Call Trace: [ 2415.187223] [ 2415.187536] dump_stack_lvl+0x8b/0xb3 [ 2415.188067] should_fail.cold+0x5/0xa [ 2415.188607] _copy_from_user+0x2a/0x170 [ 2415.189160] copy_msghdr_from_user+0x89/0x150 [ 2415.189400] FAULT_INJECTION: forcing a failure. [ 2415.189400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2415.189778] ? __copy_msghdr+0x4b0/0x4b0 [ 2415.189823] ? __lock_acquire+0x164d/0x5e70 [ 2415.189876] ___sys_sendmsg+0xdd/0x1b0 [ 2415.189918] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2415.189956] ? lock_is_held_type+0xd7/0x130 [ 2415.194193] ? lock_is_held_type+0xd7/0x130 [ 2415.194796] ? find_held_lock+0x2c/0x110 [ 2415.195361] ? lock_release+0x3b2/0x750 [ 2415.195921] ? __might_fault+0xd1/0x170 [ 2415.196475] ? lock_downgrade+0x6d0/0x6d0 [ 2415.197080] ? lock_is_held_type+0xd7/0x130 [ 2415.197698] __sys_sendmmsg+0x18b/0x460 [ 2415.198268] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2415.198899] ? bit_wait_timeout+0x170/0x170 [ 2415.199508] ? syscall_enter_from_user_mode+0x18/0x50 [ 2415.200217] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2415.200994] ? __traceiter_irq_enable+0xa0/0xa0 [ 2415.201661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.202385] __x64_sys_sendmmsg+0x99/0x100 [ 2415.202987] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.203716] do_syscall_64+0x3b/0x90 [ 2415.204247] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2415.204986] RIP: 0033:0x7f67303d7b19 [ 2415.205498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2415.207897] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2415.208935] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2415.209908] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2415.210858] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2415.211829] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2415.212801] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2415.213793] [ 2415.214119] CPU: 1 PID: 20727 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2415.215218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2415.216730] Call Trace: [ 2415.217095] [ 2415.217425] dump_stack_lvl+0x8b/0xb3 [ 2415.217967] should_fail.cold+0x5/0xa [ 2415.218512] _copy_from_user+0x2a/0x170 [ 2415.219069] copy_msghdr_from_user+0x89/0x150 [ 2415.219715] ? __copy_msghdr+0x4b0/0x4b0 [ 2415.220297] ? __lock_acquire+0x164d/0x5e70 [ 2415.220937] ___sys_sendmsg+0xdd/0x1b0 [ 2415.221498] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2415.222148] ? lock_is_held_type+0xd7/0x130 [ 2415.222776] ? lock_is_held_type+0xd7/0x130 [ 2415.223414] ? find_held_lock+0x2c/0x110 [ 2415.223998] ? lock_release+0x3b2/0x750 [ 2415.224581] ? __might_fault+0xd1/0x170 [ 2415.225139] ? lock_downgrade+0x6d0/0x6d0 [ 2415.225748] ? lock_is_held_type+0xd7/0x130 [ 2415.226364] __sys_sendmmsg+0x18b/0x460 [ 2415.226947] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2415.227584] ? bit_wait_timeout+0x170/0x170 [ 2415.228210] ? syscall_enter_from_user_mode+0x18/0x50 [ 2415.228962] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2415.229736] ? __traceiter_irq_enable+0xa0/0xa0 [ 2415.230422] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.231165] __x64_sys_sendmmsg+0x99/0x100 [ 2415.231774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.232512] do_syscall_64+0x3b/0x90 [ 2415.233062] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2415.233801] RIP: 0033:0x7fb1f7990b19 [ 2415.234329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2415.236805] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2415.237853] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2415.238839] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2415.239829] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2415.240822] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2415.241801] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2415.242808] 20:37:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x40000, 0x0, 0x0}, 0x58) 20:37:26 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 46) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:37:26 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0xf7, 0x8, 0x7, 0x0, 0x7ff, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0x3}, 0x10820, 0x1f, 0x8001, 0x9, 0x3, 0x7f, 0x400, 0x0, 0x4, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) [ 2415.450506] FAULT_INJECTION: forcing a failure. [ 2415.450506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2415.452272] CPU: 0 PID: 20823 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2415.453339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2415.454814] Call Trace: [ 2415.455177] [ 2415.455494] dump_stack_lvl+0x8b/0xb3 [ 2415.456035] should_fail.cold+0x5/0xa [ 2415.456590] _copy_from_user+0x2a/0x170 [ 2415.457149] copy_msghdr_from_user+0x89/0x150 [ 2415.457789] ? __copy_msghdr+0x4b0/0x4b0 [ 2415.458360] ? __lock_acquire+0x164d/0x5e70 [ 2415.458979] ___sys_sendmsg+0xdd/0x1b0 [ 2415.459543] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2415.460182] ? lock_is_held_type+0xd7/0x130 [ 2415.460809] ? lock_is_held_type+0xd7/0x130 [ 2415.461430] ? find_held_lock+0x2c/0x110 [ 2415.462011] ? lock_release+0x3b2/0x750 [ 2415.462580] ? __might_fault+0xd1/0x170 [ 2415.463152] ? lock_downgrade+0x6d0/0x6d0 [ 2415.463754] ? lock_is_held_type+0xd7/0x130 [ 2415.464385] __sys_sendmmsg+0x18b/0x460 [ 2415.464984] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2415.465637] ? bit_wait_timeout+0x170/0x170 [ 2415.466250] ? syscall_enter_from_user_mode+0x18/0x50 [ 2415.466956] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2415.467714] ? __traceiter_irq_enable+0xa0/0xa0 [ 2415.468383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.469144] __x64_sys_sendmmsg+0x99/0x100 [ 2415.469753] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.470486] do_syscall_64+0x3b/0x90 [ 2415.471020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2415.471746] RIP: 0033:0x7f1f0562eb19 [ 2415.472274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2415.474630] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2415.475679] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2415.476619] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2415.477591] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2415.478519] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2415.479504] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2415.480504] 20:37:26 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 44) 20:37:26 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x20, 0xff, 0x20, 0xc8, 0x0, 0x1, 0x100, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x40, 0x0, 0xfffffffd, 0x0, 0x6, 0xffff, 0x5, 0x0, 0x8001, 0x0, 0x7fffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) [ 2415.575707] FAULT_INJECTION: forcing a failure. [ 2415.575707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2415.578034] CPU: 1 PID: 20844 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2415.579100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2415.580598] Call Trace: [ 2415.580958] [ 2415.581278] dump_stack_lvl+0x8b/0xb3 [ 2415.581831] should_fail.cold+0x5/0xa [ 2415.582375] _copy_from_user+0x2a/0x170 [ 2415.582933] copy_msghdr_from_user+0x89/0x150 [ 2415.583583] ? __copy_msghdr+0x4b0/0x4b0 [ 2415.584168] ? __lock_acquire+0x164d/0x5e70 [ 2415.584823] ___sys_sendmsg+0xdd/0x1b0 [ 2415.585383] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2415.586035] ? lock_is_held_type+0xd7/0x130 [ 2415.586669] ? lock_is_held_type+0xd7/0x130 [ 2415.587280] ? find_held_lock+0x2c/0x110 [ 2415.587863] ? lock_release+0x3b2/0x750 [ 2415.588429] ? __might_fault+0xd1/0x170 [ 2415.588998] ? lock_downgrade+0x6d0/0x6d0 [ 2415.589596] ? lock_is_held_type+0xd7/0x130 [ 2415.590230] __sys_sendmmsg+0x18b/0x460 [ 2415.590815] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2415.591443] ? bit_wait_timeout+0x170/0x170 [ 2415.592058] ? syscall_enter_from_user_mode+0x18/0x50 [ 2415.592785] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2415.593544] ? __traceiter_irq_enable+0xa0/0xa0 [ 2415.594208] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.594934] __x64_sys_sendmmsg+0x99/0x100 [ 2415.595545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.596270] do_syscall_64+0x3b/0x90 [ 2415.596836] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2415.597561] RIP: 0033:0x7f67303d7b19 [ 2415.598076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2415.600506] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2415.601542] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2415.602515] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2415.603475] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2415.604435] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2415.605422] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2415.606420] 20:37:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000003fc0)={0x28, 0x25, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xb4a5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@private1, @private2, @private2}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r2, 0x88, 0x68, 0x0, &(0x7f00000002c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@mcast1, @local, @mcast2, 0x1, 0xa1, 0x7, 0x400, 0x7, 0x6800040, r5}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 20:37:26 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 24) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 2415.699376] FAULT_INJECTION: forcing a failure. [ 2415.699376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2415.701160] CPU: 1 PID: 20851 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2415.702200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2415.703659] Call Trace: [ 2415.704009] [ 2415.704324] dump_stack_lvl+0x8b/0xb3 [ 2415.704878] should_fail.cold+0x5/0xa [ 2415.705412] _copy_from_user+0x2a/0x170 [ 2415.705957] copy_msghdr_from_user+0x89/0x150 [ 2415.706587] ? __copy_msghdr+0x4b0/0x4b0 [ 2415.707158] ? __lock_acquire+0x164d/0x5e70 [ 2415.707767] ___sys_sendmsg+0xdd/0x1b0 [ 2415.708314] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2415.708950] ? lock_is_held_type+0xd7/0x130 [ 2415.709560] ? lock_is_held_type+0xd7/0x130 [ 2415.710158] ? find_held_lock+0x2c/0x110 [ 2415.710717] ? lock_release+0x3b2/0x750 [ 2415.711273] ? __might_fault+0xd1/0x170 [ 2415.711838] ? lock_downgrade+0x6d0/0x6d0 [ 2415.712444] ? lock_is_held_type+0xd7/0x130 [ 2415.713100] __sys_sendmmsg+0x18b/0x460 [ 2415.713680] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2415.714330] ? bit_wait_timeout+0x170/0x170 [ 2415.714948] ? syscall_enter_from_user_mode+0x18/0x50 [ 2415.715682] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2415.716450] ? __traceiter_irq_enable+0xa0/0xa0 [ 2415.717110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.717862] __x64_sys_sendmmsg+0x99/0x100 [ 2415.718476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.719210] do_syscall_64+0x3b/0x90 [ 2415.719753] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2415.720481] RIP: 0033:0x7fb1f7990b19 [ 2415.720992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2415.723457] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2415.724495] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2415.725511] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2415.726491] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2415.727464] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2415.728448] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2415.729471] [ 2415.781860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:37:42 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 45) 20:37:42 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$nfs4(&(0x7f0000000340), 0x0, 0x0, 0x1, &(0x7f0000000980)=[{0x0}], 0x0, &(0x7f0000000a40)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x20) syz_open_procfs$userns(0x0, &(0x7f0000000fc0)) mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f0000001000)={0x0, 0x0, 0x10000}, 0x20) 20:37:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x2249, 0x0, 0x602c, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) lseek(r0, 0x0, 0x4) 20:37:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x1fffff, 0x0, 0x0}, 0x58) 20:37:42 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 47) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:37:42 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 25) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:37:42 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="c90ebef38e2dce8520c60107364d71434f766889a1b5045909a31a8b78d917aab7d97a8b8d40468e8d2f80f31f03f78792e0a04ebca1a75bc2afa4e6e92fb4d04d0a74cb071f299ca336543cac988b120a211351a18e2ba09294b0276e42abbb2c4d92aba3af902a13e17fa9c04c55ca747706007e15b0de9fc17ed5e0273f89e00cb68a40d7e70ad1853348197e2c5c3c7bff3a5e1f7464869aea3218cec6889c51825449b5e5ac33a152ff", 0xac}, {&(0x7f0000000200)="e70f939fad0828aeed3791bd7ebcca8b372e69f753a8572f2b646dbf962d951866782f8a9d3b0bbf2dfec71305451cc0f068e774491704b3114da3c7bc4b0484600336d547aa0bc9f94cd39a7f62a55c5e4e172889ee924c23685f1ccd78d48ea174ebe627590b9c4e493de8ac", 0x6d}, {&(0x7f0000000280)="c489bc8693af917f5f0732e4c89f711eed746ede586d40a716d0035626e76eaf8eb19134837bab1969588e03759b9e0a0d378c772ed205616e3ef0dcb4783a0b8199c67f991532ee255d419aaad5b425668c800d48a8588557b107d70b9de42e6170f80b31526e955bf99e9a0fb20d39dd71992803d15618912e3b107d27158b84dfeaa814f73cf36179da5dca3d07bd34d553f7909693b55c6c87f20ce1a9350c8421c19dfa27ca474b6944b18d70216e780ef8f85fcaa74b2c753ebddc3731bf8dfe7d2a2410219037dd2b35ea6d9ed4d3e5d9d936276f2e90f7a8761301c95336c42889973d54d63ab032995f97489269c72659c37f564965732bb4e7cc3456cb46782689829e9520bc28e99cccabe1db48f1445ed18e7840de479f36c2b931b3b246417bebbd1c93969cd2dd046f7927d60497e8adba56f14528eb82a34bd41bf67f065ca08b813440f81202ea7d5bf70250204e198cf7c977cc1383ed5edd3f070c9b89eee6128631fbf60f946bc0421146c7d2f9ca580b9d84843e67dd86e7e6643022fbf2bcc78378bc15b32796a6f23c4aa323dd85f62a01cb0de9c3ea8267fe9a3f26bec93eeb30b2583773aa838a213fb3aa056909ca3e25d9ccfa017b2f9938cf47d579d160bd573b09936d3b8c38dc4a9975a72a21104404b1f63a265639228f1bd4a3d0e3f6d23281e8d9e6d67231b2452a8c67f82fee63eacf76fc601bceb0f3aabab72509584aff32ac8556e3b33148b09d5c33c26d065cbd14c84f91084812e2dc1c079a93a3bb23bc6889f9f04d44e409f02e16ff783a63bd914f5ff32934d123b50d13a0c01144c0bf021dd911f9efd5bf1cecaa0621af07177e9500b2ce78932aae406c84a2dbd34b1d5f79dc3005b716dd58e365bf221d527694c172eb6322e60f131f22497415135f153735846930ada438f0f62134c15c258c517d91493ac790d5d780324f506a90b0a7f2c47d70d115f7cd968799e4a28ebc73ae4805fe08a3d9f13212a96b9ba3326b8ee8d804b5e1dde56dc68d7357e4a130183dfbef8187ec4d4bc1e6cb8d1de7cfb64478402ac2efd87b678d6dfaa7746c587c8d76f5aba9bc5e85584785f4597b99583ed730f5e2e6907bbfc0ab038108c452d8e87a8869addba43191f9a128c830b74073d3c47eae946c0e59819012902ea11b1fba22c77597c0cdcc85b7a92372807e3797e1c2fa6cf46710063828a65caf8e1092e7068977b2028a4f09c2f4d14047b871724d762e3dd48e85915fdb649a4d984db3b036e7d4394af4560d7c6f2d4255670ffb95c26d1d8f0b926571d7c0069d71a5b63bdb747c2cc3ad46da6a098912b294a358c4df0f8e57762b3995d9d704a2cc0c07620247dbf5e8568e6d78a0119c8c27185810999152ffd3556681a4a0882d9df398955d3466932e4453f5c3f1198353f9360fab68328cb826f6750db72c5b744710ef1211f81ce727165ee6964034d183885886d3761e2d28c26fd20f37ee4d1eef24e9fa4ce4dfcba139fa03098acc6d5ed1df58e733c3b8e3045b1157ca96b02f7d45f430f3c1c5d6582d8218e9102a5f6636c92ca1865a171c3a355ca0390df99fa0ec66e9ec5aef0d4cea4454550ce634c6cad9e1110b06b41c63c00b05f13151fa3c177f82ac2049a43dc763b228704a92ca99534a37b14150f7627ab0bba7072edd92296c766ac795c5ba5d50bc5c8a7c94aa59adf8a9e39cb3c0f20027fba0b25aacb7f008699b90eee1faaf71c685209a5289aac879d19a8720afac4a61cc26acf0673609d9cfb15144c11e9414cd56b95af2e5acd69c308a82ee5ad42b865f16f9e333aaeb74e5dfcd24290bcfa9d3b49fb49095701c5dee3a1a25039532c42276a889bb109b7387f114d3bae57c9840deee14f8089d287c8af5d8182f459c6d75ce037afc5c4585d346a31218bcea409ba4601a4163cf232ec2a56fb0b7adbcbd861c1fb255f36b2a3f86ca88b95f4cf0e8f2b0adc8f5c773ad0130b117c5c06c02a941c24728f0283eba995e3fab7bcd2a10b04e3b695e5f8ed849e83d1618814377bcb72f78e7d825741db00e173415bacfc926f8d827adc1e7c86e5e14cb9d6d4d7e39f09b0e260e692e65cf2e38ec0c9354a2b733dea19230974600cf14f160061af6bc2602971c456fb87f5c323f55d80ecadf6d22f7fbfcf90990f91a67a0cd4fb55fafe31e25471fb33b15b78d251cc984c37887abd92b8b0e1785c89df643fd0d112efa7b62327e142fc316224afef03cb53cfcb58f076b5042b1fed40d3368eecb8e41ffdeef0f27daaecff92df5f9ef0a1372e1488eb3012acde35c82cc777928fa1058ff452ec8378a23daeaaedf8e85652b59785d75ef72b3ac30cfb394e9a7cbff523f1a5f01906fadf32fbb8d461e587fbabeeee916a334db6f8fefe6097cbd814770b938af1f0643b9079d8ed9f265d58812326ebc50fb7e1d0115bfd672e31c7c02cecdfc3529eeadae78543356545b1a2bff9b805f0b46b76fb9b39e46f4fb4254baa0e1d8ca69683b97b85b46b3897c47d7ec76e65cee5baccc43d65fa5278048b859838524a47314997632521370d51e4d42bf6696c16e7d2d866415b15a825b4bf2102eb1d75248bfbdcfa8994fa928ac944b3bdcb47d5854d7bfee0780bdd3231b39a6fc0bf0bab909051f5510305ab21b9587f1a7b22dd8e16dd4e9e0970a535d5cd5de6d97ec183d93d717342a7e03db618c5901cc64a6bf7b020c573f2d3242f287b3929a44c8bb31112456f42a584aa49efde57cf7aab7ea8ca32cc55ed106a601e4d080d0a9314ad89fec44ede06aef5ddbc3c9d62750e4cd5d8f150fddbb271b9ceb6610b2c287cc3956ca7d327fe4c2f595f157f03b9c5b467c99d4c55ddb2bdbd971c72007ee07a4548a1b9da2ddf8f14cacdff74ee8d42e8caff16487fb8e1a72a92b75f23cae8752e9671027b89751c112c093d267ce60397e3f4cb312ee9e83ce01d2d03d98f353ecb2f291f2df42a2375962b579f6aa306bef976514a76d1b0956671eb72c11fe7cbacc2dac32c163abbd096e68b402733678796656aa3e7ecccff75da5e65c95bac3956274e29e7c64daea254ec2d192965dfc180a25a37b4cca54e375b7ffc1e646998384a48588a0ceacb786bf532434e43a7f24526ef71372f199c2fdff84745311d33074e440524d47235a44e8f8eb8a1ba8a17a80b6ae78b5b6d54af8b7077285cc2edbc8cdbb19a49b6a53cb8b96e5dd3410546fe9c5ace53759f5db013b88bedb010f074b6861ae2983ac89ecc544534dc2e33caa53496ed0404daab79fe25f20d8f60c3874bfea4c641fcb0454b7340c5ce186ff708a15c628bc2a7b647edacd131e3556f287b57016319335a7a653d46abd48aaddcf11befc2c7f277743db0d4c7196c8c7d5993e7e5c549246341350b3d0d7347744343cc17b25d89284bb38cced6cadfcfa555c725640dff005b5a59025baf1c42398bacee8117aba43f24753e6d921d4a0a114d17c38bc950a62d22a80af764259d7b2d6dcd0847ee7ffcf0716fa2125ec535f6eacde968ec8b16ea80fe27c2d6b8adbfa71781376ef657d35fa7c4d1a553830b8e1a137e43ab57754e16d631184d5d5ad8fa9c0b6ee2f82d30d39ebe06f64cfc4fd21a05f0c8e64dde5df871b1192f9022398cdd9a5ae43aa9da706817b99529d9eddbfc67c9e863c75e27349268172189e769681873619cf5176775661c6b1226f38c45029dcb6f8eef7a61d128fa378bb861d50454930cd5b09f48ad51efa922ab92f18dccbd69b67e33ff33dc8d5ec05ae3df9575bcce70492e9f50a179c0b22b5a417de37cd276a703aafceca92f465a92d91e296a884d3c8f24a27d811b079187c6952a806efc002e2783bbf5841e37bb47761370e05ebe45b344bc84067d85006fcf74d557a4594c6f01c49f845cb419859242b2550468c46571891d99dcb040f70730770a2d975c9176f38ade8b7a3877e7ebe391cda690d31be3b5c9500b3dea4f06e54d542054d5ed10927cdc38296f471e0bfd8c12632d46235ed3deb1b8457f54e4fbe2b53567f37316f9c9555e5324b49cc6105429e8dedc1ecc5e32a0c7b5ebc476e3e3b3b243c981fa6fd71744c0e05dec5ff3a5f08cc3c125001a74b61a3920b1409065d3ef8a55e473de2581178fca4cda8a057fedd892df5b80903f42e63b7ad6e0303740ad14058359d1a22f2ac4aec5cc062c2643ee1c4889b51d3e5b60165cd7ea6c15ce5d43e30a090c04560f5778588cab8117a3db59575c2e88ab1eadedc1f5ca0688889bc8cb0e28ab82f1a42e6f291c04578bb4f85aa329d0fc9bb4b0a375069efd35fc1ae46bf5262ba5a567bfa496ab9830a2a20743991e051e8bacb50ab6709701138658531c6a3c0756acf632a39b13077d3ab5a115fa5df88cfba3e549d5f3e2f5eb6fe9173bd7284493a786eabb768ea513ecd3a1fe7c39eadcf68542262c36e7b6fa3e0fbabe18f55a82a1bab880b5c1dc89ed181db72e3c3a58756719bc53f35e8cf81f10fe73da8bc1087d8d84b43fd24fda8d5affe391ab01ce97e8050a2cb6b4e8b8a2b47330923e65a643abcf3af91faed44ffa8a439e302de755108b69c4ba6eb961d16845d6fc2087bdf5677fff75fb86c8b1cfb5c5bc57c0880e7674363d36e19435699ef71c61466b70493ab7130c8c1c2865684b221a15f8ad86d21f9b33c1434b84e8e13fd8278410084d8da2bb011fb69aa1a595e72852912c4eda5d4eb9ac9ee56d39f2684f73049d7e9886c822813f83abaff96534782aa75431544b4358acb30cf5b01956d2e38dbfa62c56f047a2d145dbe0490dde36550a1f4c54bb9dd21df7816dd99135dbf586f2f4d47d16900b6d25af588ecb4afd8209f5e9242619b4ba5ead75cb9a688032a506d2776405fa569fc128fbf0947e8d853", 0xda7}], 0x3, 0x0) fcntl$setpipe(r0, 0x407, 0x10001) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x0, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) 20:37:42 executing program 6: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x9, 0x2, 0x9, 0x7, 0x0, 0x0, 0x40, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0xd}, 0x14010, 0x2, 0x10000, 0x8, 0x8, 0x401, 0x6, 0x0, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0x6, r0, 0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x9, 0x17, 0x7, 0x81, 0x0, 0x40, 0x2480, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x4, 0x7, 0xfffffffe, 0x6, 0x100000, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x40}, r1, 0x4, r4, 0xc) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) [ 2431.245004] FAULT_INJECTION: forcing a failure. [ 2431.245004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2431.245372] FAULT_INJECTION: forcing a failure. [ 2431.245372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2431.246616] CPU: 0 PID: 20961 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2431.246648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2431.249970] Call Trace: [ 2431.250321] [ 2431.250631] dump_stack_lvl+0x8b/0xb3 [ 2431.251169] should_fail.cold+0x5/0xa [ 2431.251691] _copy_from_user+0x2a/0x170 [ 2431.252237] copy_msghdr_from_user+0x89/0x150 [ 2431.252871] ? __copy_msghdr+0x4b0/0x4b0 [ 2431.253432] ? __lock_acquire+0x164d/0x5e70 [ 2431.254038] ___sys_sendmsg+0xdd/0x1b0 [ 2431.254574] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2431.255203] ? lock_is_held_type+0xd7/0x130 [ 2431.255815] ? lock_is_held_type+0xd7/0x130 [ 2431.256411] ? find_held_lock+0x2c/0x110 [ 2431.256977] ? lock_release+0x3b2/0x750 [ 2431.257520] ? __might_fault+0xd1/0x170 [ 2431.258068] ? lock_downgrade+0x6d0/0x6d0 [ 2431.258637] ? lock_is_held_type+0xd7/0x130 [ 2431.259244] __sys_sendmmsg+0x18b/0x460 [ 2431.259804] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2431.260411] ? bit_wait_timeout+0x170/0x170 [ 2431.261029] ? syscall_enter_from_user_mode+0x18/0x50 [ 2431.261726] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2431.262455] ? __traceiter_irq_enable+0xa0/0xa0 [ 2431.263099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.263807] __x64_sys_sendmmsg+0x99/0x100 [ 2431.264390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.265103] do_syscall_64+0x3b/0x90 [ 2431.265611] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2431.266307] RIP: 0033:0x7fb1f7990b19 [ 2431.266803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.269142] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2431.270129] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2431.271059] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2431.271999] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.272957] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2431.273906] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2431.274864] [ 2431.275185] CPU: 1 PID: 20969 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2431.275815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2431.276679] Call Trace: [ 2431.276901] [ 2431.277077] dump_stack_lvl+0x8b/0xb3 [ 2431.277397] should_fail.cold+0x5/0xa [ 2431.277709] _copy_from_user+0x2a/0x170 [ 2431.278026] copy_msghdr_from_user+0x89/0x150 [ 2431.278405] ? __copy_msghdr+0x4b0/0x4b0 [ 2431.278733] ? __lock_acquire+0x164d/0x5e70 [ 2431.279093] ___sys_sendmsg+0xdd/0x1b0 [ 2431.279416] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2431.279783] ? lock_is_held_type+0xd7/0x130 [ 2431.280143] ? lock_is_held_type+0xd7/0x130 [ 2431.280492] ? find_held_lock+0x2c/0x110 [ 2431.280825] ? lock_release+0x3b2/0x750 [ 2431.281141] ? __might_fault+0xd1/0x170 [ 2431.281457] ? lock_downgrade+0x6d0/0x6d0 [ 2431.281787] ? lock_is_held_type+0xd7/0x130 [ 2431.282133] __sys_sendmmsg+0x18b/0x460 [ 2431.282458] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2431.282813] ? bit_wait_timeout+0x170/0x170 [ 2431.283161] ? syscall_enter_from_user_mode+0x18/0x50 [ 2431.283563] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2431.283990] ? __traceiter_irq_enable+0xa0/0xa0 [ 2431.284173] FAULT_INJECTION: forcing a failure. [ 2431.284173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2431.284352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.286296] __x64_sys_sendmmsg+0x99/0x100 [ 2431.286639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.287058] do_syscall_64+0x3b/0x90 [ 2431.287356] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2431.287762] RIP: 0033:0x7f67303d7b19 [ 2431.288055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.289435] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2431.290018] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2431.290551] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2431.291092] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.291631] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2431.292170] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2431.292725] [ 2431.292922] CPU: 0 PID: 20964 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2431.294045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2431.295592] Call Trace: [ 2431.295972] [ 2431.296298] dump_stack_lvl+0x8b/0xb3 [ 2431.296865] should_fail.cold+0x5/0xa [ 2431.297414] _copy_from_user+0x2a/0x170 [ 2431.297991] copy_msghdr_from_user+0x89/0x150 [ 2431.298649] ? __copy_msghdr+0x4b0/0x4b0 [ 2431.299235] ? __lock_acquire+0x164d/0x5e70 [ 2431.299869] ___sys_sendmsg+0xdd/0x1b0 [ 2431.300441] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2431.301122] ? lock_is_held_type+0xd7/0x130 [ 2431.301755] ? lock_is_held_type+0xd7/0x130 [ 2431.302376] ? find_held_lock+0x2c/0x110 [ 2431.302960] ? lock_release+0x3b2/0x750 [ 2431.303533] ? __might_fault+0xd1/0x170 [ 2431.304106] ? lock_downgrade+0x6d0/0x6d0 [ 2431.304707] ? lock_is_held_type+0xd7/0x130 [ 2431.305357] __sys_sendmmsg+0x18b/0x460 [ 2431.305936] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2431.306576] ? bit_wait_timeout+0x170/0x170 [ 2431.307198] ? syscall_enter_from_user_mode+0x18/0x50 [ 2431.307932] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2431.308695] ? __traceiter_irq_enable+0xa0/0xa0 [ 2431.309389] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.310128] __x64_sys_sendmmsg+0x99/0x100 [ 2431.310737] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.311471] do_syscall_64+0x3b/0x90 [ 2431.312013] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2431.312745] RIP: 0033:0x7f1f0562eb19 [ 2431.313289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.315758] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2431.316830] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2431.317815] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2431.318806] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.319786] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2431.320764] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2431.321783] 20:37:42 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 46) 20:37:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x400000, 0x0, 0x0}, 0x58) 20:37:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x9, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x182) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(r2, &(0x7f0000001040)=ANY=[@ANYBLOB="0b01093f03010000cf0000007f0a000018010000ffffffff000000000000000060ba9a57ac4fa63fa94995a1ad9c0986cfee2b9404ea4bbcb3085b474039a31c750f9fc5b17ff990397c0a66e77ef6f50100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035c608a5b0d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe40000000000000000000000000000000000000000000000000000000000000000fd2400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004646b4"], 0x651) close(r0) [ 2431.412681] FAULT_INJECTION: forcing a failure. [ 2431.412681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2431.414883] CPU: 0 PID: 21078 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2431.415946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2431.417431] Call Trace: [ 2431.417789] [ 2431.418109] dump_stack_lvl+0x8b/0xb3 [ 2431.418658] should_fail.cold+0x5/0xa [ 2431.419197] _copy_from_user+0x2a/0x170 [ 2431.419758] copy_msghdr_from_user+0x89/0x150 [ 2431.420397] ? __copy_msghdr+0x4b0/0x4b0 [ 2431.420984] ? __lock_acquire+0x164d/0x5e70 [ 2431.421611] ___sys_sendmsg+0xdd/0x1b0 [ 2431.422176] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2431.422813] ? lock_is_held_type+0xd7/0x130 [ 2431.423464] ? lock_is_held_type+0xd7/0x130 [ 2431.424061] ? find_held_lock+0x2c/0x110 [ 2431.424651] ? lock_release+0x3b2/0x750 [ 2431.425237] ? __might_fault+0xd1/0x170 [ 2431.425805] ? lock_downgrade+0x6d0/0x6d0 [ 2431.426409] ? lock_is_held_type+0xd7/0x130 [ 2431.427060] __sys_sendmmsg+0x18b/0x460 [ 2431.427649] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2431.428298] ? bit_wait_timeout+0x170/0x170 [ 2431.428951] ? syscall_enter_from_user_mode+0x18/0x50 [ 2431.429689] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2431.430466] ? __traceiter_irq_enable+0xa0/0xa0 [ 2431.431156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.431904] __x64_sys_sendmmsg+0x99/0x100 [ 2431.432525] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.433272] do_syscall_64+0x3b/0x90 [ 2431.433821] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2431.434544] RIP: 0033:0x7f67303d7b19 [ 2431.435057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.437512] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2431.438554] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2431.439528] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2431.440500] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.441488] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2431.442470] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2431.443488] 20:37:42 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:37:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24049054) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0xd01, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev}]}, 0x44}}, 0x0) 20:37:42 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 26) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:37:42 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:37:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x80ffff, 0x0, 0x0}, 0x58) [ 2431.595370] FAULT_INJECTION: forcing a failure. [ 2431.595370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2431.596407] CPU: 1 PID: 21140 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2431.597032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2431.597885] Call Trace: [ 2431.598102] [ 2431.598283] dump_stack_lvl+0x8b/0xb3 [ 2431.598605] should_fail.cold+0x5/0xa [ 2431.598918] _copy_from_user+0x2a/0x170 [ 2431.599242] copy_msghdr_from_user+0x89/0x150 [ 2431.599610] ? __copy_msghdr+0x4b0/0x4b0 [ 2431.599949] ? __lock_acquire+0x164d/0x5e70 [ 2431.600304] ___sys_sendmsg+0xdd/0x1b0 [ 2431.600619] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2431.601004] ? lock_is_held_type+0xd7/0x130 [ 2431.601355] ? lock_is_held_type+0xd7/0x130 [ 2431.601699] ? find_held_lock+0x2c/0x110 [ 2431.602030] ? lock_release+0x3b2/0x750 [ 2431.602348] ? __might_fault+0xd1/0x170 [ 2431.602674] ? lock_downgrade+0x6d0/0x6d0 [ 2431.603003] ? lock_is_held_type+0xd7/0x130 [ 2431.603361] __sys_sendmmsg+0x18b/0x460 [ 2431.603684] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2431.604046] ? bit_wait_timeout+0x170/0x170 [ 2431.604395] ? syscall_enter_from_user_mode+0x18/0x50 [ 2431.604816] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2431.605241] ? __traceiter_irq_enable+0xa0/0xa0 [ 2431.605614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.606031] __x64_sys_sendmmsg+0x99/0x100 [ 2431.606367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.606769] do_syscall_64+0x3b/0x90 [ 2431.607065] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2431.607466] RIP: 0033:0x7fb1f7990b19 [ 2431.607752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.609126] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2431.609700] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2431.610233] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2431.610782] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.611327] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2431.611863] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2431.612414] [ 2431.621083] FAULT_INJECTION: forcing a failure. [ 2431.621083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2431.622159] CPU: 1 PID: 21141 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2431.622793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2431.623655] Call Trace: [ 2431.623854] [ 2431.624032] dump_stack_lvl+0x8b/0xb3 [ 2431.624343] should_fail.cold+0x5/0xa [ 2431.624652] _copy_from_user+0x2a/0x170 [ 2431.624989] copy_msghdr_from_user+0x89/0x150 [ 2431.625353] ? __copy_msghdr+0x4b0/0x4b0 [ 2431.625688] ? __lock_acquire+0x164d/0x5e70 [ 2431.626045] ___sys_sendmsg+0xdd/0x1b0 [ 2431.626369] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2431.626738] ? lock_is_held_type+0xd7/0x130 [ 2431.627092] ? lock_is_held_type+0xd7/0x130 [ 2431.627442] ? find_held_lock+0x2c/0x110 [ 2431.627770] ? lock_release+0x3b2/0x750 [ 2431.628090] ? __might_fault+0xd1/0x170 [ 2431.628400] ? lock_downgrade+0x6d0/0x6d0 [ 2431.628733] ? lock_is_held_type+0xd7/0x130 [ 2431.629095] __sys_sendmmsg+0x18b/0x460 [ 2431.629412] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2431.629763] ? bit_wait_timeout+0x170/0x170 [ 2431.630101] ? syscall_enter_from_user_mode+0x18/0x50 [ 2431.630498] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2431.630915] ? __traceiter_irq_enable+0xa0/0xa0 [ 2431.631294] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.631703] __x64_sys_sendmmsg+0x99/0x100 [ 2431.632042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.632454] do_syscall_64+0x3b/0x90 [ 2431.632751] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2431.633163] RIP: 0033:0x7f1f0562eb19 [ 2431.633456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.634827] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2431.635401] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2431.635935] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2431.636474] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.637023] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2431.637566] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2431.638130] 20:37:42 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 47) 20:37:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x9, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x182) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(r2, &(0x7f0000001040)=ANY=[@ANYBLOB="0b01093f03010000cf0000007f0a000018010000ffffffff000000000000000060ba9a57ac4fa63fa94995a1ad9c0986cfee2b9404ea4bbcb3085b474039a31c750f9fc5b17ff990397c0a66e77ef6f50100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035c608a5b0d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe40000000000000000000000000000000000000000000000000000000000000000fd2400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004646b4"], 0x651) close(r0) 20:37:42 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth1_vlan\x00', {}, 0x7}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x53, 0x0, 0x38, 0x8, 0x0, 0x100000001, 0x78d7b909d3c944c6, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x30, 0x2, 0x81, 0xc, 0xfffffffffffffff8, 0x5, 0x3f, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x2) 20:37:42 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x8a) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r2}) 20:37:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xf0ff1f, 0x0, 0x0}, 0x58) [ 2431.722373] FAULT_INJECTION: forcing a failure. [ 2431.722373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2431.723435] CPU: 1 PID: 21203 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2431.724052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2431.724936] Call Trace: [ 2431.725142] [ 2431.725326] dump_stack_lvl+0x8b/0xb3 [ 2431.725639] should_fail.cold+0x5/0xa [ 2431.725944] _copy_from_user+0x2a/0x170 [ 2431.726268] copy_msghdr_from_user+0x89/0x150 [ 2431.726632] ? __copy_msghdr+0x4b0/0x4b0 [ 2431.726964] ? __lock_acquire+0x164d/0x5e70 [ 2431.727313] ___sys_sendmsg+0xdd/0x1b0 [ 2431.727625] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2431.727999] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2431.728432] ? lock_is_held_type+0xd7/0x130 [ 2431.728794] ? find_held_lock+0x2c/0x110 [ 2431.729124] ? lock_release+0x3b2/0x750 [ 2431.729448] ? __might_fault+0xd1/0x170 [ 2431.729768] ? lock_downgrade+0x6d0/0x6d0 [ 2431.730101] ? lock_is_held_type+0xd7/0x130 [ 2431.730446] __sys_sendmmsg+0x18b/0x460 [ 2431.730771] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2431.731127] ? bit_wait_timeout+0x170/0x170 [ 2431.731482] ? syscall_enter_from_user_mode+0x18/0x50 [ 2431.731899] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2431.732324] ? __traceiter_irq_enable+0xa0/0xa0 [ 2431.732698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.733110] __x64_sys_sendmmsg+0x99/0x100 [ 2431.733446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.733850] do_syscall_64+0x3b/0x90 [ 2431.734142] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2431.734545] RIP: 0033:0x7f67303d7b19 [ 2431.734837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.736214] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2431.736806] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2431.737346] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2431.737886] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.738431] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2431.738969] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2431.739530] 20:37:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x9, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x182) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(r2, &(0x7f0000001040)=ANY=[@ANYBLOB="0b01093f03010000cf0000007f0a000018010000ffffffff000000000000000060ba9a57ac4fa63fa94995a1ad9c0986cfee2b9404ea4bbcb3085b474039a31c750f9fc5b17ff990397c0a66e77ef6f50100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035c608a5b0d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe40000000000000000000000000000000000000000000000000000000000000000fd2400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004646b4"], 0x651) close(r0) 20:37:58 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) 20:37:58 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 27) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:37:58 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 48) 20:37:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x1000000, 0x0, 0x0}, 0x58) 20:37:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000080)={0x80, 0x2, 0x800, 0x0, 0x15}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4c, &(0x7f00000001c0)={0x2, {0x2, 0xf2, 0x0, 0x8, 0x0, 0x4}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="014000000100e44b1e71800477c0d5f35de1000018000000aab894be132cfb322f7743fb518b91d3", @ANYRES32=r0, @ANYBLOB="010065301b0000000000"]) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000940)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x1, 0x0, 0x3, 0x1, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x7e9}], 0x1) 20:37:58 executing program 6: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100}, r1, 0xffffffffffffffff, r0, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3e57, &(0x7f0000000040)={0x0, 0xd328, 0x0, 0x0, 0x113, 0x0, r2}, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000180)=[{&(0x7f0000001040)="c90ebef38e2dce8520c60107364d71434f766889a1b5045909a31ac897d917aab7d97a8b8d40468e8d2f80f31f03f78792e0a04ebca1a75bc2afa4e6e92fb4d04d0a74cb071f299ca336543cac988b120a211351a18e2ba09294b0276e42abbb2c4d92aba3af902a13e17fa9c04c55ca747706007e15b0de9fc17ed5e0273f89e00cb68a40d7e70ad1853348197e40003c7bff3a5e1f7464869aea3218cec6889c51825449b5e5ac33a152ff925f8e1078123610f4683177491aa1bc977cd6b78ceb721801c836c60bfb7c9fc1a8b5e5786362f16075517b08bdf639a1494a", 0xdf}, {&(0x7f0000000200)="e70f939fad0828aeed3791bd7ebcca8b372e69f753a8572f2b646dbf962d951866782f8a9d3b0bbf2dfec71305451cc0f068e774491704b3114da3c7bc4b0484600336d547aa0bc9f94cd39a7f62a55c5e4e172889ee924c23685f1ccd78d48ea174ebe627590b9c4e493de8ac", 0x6d}, {&(0x7f0000000280)="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", 0xda7}], 0x3, 0x0) fcntl$setpipe(r6, 0x407, 0x10001) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r6, 0x0, &(0x7f0000000180)='./file0\x00', 0x10, 0x40080, 0x12345}, 0x80000001) r7 = dup(r3) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) fcntl$setflags(r2, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:37:58 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 49) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) [ 2447.858877] FAULT_INJECTION: forcing a failure. [ 2447.858877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2447.859879] CPU: 1 PID: 21330 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2447.860476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2447.861349] Call Trace: [ 2447.861555] [ 2447.861737] dump_stack_lvl+0x8b/0xb3 [ 2447.862056] should_fail.cold+0x5/0xa [ 2447.862362] _copy_from_user+0x2a/0x170 [ 2447.862680] copy_msghdr_from_user+0x89/0x150 [ 2447.863053] ? __copy_msghdr+0x4b0/0x4b0 [ 2447.863374] ? __lock_acquire+0x164d/0x5e70 [ 2447.863728] ___sys_sendmsg+0xdd/0x1b0 [ 2447.864045] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2447.864414] ? lock_is_held_type+0xd7/0x130 [ 2447.864769] ? lock_is_held_type+0xd7/0x130 [ 2447.865122] ? find_held_lock+0x2c/0x110 [ 2447.865453] ? lock_release+0x3b2/0x750 [ 2447.865774] ? __might_fault+0xd1/0x170 [ 2447.866091] ? lock_downgrade+0x6d0/0x6d0 [ 2447.866428] ? lock_is_held_type+0xd7/0x130 [ 2447.866775] __sys_sendmmsg+0x18b/0x460 [ 2447.867104] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2447.867461] ? bit_wait_timeout+0x170/0x170 [ 2447.867801] ? syscall_enter_from_user_mode+0x18/0x50 [ 2447.868219] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2447.868650] ? __traceiter_irq_enable+0xa0/0xa0 [ 2447.869031] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.869458] __x64_sys_sendmmsg+0x99/0x100 [ 2447.869796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.870199] do_syscall_64+0x3b/0x90 [ 2447.870503] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2447.870909] RIP: 0033:0x7f1f0562eb19 [ 2447.871203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.872568] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2447.873171] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2447.873719] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2447.874264] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.874803] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2447.875343] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2447.875908] [ 2447.881171] FAULT_INJECTION: forcing a failure. [ 2447.881171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2447.882989] CPU: 0 PID: 21325 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2447.884062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2447.885582] Call Trace: [ 2447.885593] [ 2447.885604] dump_stack_lvl+0x8b/0xb3 [ 2447.885649] should_fail.cold+0x5/0xa [ 2447.885685] _copy_from_user+0x2a/0x170 [ 2447.885719] copy_msghdr_from_user+0x89/0x150 [ 2447.885764] ? __copy_msghdr+0x4b0/0x4b0 [ 2447.885808] ? __lock_acquire+0x164d/0x5e70 [ 2447.885864] ___sys_sendmsg+0xdd/0x1b0 [ 2447.885906] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2447.885944] ? lock_is_held_type+0xd7/0x130 [ 2447.886002] ? lock_is_held_type+0xd7/0x130 [ 2447.886043] ? find_held_lock+0x2c/0x110 [ 2447.886079] ? lock_release+0x3b2/0x750 [ 2447.886112] ? __might_fault+0xd1/0x170 [ 2447.886148] ? lock_downgrade+0x6d0/0x6d0 [ 2447.886192] ? lock_is_held_type+0xd7/0x130 [ 2447.894928] __sys_sendmmsg+0x18b/0x460 [ 2447.895539] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2447.896199] ? bit_wait_timeout+0x170/0x170 [ 2447.896834] ? syscall_enter_from_user_mode+0x18/0x50 [ 2447.897597] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2447.898355] ? __traceiter_irq_enable+0xa0/0xa0 [ 2447.899011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.899790] __x64_sys_sendmmsg+0x99/0x100 [ 2447.900371] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.901157] do_syscall_64+0x3b/0x90 [ 2447.901768] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2447.902599] RIP: 0033:0x7f67303d7b19 [ 2447.903106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.905605] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2447.906667] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2447.907649] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2447.908629] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.909639] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2447.910623] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2447.911632] [ 2447.923544] FAULT_INJECTION: forcing a failure. [ 2447.923544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2447.925371] CPU: 0 PID: 21333 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2447.926476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2447.927952] Call Trace: [ 2447.928304] [ 2447.928631] dump_stack_lvl+0x8b/0xb3 [ 2447.929170] should_fail.cold+0x5/0xa [ 2447.929734] _copy_from_user+0x2a/0x170 [ 2447.930280] copy_msghdr_from_user+0x89/0x150 [ 2447.930916] ? __copy_msghdr+0x4b0/0x4b0 [ 2447.931496] ? __lock_acquire+0x164d/0x5e70 [ 2447.932114] ___sys_sendmsg+0xdd/0x1b0 [ 2447.932673] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2447.933337] ? lock_is_held_type+0xd7/0x130 [ 2447.933977] ? lock_is_held_type+0xd7/0x130 [ 2447.934585] ? find_held_lock+0x2c/0x110 [ 2447.935162] ? lock_release+0x3b2/0x750 [ 2447.935735] ? __might_fault+0xd1/0x170 [ 2447.936302] ? lock_downgrade+0x6d0/0x6d0 [ 2447.936912] ? lock_is_held_type+0xd7/0x130 [ 2447.937565] __sys_sendmmsg+0x18b/0x460 [ 2447.938164] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2447.938828] ? bit_wait_timeout+0x170/0x170 [ 2447.939441] ? syscall_enter_from_user_mode+0x18/0x50 [ 2447.940295] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2447.941107] ? __traceiter_irq_enable+0xa0/0xa0 [ 2447.941879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.942857] __x64_sys_sendmmsg+0x99/0x100 [ 2447.943637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.944609] do_syscall_64+0x3b/0x90 [ 2447.945326] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2447.946235] RIP: 0033:0x7fb1f7990b19 [ 2447.946766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.949149] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2447.950178] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2447.951129] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2447.952071] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.953083] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2447.954062] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2447.955083] 20:37:58 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xbe, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0xc4}, 0x12f85, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="c90ebef38e2dce8520c60107364d71434f766889a1b5045909a31a8b78d917aab7d97a8b8d40468e8d2f80f31f03f78792e0a04ebca1a75bc2afa4e6e92fb4d04d0a74cb071f299ca336543cac988b120a211351a18e2ba09294b0276e42abbb2c4d92aba3af902a13e17fa9c04c55ca747706007e15b0de9fc17ed5e0273f89e00cb68a40d7e70ad1853348197e2c5c3c7bff3a5e1f7464869aea3218cec6889c51825449b5e5ac33a152ff", 0xac}, {&(0x7f0000000200)="e70f939fad0828aeed3791bd7ebcca8b372e69f753a8572f2b646dbf962d951866782f8a9d3b0bbf2dfec71305451cc0f068e774491704b3114da3c7bc4b0484600336d547aa0bc9f94cd39a7f62a55c5e4e172889ee924c23685f1ccd78d48ea174ebe627590b9c4e493de8ac", 0x6d}, {&(0x7f0000000280)="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", 0xda7}], 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "bdba7a7f1a6d64cbace2842021ff5452de7a737a7f366785fce83ba4e620"}, 0x22) fcntl$setpipe(r2, 0x407, 0x10001) fchmod(r0, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x1f, 0x3, 0x1, 0x21, 0x0, 0x6, 0xc0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x6, 0x7}, 0x1004, 0x2ed7, 0x20, 0x5, 0x5, 0x8, 0x4, 0x0, 0x8, 0x0, 0x6}) close(r1) syz_io_uring_setup(0x1a23, &(0x7f0000001040)={0x0, 0x8916, 0x9, 0x2, 0x56, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000010c0), &(0x7f0000001100)) 20:38:17 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:38:17 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 49) 20:38:17 executing program 6: perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:38:17 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}}, 0x0) ioctl$FITHAW(r1, 0xc0045878) socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x1, 0xfa, 0x40, 0x0, 0x7, 0x4840, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x79, 0x100000000}, 0x18800, 0x598, 0x2, 0x1, 0x3, 0x6, 0x6, 0x0, 0xdc, 0x0, 0x400}, 0xffffffffffffffff, 0x4, r2, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000800) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2, 0x81}, 0x1c) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, 0x0) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) write$P9_RMKDIR(r6, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x5c, 0x1, 0x9, 0x1, 0x0, 0xfffffffffffffffc, 0x400, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x200}, 0x10, 0x1, 0x2d, 0x5, 0x9c22, 0x2, 0xff01, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0x2, r6, 0xa) 20:38:17 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 28) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:38:17 executing program 0: futex(&(0x7f0000000600), 0x5, 0x0, 0x0, &(0x7f0000000680), 0xffffffff) pselect6(0x40, &(0x7f0000000100)={0x8, 0x44e, 0x1, 0x0, 0x4, 0x0, 0x7f, 0x80c}, &(0x7f0000000140)={0x8, 0x4a9, 0x1000, 0xc27, 0x3, 0x0, 0xb94f}, &(0x7f0000000180)={0x9, 0x9, 0x2, 0x634f002d, 0x1, 0x6, 0x5, 0x9}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x6]}, 0x8}) futex(&(0x7f0000000000)=0x2, 0xd, 0x2, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)=0x2, 0x1) clock_getres(0x2, &(0x7f0000000040)) r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) io_pgetevents(r1, 0x9, 0x6, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) 20:38:17 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) 20:38:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x2000000, 0x0, 0x0}, 0x58) [ 2466.495925] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 2466.497615] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 2466.512486] FAULT_INJECTION: forcing a failure. [ 2466.512486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2466.513530] CPU: 1 PID: 21563 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2466.514135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.515005] Call Trace: [ 2466.515198] [ 2466.515379] dump_stack_lvl+0x8b/0xb3 [ 2466.515691] should_fail.cold+0x5/0xa [ 2466.515998] _copy_from_user+0x2a/0x170 [ 2466.516314] copy_msghdr_from_user+0x89/0x150 [ 2466.516680] ? __copy_msghdr+0x4b0/0x4b0 [ 2466.517000] ? __lock_acquire+0x164d/0x5e70 [ 2466.517353] ___sys_sendmsg+0xdd/0x1b0 [ 2466.517674] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2466.518042] ? lock_is_held_type+0xd7/0x130 [ 2466.518397] ? lock_is_held_type+0xd7/0x130 [ 2466.518745] ? find_held_lock+0x2c/0x110 [ 2466.519070] ? lock_release+0x3b2/0x750 [ 2466.519389] ? __might_fault+0xd1/0x170 [ 2466.519720] ? lock_downgrade+0x6d0/0x6d0 [ 2466.520059] ? lock_is_held_type+0xd7/0x130 [ 2466.520399] __sys_sendmmsg+0x18b/0x460 [ 2466.520722] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2466.521055] ? bit_wait_timeout+0x170/0x170 [ 2466.521400] ? syscall_enter_from_user_mode+0x18/0x50 [ 2466.521448] FAULT_INJECTION: forcing a failure. [ 2466.521448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2466.521799] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2466.521823] ? __traceiter_irq_enable+0xa0/0xa0 [ 2466.521848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.521874] __x64_sys_sendmmsg+0x99/0x100 [ 2466.521896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.521919] do_syscall_64+0x3b/0x90 [ 2466.525608] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2466.526008] RIP: 0033:0x7f67303d7b19 [ 2466.526296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.527657] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2466.528223] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2466.528756] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2466.529282] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.529816] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2466.530356] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2466.530911] [ 2466.531096] CPU: 0 PID: 21558 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2466.532283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.533934] Call Trace: [ 2466.534331] [ 2466.534683] dump_stack_lvl+0x8b/0xb3 [ 2466.535276] should_fail.cold+0x5/0xa [ 2466.535871] _copy_from_user+0x2a/0x170 [ 2466.536481] copy_msghdr_from_user+0x89/0x150 [ 2466.537186] ? __copy_msghdr+0x4b0/0x4b0 [ 2466.537811] ? __lock_acquire+0x164d/0x5e70 [ 2466.538462] ___sys_sendmsg+0xdd/0x1b0 [ 2466.539050] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2466.539723] ? lock_is_held_type+0xd7/0x130 [ 2466.540368] ? lock_is_held_type+0xd7/0x130 [ 2466.541002] ? find_held_lock+0x2c/0x110 [ 2466.541607] ? lock_release+0x3b2/0x750 [ 2466.542192] ? __might_fault+0xd1/0x170 [ 2466.542775] ? lock_downgrade+0x6d0/0x6d0 [ 2466.543387] ? lock_is_held_type+0xd7/0x130 [ 2466.544038] __sys_sendmmsg+0x18b/0x460 [ 2466.544641] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2466.545335] ? bit_wait_timeout+0x170/0x170 [ 2466.546003] ? syscall_enter_from_user_mode+0x18/0x50 [ 2466.546798] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2466.547627] ? __traceiter_irq_enable+0xa0/0xa0 [ 2466.548357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.549159] __x64_sys_sendmmsg+0x99/0x100 [ 2466.549828] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.550626] do_syscall_64+0x3b/0x90 [ 2466.551203] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2466.551983] RIP: 0033:0x7fb1f7990b19 [ 2466.552554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.555220] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2466.556346] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2466.557406] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2466.558450] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.559509] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2466.560565] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2466.561660] 20:38:17 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x190}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1b, 0x5, 0xc5, 0x46, 0x0, 0x40, 0x20082, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7f, 0x5}, 0x0, 0x1, 0x40, 0x3, 0x4, 0x17, 0x1, 0x0, 0x691}, 0xffffffffffffffff, 0xc, r0, 0x9) acct(&(0x7f0000000240)='./file0\x00') r1 = clone3(&(0x7f0000000300)={0x100000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x39}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) tkill(r3, 0x17) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0, {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r1, r3], 0x2}, 0x58) capset(&(0x7f00000006c0)={0x20080522, r4}, &(0x7f0000000700)={0x2, 0x599a, 0x0, 0x1, 0x8ab8, 0x316d}) fork() ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x40, 0x9, 0x7f, 0x0, 0xe115, 0x10008, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xc, 0x1, @perf_bp={&(0x7f0000000100), 0x3}, 0x40c88, 0x94, 0x40, 0x5, 0xffffffffdd0cc398, 0x80000000, 0x9, 0x0, 0x81, 0x0, 0x8000}, r1, 0xc, 0xffffffffffffffff, 0x1) finit_module(r2, &(0x7f0000000680)=':*-+)!\x00', 0x2) 20:38:17 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/stat\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setlease(r2, 0x400, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) [ 2466.596406] FAULT_INJECTION: forcing a failure. [ 2466.596406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2466.597516] CPU: 1 PID: 21567 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2466.598116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.598956] Call Trace: [ 2466.599157] [ 2466.599335] dump_stack_lvl+0x8b/0xb3 [ 2466.599644] should_fail.cold+0x5/0xa [ 2466.599944] _copy_from_user+0x2a/0x170 [ 2466.600264] copy_msghdr_from_user+0x89/0x150 [ 2466.600618] ? __copy_msghdr+0x4b0/0x4b0 [ 2466.600940] ? __lock_acquire+0x164d/0x5e70 [ 2466.601298] ___sys_sendmsg+0xdd/0x1b0 [ 2466.601611] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2466.601969] ? lock_is_held_type+0xd7/0x130 [ 2466.602318] ? lock_is_held_type+0xd7/0x130 [ 2466.602655] ? find_held_lock+0x2c/0x110 [ 2466.602972] ? lock_release+0x3b2/0x750 [ 2466.603284] ? __might_fault+0xd1/0x170 [ 2466.603605] ? lock_downgrade+0x6d0/0x6d0 [ 2466.603934] ? lock_is_held_type+0xd7/0x130 [ 2466.604287] __sys_sendmmsg+0x18b/0x460 [ 2466.604604] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2466.604962] ? bit_wait_timeout+0x170/0x170 [ 2466.605307] ? syscall_enter_from_user_mode+0x18/0x50 [ 2466.605713] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2466.606128] ? __traceiter_irq_enable+0xa0/0xa0 [ 2466.606496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.606899] __x64_sys_sendmmsg+0x99/0x100 [ 2466.607234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.607631] do_syscall_64+0x3b/0x90 [ 2466.607926] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2466.608320] RIP: 0033:0x7f1f0562eb19 [ 2466.608611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.609957] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2466.610510] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2466.611031] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2466.611572] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.612108] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2466.612651] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2466.613213] 20:38:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x3000000, 0x0, 0x0}, 0x58) 20:38:17 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 50) 20:38:17 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:38:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x4000000, 0x0, 0x0}, 0x58) 20:38:17 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) 20:38:17 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 29) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 2466.817413] FAULT_INJECTION: forcing a failure. [ 2466.817413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2466.818411] CPU: 1 PID: 21690 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2466.819019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.819850] Call Trace: [ 2466.820047] [ 2466.820226] dump_stack_lvl+0x8b/0xb3 [ 2466.820538] should_fail.cold+0x5/0xa [ 2466.820847] _copy_from_user+0x2a/0x170 [ 2466.821158] copy_msghdr_from_user+0x89/0x150 [ 2466.821537] ? __copy_msghdr+0x4b0/0x4b0 [ 2466.821866] ? __lock_acquire+0x164d/0x5e70 [ 2466.822224] ___sys_sendmsg+0xdd/0x1b0 [ 2466.822550] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2466.822894] ? lock_is_held_type+0xd7/0x130 [ 2466.823250] ? lock_is_held_type+0xd7/0x130 [ 2466.823592] ? find_held_lock+0x2c/0x110 [ 2466.823911] ? lock_release+0x3b2/0x750 [ 2466.824226] ? __might_fault+0xd1/0x170 [ 2466.824546] ? lock_downgrade+0x6d0/0x6d0 [ 2466.824882] ? lock_is_held_type+0xd7/0x130 [ 2466.825212] __sys_sendmmsg+0x18b/0x460 [ 2466.825548] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2466.825904] ? bit_wait_timeout+0x170/0x170 [ 2466.826247] ? syscall_enter_from_user_mode+0x18/0x50 [ 2466.826663] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2466.827088] ? __traceiter_irq_enable+0xa0/0xa0 [ 2466.827457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.827866] __x64_sys_sendmmsg+0x99/0x100 [ 2466.828209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.828615] do_syscall_64+0x3b/0x90 [ 2466.828911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2466.829309] RIP: 0033:0x7f67303d7b19 [ 2466.829602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.830971] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2466.831554] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2466.832091] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2466.832633] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.833163] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2466.833710] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2466.834265] 20:38:17 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 51) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) [ 2466.866672] FAULT_INJECTION: forcing a failure. [ 2466.866672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2466.867876] CPU: 1 PID: 21692 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2466.868484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.869345] Call Trace: [ 2466.869546] [ 2466.869731] dump_stack_lvl+0x8b/0xb3 [ 2466.870033] should_fail.cold+0x5/0xa [ 2466.870335] _copy_from_user+0x2a/0x170 [ 2466.870646] copy_msghdr_from_user+0x89/0x150 [ 2466.870999] ? __copy_msghdr+0x4b0/0x4b0 [ 2466.871320] ? __lock_acquire+0x164d/0x5e70 [ 2466.871675] ___sys_sendmsg+0xdd/0x1b0 [ 2466.871978] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2466.872338] ? lock_is_held_type+0xd7/0x130 [ 2466.872690] ? lock_is_held_type+0xd7/0x130 [ 2466.873026] ? find_held_lock+0x2c/0x110 [ 2466.873357] ? lock_release+0x3b2/0x750 [ 2466.873666] ? __might_fault+0xd1/0x170 [ 2466.873980] ? lock_downgrade+0x6d0/0x6d0 [ 2466.874310] ? lock_is_held_type+0xd7/0x130 [ 2466.874657] __sys_sendmmsg+0x18b/0x460 [ 2466.874975] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2466.875327] ? bit_wait_timeout+0x170/0x170 [ 2466.875676] ? syscall_enter_from_user_mode+0x18/0x50 [ 2466.876077] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2466.876495] ? __traceiter_irq_enable+0xa0/0xa0 [ 2466.876860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.877283] __x64_sys_sendmmsg+0x99/0x100 [ 2466.877614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.878015] do_syscall_64+0x3b/0x90 [ 2466.878312] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2466.878716] RIP: 0033:0x7fb1f7990b19 [ 2466.879002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.880381] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2466.880948] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2466.881498] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2466.882029] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.882562] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2466.883097] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2466.883648] 20:38:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x5000000, 0x0, 0x0}, 0x58) 20:38:17 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4206, r2, 0x100000000001, 0x44) r3 = clone3(&(0x7f0000000480)={0x40000, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, {0x38}, &(0x7f0000000300)=""/216, 0xd8, &(0x7f0000000400)=""/22, &(0x7f0000000440)=[r2, r1, r2, r2, r2, r1, r1, 0x0], 0x8}, 0x58) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x4, 0x3f, 0x1f, 0x0, 0x0, 0x3, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb28c, 0x2, @perf_config_ext={0x8000}, 0x10, 0x80000001, 0xffff, 0x7, 0xf70, 0x45, 0x3, 0x0, 0x59, 0x0, 0x20}, r3, 0x2, r0, 0x1) ptrace(0x4208, r2) ptrace(0x4208, r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001840), 0x100000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xff, 0x6, 0xce, 0x34, 0x0, 0x7f, 0x4, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xac, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x19802, 0x7, 0x7, 0x2, 0xa, 0xab, 0x0, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, r6, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) clone3(&(0x7f0000001880)={0x100000100, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000006c0), {0x1d}, &(0x7f0000000700)=""/4096, 0x1000, &(0x7f0000001700)=""/233, &(0x7f0000001800)=[r2, r5, 0xffffffffffffffff, r4, r3, r4], 0x6}, 0x58) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:38:17 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 30) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 2466.962689] FAULT_INJECTION: forcing a failure. [ 2466.962689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2466.963688] CPU: 1 PID: 21697 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2466.964293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2466.965150] Call Trace: [ 2466.965368] [ 2466.965542] dump_stack_lvl+0x8b/0xb3 [ 2466.965855] should_fail.cold+0x5/0xa [ 2466.966164] _copy_from_user+0x2a/0x170 [ 2466.966471] copy_msghdr_from_user+0x89/0x150 [ 2466.966827] ? __copy_msghdr+0x4b0/0x4b0 [ 2466.967151] ? __lock_acquire+0x164d/0x5e70 [ 2466.967511] ___sys_sendmsg+0xdd/0x1b0 [ 2466.967827] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2466.968202] ? lock_is_held_type+0xd7/0x130 [ 2466.968548] ? lock_is_held_type+0xd7/0x130 [ 2466.968893] ? find_held_lock+0x2c/0x110 [ 2466.969248] ? lock_release+0x3b2/0x750 [ 2466.969560] ? __might_fault+0xd1/0x170 [ 2466.969876] ? lock_downgrade+0x6d0/0x6d0 [ 2466.970211] ? lock_is_held_type+0xd7/0x130 [ 2466.970575] __sys_sendmmsg+0x18b/0x460 [ 2466.970896] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2466.971253] ? bit_wait_timeout+0x170/0x170 [ 2466.971606] ? syscall_enter_from_user_mode+0x18/0x50 [ 2466.972005] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2466.972438] ? __traceiter_irq_enable+0xa0/0xa0 [ 2466.972812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.973233] __x64_sys_sendmmsg+0x99/0x100 [ 2466.973585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2466.973988] do_syscall_64+0x3b/0x90 [ 2466.974274] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2466.974669] RIP: 0033:0x7f1f0562eb19 [ 2466.974960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.976337] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2466.976913] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2466.977452] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2466.977979] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.978506] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2466.979044] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2466.979593] 20:38:17 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 51) 20:38:17 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) vmsplice(r2, &(0x7f0000002080)=[{&(0x7f0000000140)="84", 0x1}], 0x1, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14}, 0x14) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000040)) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') fchmod(0xffffffffffffffff, 0x60) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x9) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f0000000040)="c90ebef38e2dce8520c60107364d71434f766889a1b5045909a31a8b78d917aab7d97a8b8d40468e8d2f80f31f03f78792e0a04ebca1a75bc2afa4e6e92fb4d04d0a74cb071f299ca336543cac988b120a211351a18e2ba09294b0276e42abbb2c4d92aba3af902a13e17fa9c04c55ca747706007e15b0de9fc17ed5e0273f89e00cb68a40d7e70ad1853348197e2c5c3c7bff3a5e1f7464869aea3218cec6889c51825449b5e5ac33a152ff", 0xac}, {&(0x7f0000000200)="e70f939fad0828aeed3791bd7ebcca8b372e69f753a8572f2b646dbf962d951866782f8a9d3b0bbf2dfec71305451cc0f068e774491704b3114da3c7bc4b0484600336d547aa0bc9f94cd39a7f62a55c5e4e172889ee924c23685f1ccd78d48ea174ebe627590b9c4e493de8ac", 0x6d}, {&(0x7f0000000280)="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", 0xda7}], 0x3, 0x0) fcntl$setpipe(r4, 0x407, 0x10001) r6 = syz_open_dev$sg(&(0x7f0000002040), 0xfffffffffffffffc, 0x10000) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000001040)={{r6}, "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"}) openat(r4, &(0x7f0000000080)='./file0\x00', 0x101100, 0x44) r7 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000020c0), 0x229e8fd447d8c560, &(0x7f00000021c0)=ANY=[@ANYBLOB="74729cc0b68873154788496e733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',posixacl,cache=loose,nodevmap,debug=0x00000000000003d5,appraise_type=imasig,mask=^MAY_READ,\x00']) setns(r3, 0x10000000) [ 2467.025437] FAULT_INJECTION: forcing a failure. [ 2467.025437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2467.026422] CPU: 1 PID: 21708 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2467.027037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2467.027891] Call Trace: [ 2467.028097] [ 2467.028280] dump_stack_lvl+0x8b/0xb3 [ 2467.028594] should_fail.cold+0x5/0xa [ 2467.028910] _copy_from_user+0x2a/0x170 [ 2467.029233] copy_msghdr_from_user+0x89/0x150 [ 2467.029621] ? __copy_msghdr+0x4b0/0x4b0 [ 2467.029946] ? __lock_acquire+0x164d/0x5e70 [ 2467.030304] ___sys_sendmsg+0xdd/0x1b0 [ 2467.030621] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2467.030987] ? __traceiter_irq_enable+0xa0/0xa0 [ 2467.031356] ? lock_is_held_type+0xd7/0x130 [ 2467.031698] ? find_held_lock+0x2c/0x110 [ 2467.032016] ? lock_release+0x3b2/0x750 [ 2467.032328] ? __might_fault+0xd1/0x170 [ 2467.032644] ? lock_downgrade+0x6d0/0x6d0 [ 2467.032984] ? lock_is_held_type+0xd7/0x130 [ 2467.033334] __sys_sendmmsg+0x18b/0x460 [ 2467.033656] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2467.034011] ? bit_wait_timeout+0x170/0x170 [ 2467.034349] ? syscall_enter_from_user_mode+0x18/0x50 [ 2467.034756] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2467.035187] ? __traceiter_irq_enable+0xa0/0xa0 [ 2467.035568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2467.035982] __x64_sys_sendmmsg+0x99/0x100 [ 2467.036317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2467.036722] do_syscall_64+0x3b/0x90 [ 2467.037025] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2467.037440] RIP: 0033:0x7fb1f7990b19 [ 2467.037730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.039081] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2467.039649] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2467.040189] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2467.040720] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2467.041260] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2467.041788] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2467.042334] [ 2467.074582] FAULT_INJECTION: forcing a failure. [ 2467.074582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2467.076359] CPU: 0 PID: 21734 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2467.077450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2467.078934] Call Trace: [ 2467.079298] [ 2467.079621] dump_stack_lvl+0x8b/0xb3 [ 2467.080174] should_fail.cold+0x5/0xa [ 2467.080715] _copy_from_user+0x2a/0x170 [ 2467.081287] copy_msghdr_from_user+0x89/0x150 [ 2467.081933] ? __copy_msghdr+0x4b0/0x4b0 [ 2467.082508] ? __lock_acquire+0x164d/0x5e70 [ 2467.083129] ___sys_sendmsg+0xdd/0x1b0 [ 2467.083688] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2467.084352] ? lock_is_held_type+0xd7/0x130 [ 2467.085004] ? lock_is_held_type+0xd7/0x130 [ 2467.085640] ? find_held_lock+0x2c/0x110 [ 2467.086237] ? lock_release+0x3b2/0x750 [ 2467.086817] ? __might_fault+0xd1/0x170 [ 2467.087401] ? lock_downgrade+0x6d0/0x6d0 [ 2467.088022] ? lock_is_held_type+0xd7/0x130 [ 2467.088661] __sys_sendmmsg+0x18b/0x460 [ 2467.089276] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2467.089930] ? bit_wait_timeout+0x170/0x170 [ 2467.090559] ? syscall_enter_from_user_mode+0x18/0x50 [ 2467.091306] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2467.092092] ? __traceiter_irq_enable+0xa0/0xa0 [ 2467.092782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2467.093547] __x64_sys_sendmmsg+0x99/0x100 [ 2467.094165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2467.094906] do_syscall_64+0x3b/0x90 [ 2467.095440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2467.096183] RIP: 0033:0x7f67303d7b19 [ 2467.096716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.099212] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2467.100285] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2467.101290] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2467.102282] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2467.103266] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2467.104252] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2467.105267] 20:38:18 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3e0b, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) r3 = openat(r1, &(0x7f00000001c0)='./file1\x00', 0x511800, 0x104) perf_event_open(&(0x7f0000001280)={0x4, 0x80, 0x2, 0x5d, 0x0, 0x1, 0x0, 0x40000000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x3ff, 0x74b9}, 0x41, 0x80000000, 0x6, 0x4, 0x4, 0x2, 0x81, 0x0, 0x680d, 0x0, 0x851}, r2, 0xe, r0, 0x0) r4 = getpgrp(r2) process_vm_readv(r4, &(0x7f0000001780)=[{&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f0000001300)=""/190, 0xbe}, {&(0x7f00000013c0)=""/216, 0xd8}, {&(0x7f00000014c0)=""/87, 0x57}, {&(0x7f0000001540)=""/210, 0xd2}, {&(0x7f0000001640)=""/19, 0x13}, {&(0x7f0000001680)=""/250, 0xfa}], 0x7, &(0x7f00000018c0)=[{&(0x7f0000001800)=""/190, 0xbe}], 0x1, 0x0) fsopen(&(0x7f0000000000)='afs\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x81, 0xd2, 0x3, 0x7f, 0x0, 0xfffffffffffff507, 0x4a080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1e, 0x1ff}, 0x10808, 0x80000001, 0x80, 0x6, 0x3, 0x9, 0x5, 0x0, 0xfffffff7, 0x0, 0x1}, r2, 0x2000007, r3, 0x8) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 20:38:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x8000000, 0x0, 0x0}, 0x58) 20:38:31 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 52) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:38:31 executing program 7: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) read(r0, &(0x7f0000000000)=""/16, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 20:38:31 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace$setopts(0x4206, r2, 0x100000000001, 0x44) r3 = clone3(&(0x7f0000000480)={0x40000, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, {0x38}, &(0x7f0000000300)=""/216, 0xd8, &(0x7f0000000400)=""/22, &(0x7f0000000440)=[r2, r1, r2, r2, r2, r1, r1, 0x0], 0x8}, 0x58) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x4, 0x3f, 0x1f, 0x0, 0x0, 0x3, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb28c, 0x2, @perf_config_ext={0x8000}, 0x10, 0x80000001, 0xffff, 0x7, 0xf70, 0x45, 0x3, 0x0, 0x59, 0x0, 0x20}, r3, 0x2, r0, 0x1) ptrace(0x4208, r2) ptrace(0x4208, r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001840), 0x100000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xff, 0x6, 0xce, 0x34, 0x0, 0x7f, 0x4, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xac, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x19802, 0x7, 0x7, 0x2, 0xa, 0xab, 0x0, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, r6, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) clone3(&(0x7f0000001880)={0x100000100, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000006c0), {0x1d}, &(0x7f0000000700)=""/4096, 0x1000, &(0x7f0000001700)=""/233, &(0x7f0000001800)=[r2, r5, 0xffffffffffffffff, r4, r3, r4], 0x6}, 0x58) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:38:31 executing program 6: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) close(r0) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) r4 = clone3(&(0x7f0000000300)={0x2000000, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140), {0x24}, &(0x7f00000006c0)=""/4096, 0x1000, &(0x7f0000000180)=""/184, &(0x7f0000000240)=[r1, r1, r1, 0x0, r1, r1, r1], 0x7, {r3}}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000180)=[{&(0x7f0000000040)="c90ebef38e2dce8520c60107364d71434f766889a1b5045909a31a8b78d917aab7d97a8b8d40468e8d2f80f31f03f78792e0a04ebca1a75bc2afa4e6e92fb4d04d0a74cb071f299ca336543cac988b120a211351a18e2ba09294b0276e42abbb2c4d92aba3af902a13e17fa9c04c55ca747706007e15b0de9fc17ed5e0273f89e00cb68a40d7e70ad1853348197e2c5c3c7bff3a5e1f7464869aea3218cec6889c51825449b5e5ac33a152ff", 0xac}, {&(0x7f0000000200)="e70f939fad0828aeed3791bd7ebcca8b372e69f753a8572f2b646dbf962d951866782f8a9d3b0bbf2dfec71305451cc0f068e774491704b3114da3c7bc4b0484600336d547aa0bc9f94cd39a7f62a55c5e4e172889ee924c23685f1ccd78d48ea174ebe627590b9c4e493de8ac", 0x6d}, {&(0x7f0000000280)="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", 0xda7}], 0x3, 0x0) fcntl$setpipe(r5, 0x407, 0x10001) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x8, 0x0, 0x3, 0x0, 0x0, 0x9, 0x40080, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x8}, 0x8, 0x3, 0x8000, 0x6, 0x92a, 0x400, 0xfffa, 0x0, 0x1ff, 0x0, 0x4}, r4, 0x4, r5, 0x0) 20:38:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xe000000, 0x0, 0x0}, 0x58) 20:38:31 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 52) 20:38:31 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xbbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44142, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) io_setup(0x20, &(0x7f0000000000)=0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0, 0x7ffffffff000}]) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x40008}, 0x0, 0x0, 0x41, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x0, 0x0, 0x68000000}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f0000000080)={0x0, "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"}) r7 = syz_open_dev$mouse(&(0x7f0000000580), 0x7d, 0x0) io_submit(r2, 0x2, &(0x7f0000000600)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)="5da477bbf06102e0b05d47dfe7adb5d4572c47019856cc2d7f11debe22883c886afea7981f07ee5726a18c9c1dc7bde6063d16083918ac7c8ec3d7e925c0b63d9528705c40c7c9ce11c53d5da87d8b947417b1f8193195c37444c6754b321b9a7305f8b45eec0fab71c7205070af2c91f793a4f08a678508e48bfb7415a536a5f9023f943c8e65f8c70c32ee6d011d75408dd2d96f2c5bac3cc0bfcd312c05e66fa9f002229c1419aad2323b92c90fd8c9864a6d8e", 0xb5, 0x8, 0x0, 0x0, r4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f00000004c0)="f6785a051b9f5d326331649dd7c90602c0b94d950be6baed159a35bb3b49ef2761a11606a2ba0af5e8134ee7762eb069049d2c1d07a0f50ae6c6bc34b699d4fbfa2ed8e9fc29bdff494b518fa9eba35a3948abba89bdf1057112138dfb2d464225b5db83b7d84b3172facac480d7c29a9df00c3165e4a8089cafba7d261b7972ba6ce36e436ea9bbc757beb4b367063ba623f84340a07fa24d485e", 0x9b, 0xff3, 0x0, 0x0, r7}]) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) 20:38:31 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 31) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 2480.883911] FAULT_INJECTION: forcing a failure. [ 2480.883911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2480.884980] CPU: 1 PID: 21936 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2480.885573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2480.886409] Call Trace: [ 2480.886611] [ 2480.886786] dump_stack_lvl+0x8b/0xb3 [ 2480.887089] should_fail.cold+0x5/0xa [ 2480.887384] _copy_from_user+0x2a/0x170 [ 2480.887694] copy_msghdr_from_user+0x89/0x150 [ 2480.888047] ? __copy_msghdr+0x4b0/0x4b0 [ 2480.888364] ? __lock_acquire+0x164d/0x5e70 [ 2480.888704] ___sys_sendmsg+0xdd/0x1b0 [ 2480.889008] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2480.889363] ? lock_is_held_type+0xd7/0x130 [ 2480.889736] ? lock_is_held_type+0xd7/0x130 [ 2480.890070] ? find_held_lock+0x2c/0x110 [ 2480.890383] ? lock_release+0x3b2/0x750 [ 2480.890684] ? __might_fault+0xd1/0x170 [ 2480.890991] ? lock_downgrade+0x6d0/0x6d0 [ 2480.891305] ? lock_is_held_type+0xd7/0x130 [ 2480.891640] __sys_sendmmsg+0x18b/0x460 [ 2480.891953] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2480.892294] ? bit_wait_timeout+0x170/0x170 [ 2480.892636] ? syscall_enter_from_user_mode+0x18/0x50 [ 2480.893044] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2480.893477] ? __traceiter_irq_enable+0xa0/0xa0 [ 2480.893836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2480.894228] __x64_sys_sendmmsg+0x99/0x100 [ 2480.894559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2480.894954] do_syscall_64+0x3b/0x90 [ 2480.895236] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2480.895628] RIP: 0033:0x7fb1f7990b19 [ 2480.895911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2480.897309] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2480.897870] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2480.898379] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2480.898933] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2480.899478] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2480.900023] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2480.900590] [ 2480.914015] FAULT_INJECTION: forcing a failure. [ 2480.914015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2480.914990] CPU: 1 PID: 21941 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2480.915597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2480.916427] Call Trace: [ 2480.916627] [ 2480.916802] dump_stack_lvl+0x8b/0xb3 [ 2480.917099] should_fail.cold+0x5/0xa [ 2480.917397] _copy_from_user+0x2a/0x170 [ 2480.917713] copy_msghdr_from_user+0x89/0x150 [ 2480.918063] ? __copy_msghdr+0x4b0/0x4b0 [ 2480.918390] ? __lock_acquire+0x164d/0x5e70 [ 2480.918742] ___sys_sendmsg+0xdd/0x1b0 [ 2480.919049] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2480.919397] ? lock_is_held_type+0xd7/0x130 [ 2480.919736] ? lock_is_held_type+0xd7/0x130 [ 2480.920085] ? find_held_lock+0x2c/0x110 [ 2480.920404] ? lock_release+0x3b2/0x750 [ 2480.920715] ? __might_fault+0xd1/0x170 [ 2480.921022] ? lock_downgrade+0x6d0/0x6d0 [ 2480.921358] ? lock_is_held_type+0xd7/0x130 [ 2480.921719] __sys_sendmmsg+0x18b/0x460 [ 2480.922033] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2480.922383] ? bit_wait_timeout+0x170/0x170 [ 2480.922718] ? syscall_enter_from_user_mode+0x18/0x50 [ 2480.923110] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2480.923518] ? __traceiter_irq_enable+0xa0/0xa0 [ 2480.923887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2480.924282] __x64_sys_sendmmsg+0x99/0x100 [ 2480.924622] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2480.925026] do_syscall_64+0x3b/0x90 [ 2480.925334] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2480.925461] FAULT_INJECTION: forcing a failure. [ 2480.925461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2480.925728] RIP: 0033:0x7f67303d7b19 [ 2480.925741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2480.925755] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2480.925769] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2480.925780] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2480.925790] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2480.925799] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2480.925808] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2480.925832] [ 2480.938006] CPU: 0 PID: 21938 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2480.939094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2480.940625] Call Trace: [ 2480.940995] [ 2480.941362] dump_stack_lvl+0x8b/0xb3 [ 2480.941960] should_fail.cold+0x5/0xa [ 2480.942510] _copy_from_user+0x2a/0x170 [ 2480.943128] copy_msghdr_from_user+0x89/0x150 [ 2480.943788] ? __copy_msghdr+0x4b0/0x4b0 [ 2480.944419] ? __lock_acquire+0x164d/0x5e70 [ 2480.945082] ___sys_sendmsg+0xdd/0x1b0 [ 2480.945665] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2480.946346] ? lock_is_held_type+0xd7/0x130 [ 2480.946992] ? lock_is_held_type+0xd7/0x130 [ 2480.947621] ? find_held_lock+0x2c/0x110 [ 2480.948236] ? lock_release+0x3b2/0x750 [ 2480.948811] ? __might_fault+0xd1/0x170 [ 2480.949410] ? lock_downgrade+0x6d0/0x6d0 [ 2480.950061] ? lock_is_held_type+0xd7/0x130 [ 2480.950690] __sys_sendmmsg+0x18b/0x460 [ 2480.951287] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2480.951929] ? bit_wait_timeout+0x170/0x170 [ 2480.952547] ? syscall_enter_from_user_mode+0x18/0x50 [ 2480.953308] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2480.954101] ? __traceiter_irq_enable+0xa0/0xa0 [ 2480.954768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2480.955520] __x64_sys_sendmmsg+0x99/0x100 [ 2480.956141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2480.956874] do_syscall_64+0x3b/0x90 [ 2480.957453] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2480.958206] RIP: 0033:0x7f1f0562eb19 [ 2480.958732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2480.961234] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2480.962357] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2480.963375] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2480.964362] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2480.965350] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2480.966371] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2480.967392] 20:38:32 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 32) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:38:32 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 53) [ 2481.065662] FAULT_INJECTION: forcing a failure. [ 2481.065662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2481.066754] CPU: 1 PID: 22054 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2481.067366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2481.068231] Call Trace: [ 2481.068435] [ 2481.068616] dump_stack_lvl+0x8b/0xb3 [ 2481.068936] should_fail.cold+0x5/0xa [ 2481.069245] _copy_from_user+0x2a/0x170 [ 2481.069572] copy_msghdr_from_user+0x89/0x150 [ 2481.069942] ? __copy_msghdr+0x4b0/0x4b0 [ 2481.070271] ? __lock_acquire+0x164d/0x5e70 [ 2481.070639] ___sys_sendmsg+0xdd/0x1b0 [ 2481.070958] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2481.071332] ? lock_is_held_type+0xd7/0x130 [ 2481.071696] ? lock_is_held_type+0xd7/0x130 [ 2481.072042] ? find_held_lock+0x2c/0x110 [ 2481.072374] ? lock_release+0x3b2/0x750 [ 2481.072686] ? __might_fault+0xd1/0x170 [ 2481.072996] ? lock_downgrade+0x6d0/0x6d0 [ 2481.073338] ? lock_is_held_type+0xd7/0x130 [ 2481.073726] __sys_sendmmsg+0x18b/0x460 [ 2481.074053] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2481.074416] ? bit_wait_timeout+0x170/0x170 [ 2481.074761] ? syscall_enter_from_user_mode+0x18/0x50 [ 2481.075171] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2481.075595] ? __traceiter_irq_enable+0xa0/0xa0 [ 2481.075971] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.076385] __x64_sys_sendmmsg+0x99/0x100 [ 2481.076724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.077129] do_syscall_64+0x3b/0x90 [ 2481.077431] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2481.077842] RIP: 0033:0x7fb1f7990b19 [ 2481.078128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.079507] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2481.080079] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2481.080621] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2481.081150] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2481.081693] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2481.082229] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2481.082786] 20:38:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x10000000, 0x0, 0x0}, 0x58) [ 2481.137650] FAULT_INJECTION: forcing a failure. [ 2481.137650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2481.139513] CPU: 0 PID: 22056 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2481.140662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2481.142289] Call Trace: [ 2481.142678] [ 2481.143030] dump_stack_lvl+0x8b/0xb3 [ 2481.143593] should_fail.cold+0x5/0xa [ 2481.144183] _copy_from_user+0x2a/0x170 [ 2481.144775] copy_msghdr_from_user+0x89/0x150 [ 2481.145477] ? __copy_msghdr+0x4b0/0x4b0 [ 2481.146130] ? __lock_acquire+0x164d/0x5e70 [ 2481.146784] ___sys_sendmsg+0xdd/0x1b0 [ 2481.147397] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2481.148105] ? lock_is_held_type+0xd7/0x130 [ 2481.148759] ? lock_is_held_type+0xd7/0x130 [ 2481.149437] ? find_held_lock+0x2c/0x110 [ 2481.150059] ? lock_release+0x3b2/0x750 [ 2481.150656] ? __might_fault+0xd1/0x170 [ 2481.151259] ? lock_downgrade+0x6d0/0x6d0 [ 2481.151883] ? lock_is_held_type+0xd7/0x130 [ 2481.152557] __sys_sendmmsg+0x18b/0x460 [ 2481.153190] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2481.153864] ? bit_wait_timeout+0x170/0x170 [ 2481.154502] ? syscall_enter_from_user_mode+0x18/0x50 [ 2481.155278] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2481.156084] ? __traceiter_irq_enable+0xa0/0xa0 [ 2481.156779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.157585] __x64_sys_sendmmsg+0x99/0x100 [ 2481.158229] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.159001] do_syscall_64+0x3b/0x90 [ 2481.159565] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2481.160328] RIP: 0033:0x7f67303d7b19 [ 2481.160875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.163596] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2481.164703] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2481.165805] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2481.166876] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2481.167929] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2481.168997] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2481.170128] 20:38:50 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000040)={0xfd, 0x4, 0x3ff}) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) 20:38:50 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 33) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:38:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x10000200, 0x0, 0x0}, 0x58) 20:38:50 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 53) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:38:50 executing program 0: r0 = syz_io_uring_setup(0xe8f, &(0x7f00000005c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c66000/0x4000)=nil, &(0x7f00000006c0), &(0x7f00000003c0)) io_uring_enter(r0, 0x0, 0x0, 0x10, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="c90ebef38e2dce8520c60107364d71434f766889a1b5045909a31a8b78d917aab7d97a8b8d40468e8d2f80f31f03f78792e0a04ebca1a75bc2afa4e6e92fb4d04d0a74cb071f299ca336543cac988b120a211351a18e2ba09294b0276e42abbb2c4d92aba3af902a13e17fa9c04c55ca747706007e15b0de9fc17ed5e0273f89e00cb68a40d7e70ad1853348197e2c5c3c7bff3a5e1f7464869aea3218cec6889c51825449b5e5ac33a152ff", 0xac}, {&(0x7f0000000200)="e70f939fad0828aeed3791bd7ebcca8b372e69f753a8572f2b646dbf962d951866782f8a9d3b0bbf2dfec71305451cc0f068e774491704b3114da3c7bc4b0484600336d547aa0bc9f94cd39a7f62a55c5e4e172889ee924c23685f1ccd78d48ea174ebe627590b9c4e493de8ac", 0x6d}, {&(0x7f0000000280)="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", 0xda7}], 0x3, 0x0) fcntl$setpipe(r1, 0x407, 0x10001) io_uring_enter(r1, 0x5b75, 0xdf5, 0x0, &(0x7f0000000000), 0x8) 20:38:50 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 54) 20:38:50 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) tkill(0x0, 0x17) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[0x0, 0x0], 0x2}, 0x58) r0 = clone3(&(0x7f0000000300)={0x100000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x39}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) tkill(r1, 0x17) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r0, r1], 0x2}, 0x58) r2 = fork() pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) write$P9_RMKDIR(r3, &(0x7f0000000000)={0x14}, 0x14) clone3(&(0x7f0000000480)={0x80, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x33}, &(0x7f0000000300)=""/141, 0x8d, &(0x7f00000003c0)=""/162, &(0x7f0000000200)=[0x0, 0x0, r0, r2, 0x0], 0x5, {r3}}, 0x58) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(0xffffffffffffffff) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x7ffffff7) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/169, 0xa9) 20:38:50 executing program 1: io_uring_setup(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) r1 = io_uring_setup(0xfb3, &(0x7f0000000040)={0x0, 0x2e3d, 0x4, 0x0, 0x13c, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r0], 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="c90ebef38e2dce8520c60107364d71434f766889a1b5045909a31a8b78d917aab7d97a8b8d40468e8d2f80f31f03f78792e0a04ebca1a75bc2afa4e6e92fb4d04d0a74cb071f299ca336543cac988b120a211351a18e2ba09294b0276e42abbb2c4d92aba3af902a13e17fa9c04c55ca747706007e15b0de9fc17ed5e0273f89e00cb68a40d7e70ad1853348197e2c5c3c7bff3a5e1f7464869aea3218cec6889c51825449b5e5ac33a152ff", 0xac}, {&(0x7f0000000200)="e70f939fad0828aeed3791bd7ebcca8b372e69f753a8572f2b646dbf962d951866782f8a9d3b0bbf2dfec71305451cc0f068e774491704b3114da3c7bc4b0484600336d547aa0bc9f94cd39a7f62a55c5e4e172889ee924c23685f1ccd78d48ea174ebe627590b9c4e493de8ac", 0x6d}, {&(0x7f0000000280)="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", 0xda7}], 0x3, 0x0) fcntl$setpipe(r2, 0x407, 0x10001) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000180)=""/52, 0x34}], 0x3) [ 2499.407143] FAULT_INJECTION: forcing a failure. [ 2499.407143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2499.409330] CPU: 1 PID: 22076 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2499.410682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2499.412590] Call Trace: [ 2499.413048] [ 2499.413456] dump_stack_lvl+0x8b/0xb3 [ 2499.414164] should_fail.cold+0x5/0xa [ 2499.414850] _copy_from_user+0x2a/0x170 [ 2499.415561] copy_msghdr_from_user+0x89/0x150 [ 2499.416357] ? __copy_msghdr+0x4b0/0x4b0 [ 2499.417101] ? __lock_acquire+0x164d/0x5e70 [ 2499.417901] ___sys_sendmsg+0xdd/0x1b0 [ 2499.418602] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2499.419413] ? lock_is_held_type+0xd7/0x130 [ 2499.420134] FAULT_INJECTION: forcing a failure. [ 2499.420134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2499.420200] ? lock_is_held_type+0xd7/0x130 [ 2499.422698] ? find_held_lock+0x2c/0x110 [ 2499.423251] ? lock_release+0x3b2/0x750 [ 2499.423948] ? __might_fault+0xd1/0x170 [ 2499.424655] ? lock_downgrade+0x6d0/0x6d0 [ 2499.425390] ? lock_is_held_type+0xd7/0x130 [ 2499.426157] __sys_sendmmsg+0x18b/0x460 [ 2499.426864] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2499.427637] ? bit_wait_timeout+0x170/0x170 [ 2499.428375] ? syscall_enter_from_user_mode+0x18/0x50 [ 2499.429274] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2499.430258] ? __traceiter_irq_enable+0xa0/0xa0 [ 2499.431099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2499.431998] __x64_sys_sendmmsg+0x99/0x100 [ 2499.432734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2499.433637] do_syscall_64+0x3b/0x90 [ 2499.434320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2499.435217] RIP: 0033:0x7f67303d7b19 [ 2499.435861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2499.438905] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2499.440205] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2499.441415] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2499.442622] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2499.443806] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2499.444995] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2499.446239] [ 2499.446638] CPU: 0 PID: 22079 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2499.447811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2499.449418] Call Trace: [ 2499.449813] [ 2499.450168] dump_stack_lvl+0x8b/0xb3 [ 2499.450742] should_fail.cold+0x5/0xa [ 2499.451328] _copy_from_user+0x2a/0x170 [ 2499.451935] copy_msghdr_from_user+0x89/0x150 [ 2499.452627] ? __copy_msghdr+0x4b0/0x4b0 [ 2499.453242] ? __lock_acquire+0x164d/0x5e70 [ 2499.453926] ___sys_sendmsg+0xdd/0x1b0 [ 2499.454519] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2499.455228] ? lock_is_held_type+0xd7/0x130 [ 2499.455892] ? find_held_lock+0x2c/0x110 [ 2499.456511] ? lock_release+0x3b2/0x750 [ 2499.457128] ? __might_fault+0xd1/0x170 [ 2499.457740] ? lock_downgrade+0x6d0/0x6d0 [ 2499.458392] ? lock_is_held_type+0xd7/0x130 [ 2499.459063] __sys_sendmmsg+0x18b/0x460 [ 2499.459698] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2499.460390] ? bit_wait_timeout+0x170/0x170 [ 2499.461070] ? syscall_enter_from_user_mode+0x18/0x50 [ 2499.461878] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2499.462717] ? __traceiter_irq_enable+0xa0/0xa0 [ 2499.463456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2499.464261] __x64_sys_sendmmsg+0x99/0x100 [ 2499.464926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2499.465743] do_syscall_64+0x3b/0x90 [ 2499.466324] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2499.467117] RIP: 0033:0x7f1f0562eb19 [ 2499.467686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2499.470398] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2499.471524] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2499.472575] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2499.473638] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2499.474544] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2499.475290] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2499.476066] 20:38:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x11000000, 0x0, 0x0}, 0x58) 20:38:50 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 34) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:38:50 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x9, 0x6, 0x7c, 0x8, 0x0, 0x18a1, 0x4, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x45, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x5, 0x55, 0x9, 0xfffffffffffffffa, 0x5, 0x1, 0x0, 0x9, 0x0, 0x9}, r3, 0xb, r0, 0x6) [ 2499.669429] FAULT_INJECTION: forcing a failure. [ 2499.669429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2499.671401] CPU: 0 PID: 22191 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2499.672569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2499.674238] Call Trace: [ 2499.674630] [ 2499.674977] dump_stack_lvl+0x8b/0xb3 [ 2499.675566] should_fail.cold+0x5/0xa [ 2499.676154] _copy_from_user+0x2a/0x170 [ 2499.676765] copy_msghdr_from_user+0x89/0x150 [ 2499.677460] ? __copy_msghdr+0x4b0/0x4b0 [ 2499.678097] ? lock_is_held_type+0xd7/0x130 [ 2499.678772] ? find_held_lock+0x2c/0x110 [ 2499.679403] ? lock_release+0x3b2/0x750 [ 2499.680030] ___sys_sendmsg+0xdd/0x1b0 [ 2499.680653] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2499.681361] ? lock_is_held_type+0xd7/0x130 [ 2499.682064] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2499.682808] ? trace_rcu_dyntick+0x1a7/0x250 [ 2499.683497] ? exc_page_fault+0xc4/0x1a0 [ 2499.684136] ? exc_page_fault+0xc4/0x1a0 [ 2499.684770] ? lockdep_hardirqs_on+0x79/0x100 [ 2499.685466] ? exc_page_fault+0xc4/0x1a0 [ 2499.686101] ? asm_exc_page_fault+0x22/0x30 [ 2499.686786] ? lock_is_held_type+0xd7/0x130 [ 2499.687468] __sys_sendmmsg+0x18b/0x460 [ 2499.688098] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2499.688794] ? bit_wait_timeout+0x170/0x170 [ 2499.689463] ? syscall_enter_from_user_mode+0x18/0x50 [ 2499.690253] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2499.691082] ? __traceiter_irq_enable+0xa0/0xa0 [ 2499.691811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2499.692612] __x64_sys_sendmmsg+0x99/0x100 [ 2499.693266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2499.694088] do_syscall_64+0x3b/0x90 [ 2499.694674] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2499.695464] RIP: 0033:0x7fb1f7990b19 [ 2499.696033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2499.698737] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2499.699885] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2499.700951] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2499.702025] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2499.703076] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2499.704122] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2499.705210] 20:38:50 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 55) 20:38:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x1ffff000, 0x0, 0x0}, 0x58) [ 2499.867291] FAULT_INJECTION: forcing a failure. [ 2499.867291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2499.869357] CPU: 0 PID: 22198 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2499.870521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2499.872144] Call Trace: [ 2499.872535] [ 2499.872881] dump_stack_lvl+0x8b/0xb3 [ 2499.873466] should_fail.cold+0x5/0xa [ 2499.874069] _copy_from_user+0x2a/0x170 [ 2499.874674] copy_msghdr_from_user+0x89/0x150 [ 2499.875366] ? __copy_msghdr+0x4b0/0x4b0 [ 2499.875992] ? __lock_acquire+0x164d/0x5e70 [ 2499.876670] ___sys_sendmsg+0xdd/0x1b0 [ 2499.877294] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2499.878020] ? lock_is_held_type+0xd7/0x130 [ 2499.878711] ? lock_is_held_type+0xd7/0x130 [ 2499.879401] ? find_held_lock+0x2c/0x110 [ 2499.880037] ? lock_release+0x3b2/0x750 [ 2499.880665] ? __might_fault+0xd1/0x170 [ 2499.881282] ? lock_downgrade+0x6d0/0x6d0 [ 2499.881945] ? lock_is_held_type+0xd7/0x130 [ 2499.882628] __sys_sendmmsg+0x18b/0x460 [ 2499.883268] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2499.883970] ? bit_wait_timeout+0x170/0x170 [ 2499.884635] ? syscall_enter_from_user_mode+0x18/0x50 [ 2499.885433] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2499.886285] ? __traceiter_irq_enable+0xa0/0xa0 [ 2499.887011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2499.887819] __x64_sys_sendmmsg+0x99/0x100 [ 2499.888480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2499.889287] do_syscall_64+0x3b/0x90 [ 2499.889872] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2499.890669] RIP: 0033:0x7f67303d7b19 [ 2499.891244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2499.893928] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2499.895066] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2499.896121] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2499.897178] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2499.898238] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2499.899301] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2499.900379] 20:38:50 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 54) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:38:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x20000000, 0x0, 0x0}, 0x58) 20:38:50 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xe06, @private1, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) 20:38:51 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 35) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 2500.057581] FAULT_INJECTION: forcing a failure. [ 2500.057581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2500.059520] CPU: 0 PID: 22207 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2500.060698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2500.062368] Call Trace: [ 2500.062766] [ 2500.063114] dump_stack_lvl+0x8b/0xb3 [ 2500.063727] should_fail.cold+0x5/0xa [ 2500.064323] _copy_from_user+0x2a/0x170 [ 2500.064937] copy_msghdr_from_user+0x89/0x150 [ 2500.065641] ? __copy_msghdr+0x4b0/0x4b0 [ 2500.066291] ? __lock_acquire+0x164d/0x5e70 [ 2500.066981] ___sys_sendmsg+0xdd/0x1b0 [ 2500.067608] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2500.068323] ? lock_is_held_type+0xd7/0x130 [ 2500.069011] ? lock_is_held_type+0xd7/0x130 [ 2500.069714] ? find_held_lock+0x2c/0x110 [ 2500.070344] ? lock_release+0x3b2/0x750 [ 2500.070978] ? __might_fault+0xd1/0x170 [ 2500.071604] ? lock_downgrade+0x6d0/0x6d0 [ 2500.072268] ? lock_is_held_type+0xd7/0x130 [ 2500.072968] __sys_sendmmsg+0x18b/0x460 [ 2500.073608] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2500.074306] ? bit_wait_timeout+0x170/0x170 [ 2500.074972] ? syscall_enter_from_user_mode+0x18/0x50 [ 2500.075775] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2500.076596] ? __traceiter_irq_enable+0xa0/0xa0 [ 2500.077332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2500.078153] __x64_sys_sendmmsg+0x99/0x100 [ 2500.078830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2500.079620] do_syscall_64+0x3b/0x90 [ 2500.080211] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2500.081002] RIP: 0033:0x7f1f0562eb19 [ 2500.081580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2500.084244] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2500.085383] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2500.086453] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2500.087524] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2500.088612] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2500.089691] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2500.090806] 20:38:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001200), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) io_uring_setup(0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}}, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r2, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0xeb3, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r3, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2f6, &(0x7f0000001280)={0x0, 0xadb3, 0x2, 0x2, 0x167, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001300), &(0x7f0000001340)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001580)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x1, &(0x7f00000014c0)="18d0cbc87ff910d0db155fa6b63788f87da9e88c4ab94e94b4a24682c3df00e0347b87140315b224e298b04648202c0540da4f92aa6d1831787a2c3955e84d4bab76002341e0f3b53f854019fd08b5efdb286f62f089bb181c8055e9b47700e091751e64826295ae287b9211228f1647e3205747df9fb848e3b4711741e8b3771f91c5fd63c4b33e79159e808d554e5917a0187d1673aadb2d520001671e5b7c165825dc51632cdeb8e287d11c", 0x40, 0x0, 0x1, {0x3}}, 0x2d) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) [ 2500.108648] FAULT_INJECTION: forcing a failure. [ 2500.108648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2500.109983] CPU: 1 PID: 22212 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2500.110757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2500.111820] Call Trace: [ 2500.112074] [ 2500.112303] dump_stack_lvl+0x8b/0xb3 [ 2500.112693] should_fail.cold+0x5/0xa [ 2500.113072] _copy_from_user+0x2a/0x170 [ 2500.113474] copy_msghdr_from_user+0x89/0x150 [ 2500.113931] ? __copy_msghdr+0x4b0/0x4b0 [ 2500.114341] ? __lock_acquire+0x164d/0x5e70 [ 2500.114783] ___sys_sendmsg+0xdd/0x1b0 [ 2500.115177] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2500.115631] ? lock_is_held_type+0xd7/0x130 [ 2500.116079] ? lock_is_held_type+0xd7/0x130 [ 2500.116508] ? find_held_lock+0x2c/0x110 [ 2500.116914] ? lock_release+0x3b2/0x750 [ 2500.117310] ? __might_fault+0xd1/0x170 [ 2500.117726] ? lock_downgrade+0x6d0/0x6d0 [ 2500.118137] ? lock_is_held_type+0xd7/0x130 [ 2500.118573] __sys_sendmmsg+0x18b/0x460 [ 2500.118973] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2500.119413] ? bit_wait_timeout+0x170/0x170 [ 2500.119832] ? syscall_enter_from_user_mode+0x18/0x50 [ 2500.120348] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2500.120879] ? __traceiter_irq_enable+0xa0/0xa0 [ 2500.121341] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2500.121854] __x64_sys_sendmmsg+0x99/0x100 [ 2500.122283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2500.122785] do_syscall_64+0x3b/0x90 [ 2500.123157] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2500.123654] RIP: 0033:0x7fb1f7990b19 [ 2500.124019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2500.125731] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2500.126453] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2500.127131] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2500.127815] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2500.128474] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2500.129143] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2500.129849] 20:39:07 executing program 7: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x11a1c, 0x0, 0x2, 0x0, 0x0, 0x40}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000000300)={0x100000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x39}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) tkill(r2, 0x17) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r1, r2], 0x2}, 0x58) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0xff, 0x7, 0x5d, 0x0, 0x1f, 0x8202, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xe31b, 0x689}, 0x2000, 0xfffffffffffffff7, 0x10000, 0x2, 0x1, 0x6, 0x80, 0x0, 0x0, 0x0, 0x9}, r1, 0xe, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xd}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) 20:39:07 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 56) 20:39:07 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0xe}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x13c, 0xb, 0x4, 0x5, 0x70bd28, 0x25dfdbfb, {0x1}, [@typed={0x4, 0x26}, @typed={0x2e, 0x65, 0x0, 0x0, @binary="dc2d39cf13b74a45f5ebe8a16f3a6f8d6a0c834a9e8276ecfb424fd2eab16cde8c6f9efc45843c57f90b"}, @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x31}}, @nested={0xcd, 0x2e, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @uid=r4}, @generic="c8c2f85d575849124986da44a9d0d48dd5fce198606d76a6161e6637efd8d49ed2a7c18e8264cca4a4b6292cbcdd2e65e0834aced21bf6cffb00f05b2277ef3710a3cf2845754bc9863a20e517", @generic="7ad63d0a89ea517acecec8347362630e0de968f9ef8e4afd20d1b5ff7f51a02dd496d9b0dcd5eb3a153675163a44a266941b67a3b486dd46c9dd258679f1e017e212ec54f34ccd98e9b11a3021c6b6397e51bf33928fa239b69aae53cb2ff909416fd236eec68fdf", @typed={0x4, 0x23}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x8, 0x50, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@multicast2}]}, 0x13c}}, 0x40448c5) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:39:07 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x5081, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x80800, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) fcntl$getownex(r1, 0x10, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x5421, &(0x7f0000001340)) getdents(r2, &(0x7f00000001c0)=""/113, 0x71) write$binfmt_misc(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="73797a310aadc39afc7fcd8d1749d47e1b9d7e68596e34dd50242df752e64da112694ed112179fed182f235e723ef649d2cee57a722e927beef7e362e4469b818a71a25486da308c9e5e582d3c9219e40e356e064b16e61f9dc3afb98ae94aa73579197f23c26bbdc6a8768aba8d443f8b3cca866ee30289127510a68f02b8ce1f83179764eeb2ae0ce2fe51990d34e75a9668ae479062343a9d67e8261d8e60c7ad813c39d021ca9466833d2c46e658342c4303efb781cd7b76d87d68b6f7cfcff06688cedfc86d1f"], 0x76) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) ptrace(0x4208, 0x0) ptrace(0x4208, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x9, 0x81, 0x0, 0x150, 0x1, 0x7dc2efc5b8d73117, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x184, 0x0, @perf_config_ext={0x1ff, 0x31}, 0x4203c, 0x3, 0x8, 0x3, 0x5, 0x8, 0x2, 0x0, 0x10001, 0x0, 0xff}, 0x0, 0x7, r1, 0x2) write$P9_RMKDIR(r4, &(0x7f0000000000)={0x14}, 0x14) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "46ab68e4c922d98c", "e5b0b3a41e063ef3e524a08afcd7593f", "17316437", "bce0259465cde3b7"}, 0x28) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pwrite64(r3, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 20:39:07 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 55) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:39:07 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 36) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:39:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x4000) sendfile(r1, r0, 0x0, 0x7fff) r2 = syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x7, 0x7, &(0x7f0000000700)=[{&(0x7f00000001c0)="3e52628cd05c8ecbbc86989b3eea5802e7b9dfe6", 0x14, 0x4}, {&(0x7f0000000240)="e7c60bf28408b84146ce4bc868419201d92e5a6d2d45ac5367b5be06578322204e9a0392ba8c63111e64c78fad003dc10295a3b5415631e6300d82ce4ee096345f5afe6a0c234334105b7a93dd6415bffca84945386bf1be38a7cdba3aa9389dafae4348f4b32fa716d62dd376fd78562e550c1c583d56f4bffb77759df70c4226386120f4d5d4edb803edb2d87fb1f06fc73b9c6de7f53f814959bfe09bf63f239c9747c19b5f560f7ad7b5082a3b1afcd8ca3be2727c1aa0f2c65eb494952548e81d5d", 0xc4, 0x2}, {&(0x7f0000000340)="4dca999bab431dad8ee792613dcf11ee81c69c4b66ff5f8d63f7545beb18679d8d4c79127841c95ff5558d043d999098ac33fa923102c77afa23c2e70de449e406373f773e18c4c506e1d4ae7083707fa2dd0e2497b585cc69b35cdc42d854dac09251120fad0dc9ada4cc3154479a0ef61e979e5bc9d6d0572ea566b31a63dce9530244466bd1f529dbc367b99c35f5cf0cce7966713c8a10e595ac1cb863f880bc16db4a914a8f7e7a394f96bb5c3fc2df23b7c4e7e7ef371a225e7566020c34b29175", 0xc4, 0x2}, {&(0x7f0000000440)="2e41f3404c269c1af428425913edb78342b375aae894de9579c9bc5edc770873d47bb29803dbdf9a8776b743da87996a9a3f5239e27ee8579142bd7277e79b513266f2c6edf02b278723e99cbeda9f516b063e61d0377aa3bf2c53281eb00cb087d7b82d978885d03ccabc198cc77548fd1771bdee32598a50cf0ac8884bc26d4c57ced077e3351a12f1625d6a56678a15e34f5d5f062040bf36b3ecf81edef269fd78962d649fe7ec3368", 0xab, 0x4}, {&(0x7f0000000500)="25a428d9b3a42f399ab42fd23fe7854c61ec8169a1c2c62c0d77c47a319405ae87e7fe5d109fcf5294cca9b85591e813d277695003de372ae594dd490bdd4b6efb82ececc21ce4ba5a8a9d318e4c098f83e8d15a1549c6d4a5f237865bf3df3e9c6dd4298bb1d9f0d18b9f4b58a8427a5a4265223e1632297700a7d02a381aeb51e06b79d857f1b6cbc35f32c5f05f5a3bcaae7f75f49ab77b1f936cbd703eea6adf78c670dc17f6ea24382bc29590ed509720b0d270e3e3c9eb6fe04b", 0xbd, 0x9}, {&(0x7f00000005c0)="b2c1eb38a387556e3af1629e09371ba2c6eeaf98b82726095c9aabd711921d417cd1c5550f0feb52e9c9c7e5f53ede26a26ca6be95404fef733add8165162479ddb25f2dfcc82dbb6bf133c84dbd515bd346d6320114ae529527f5699646f3b9a81801def1d27da64ee005891e068adb6c353684d760355d1432d3c168ac38fba116ede437af4281163d32920809790a846078ae902ae2cbd6f40023f25fd2", 0x9f, 0x87d}, {&(0x7f0000000680)="c2ac7c74923ce1f804184b2c5b9c84e104c4fadd52c221391961c373067f22097aced54791a24b9c8f1cd89dbafb7a552366c65c48fe6110eb3f8f84f5564417ebb2322bb70614e06404", 0x4a}], 0x200004, &(0x7f00000007c0)={[{'!'}, {}, {}, {}, {}, {'}'}, {'%[@('}, {'(,#&)}:(@\\&#@[\xaa|$+-#\'-^\\'}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@measure}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f0000000dc0)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000800), &(0x7f0000000840)='./file1\x00', 0x400000, 0x4, &(0x7f0000000b80)=[{&(0x7f0000000880)="9510d7e38d49561d9e8d2e7745fa573730e32caeb39a1262bffd22b35b40621073c973e724869da96b144ea84f71336372ef4d81c856ac17d614f115ca18977247a2c5007044475750508aff54e9ca58347d6567814a7662", 0x58, 0x6}, {&(0x7f0000000900)="ae2ea313aad7bfe482bc7bb137f62a4f9f00e191c6ba55d6e5ef4a6a97f17fa348fd5a6a157775b1a0e9768db06d0b39989bce44192bf00366dcb0d4df382f6c7e866b2cf8950fad8b9f9bcb3298786c7d16c5f3257ffadfd42af9ac2035421f9e677548c8ac4563e556943cc8a5916226919c526c36521fa49cf7ca94670712dda1deb69995bdcd082192bc0b6cb99055584fa6fa9910197328af12aef849b893c4a4af18c1e9002ac1bef24e2dff95637c0fee8943bb461e4a5af81fab0d4815888cb77285e59b2610129249a8c5d7a8032d718be80378702611632eadd88f3aee4d5c82b74d2d0d", 0xe9, 0x9}, {&(0x7f0000000a00)="44aa4344dbed557bf79ad167c732e7f1d4d13e01c5df2fdaa14506c17dc782a5488152006e3b09667f9ed0c574e4739ee1dce1d996de05813281732b6f5cec5df60b1e9484773be8b71f0b80087f4353ca3ae66ad436038ebd625706f845fe8cb47de77b17382493a2e2e3b3b7e4cba323842ba5572ad94adee619a8b1693bda58", 0x81}, {&(0x7f0000000ac0)="0948cfe75db05dc1b79253d68ca4d9cf9db48cd19fc51bdefd93a5d80ecb02c8fd17e3ec4a0d09578fd8a1b7abef4902e65db353687dff8f7e081d6e11b2bbd0b41a1d5eed5fc3ae9102275a07065f02cfaeed5e6127509284053372db8866e0248681d374c86bffe5d22c002c954c3fd49a0b42c7f102bf0e469a6987eda1befc8d6283a75336", 0x87, 0x100000000}], 0x904800, &(0x7f0000000e00)={[{@gid={'gid', 0x3d, r3}}], [{@uid_gt={'uid>', r4}}, {@smackfshat={'smackfshat', 0x3d, '}'}}]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) 20:39:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x21000000, 0x0, 0x0}, 0x58) [ 2517.050427] FAULT_INJECTION: forcing a failure. [ 2517.050427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2517.052440] CPU: 1 PID: 22335 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2517.053703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2517.055430] Call Trace: [ 2517.055859] [ 2517.056222] dump_stack_lvl+0x8b/0xb3 [ 2517.056874] should_fail.cold+0x5/0xa [ 2517.057493] _copy_from_user+0x2a/0x170 [ 2517.058185] copy_msghdr_from_user+0x89/0x150 [ 2517.058941] ? __copy_msghdr+0x4b0/0x4b0 [ 2517.059635] ? __lock_acquire+0x164d/0x5e70 [ 2517.060350] ___sys_sendmsg+0xdd/0x1b0 [ 2517.061011] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2517.061750] ? lock_is_held_type+0xd7/0x130 [ 2517.062492] ? lock_is_held_type+0xd7/0x130 [ 2517.063188] ? find_held_lock+0x2c/0x110 [ 2517.063871] ? lock_release+0x3b2/0x750 [ 2517.064532] ? __might_fault+0xd1/0x170 [ 2517.065187] ? lock_downgrade+0x6d0/0x6d0 [ 2517.065877] ? lock_is_held_type+0xd7/0x130 [ 2517.066632] __sys_sendmmsg+0x18b/0x460 [ 2517.067304] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2517.068045] ? bit_wait_timeout+0x170/0x170 [ 2517.068757] ? syscall_enter_from_user_mode+0x18/0x50 [ 2517.069594] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2517.070476] ? __traceiter_irq_enable+0xa0/0xa0 [ 2517.071248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.072102] __x64_sys_sendmmsg+0x99/0x100 [ 2517.072803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.073642] do_syscall_64+0x3b/0x90 [ 2517.074266] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2517.075102] RIP: 0033:0x7f67303d7b19 [ 2517.075704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2517.078441] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2517.079629] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2517.080737] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2517.081842] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2517.082950] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2517.084056] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2517.085186] 20:39:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x2c010000, 0x0, 0x0}, 0x58) [ 2517.111267] syz-executor.0 (22330) used greatest stack depth: 22936 bytes left [ 2517.112190] FAULT_INJECTION: forcing a failure. [ 2517.112190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2517.113332] CPU: 0 PID: 22338 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2517.113393] FAULT_INJECTION: forcing a failure. [ 2517.113393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2517.113940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2517.113954] Call Trace: [ 2517.113959] [ 2517.113965] dump_stack_lvl+0x8b/0xb3 [ 2517.113995] should_fail.cold+0x5/0xa [ 2517.114016] _copy_from_user+0x2a/0x170 [ 2517.114037] copy_msghdr_from_user+0x89/0x150 [ 2517.114068] ? __copy_msghdr+0x4b0/0x4b0 [ 2517.114091] ? lock_is_held_type+0xd7/0x130 [ 2517.114117] ? find_held_lock+0x2c/0x110 [ 2517.119197] ? lock_release+0x3b2/0x750 [ 2517.119511] ? finish_task_switch.isra.0+0x228/0x8a0 [ 2517.119910] ___sys_sendmsg+0xdd/0x1b0 [ 2517.120219] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2517.120577] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 2517.120980] ? finish_task_switch.isra.0+0x2be/0x8a0 [ 2517.121368] ? __switch_to+0x5bf/0xf20 [ 2517.121693] ? __schedule+0x895/0x2490 [ 2517.122016] ? io_schedule_timeout+0x150/0x150 [ 2517.122383] ? lock_is_held_type+0xd7/0x130 [ 2517.122727] ? __cond_resched+0x17/0x30 [ 2517.123044] __sys_sendmmsg+0x18b/0x460 [ 2517.123364] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2517.123732] ? bit_wait_timeout+0x170/0x170 [ 2517.124080] ? syscall_enter_from_user_mode+0x18/0x50 [ 2517.124483] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2517.124913] ? __traceiter_irq_enable+0xa0/0xa0 [ 2517.125278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.125696] __x64_sys_sendmmsg+0x99/0x100 [ 2517.126053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.126467] do_syscall_64+0x3b/0x90 [ 2517.126770] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2517.127180] RIP: 0033:0x7fb1f7990b19 [ 2517.127480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2517.128914] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2517.129508] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2517.130081] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2517.130628] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2517.131185] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2517.131745] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2517.132305] [ 2517.132492] CPU: 1 PID: 22336 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2517.133763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2517.135514] Call Trace: [ 2517.135931] [ 2517.136299] dump_stack_lvl+0x8b/0xb3 [ 2517.136933] should_fail.cold+0x5/0xa [ 2517.137558] _copy_from_user+0x2a/0x170 [ 2517.138227] copy_msghdr_from_user+0x89/0x150 [ 2517.138963] ? __copy_msghdr+0x4b0/0x4b0 [ 2517.139632] ? lock_is_held_type+0xd7/0x130 [ 2517.140333] ? irqentry_enter+0x26/0x60 [ 2517.140989] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2517.141859] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2517.142758] ___sys_sendmsg+0xdd/0x1b0 [ 2517.143400] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2517.144150] ? finish_task_switch.isra.0+0x237/0x8a0 [ 2517.144954] ? __switch_to+0x5bf/0xf20 [ 2517.145607] ? __schedule+0x895/0x2490 [ 2517.146267] ? io_schedule_timeout+0x150/0x150 [ 2517.147002] ? lock_is_held_type+0xd7/0x130 [ 2517.147703] ? __cond_resched+0x17/0x30 [ 2517.148349] __sys_sendmmsg+0x18b/0x460 [ 2517.149007] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2517.149735] ? bit_wait_timeout+0x170/0x170 [ 2517.150435] ? syscall_enter_from_user_mode+0x18/0x50 [ 2517.151256] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2517.152114] ? __traceiter_irq_enable+0xa0/0xa0 [ 2517.152868] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.153692] __x64_sys_sendmmsg+0x99/0x100 [ 2517.154380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.155195] do_syscall_64+0x3b/0x90 [ 2517.155799] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2517.156617] RIP: 0033:0x7f1f0562eb19 [ 2517.157196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2517.159947] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2517.161114] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2517.162211] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2517.163289] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2517.164364] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2517.165451] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2517.166583] 20:39:08 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000006c0)) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:39:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x4000) sendfile(r1, r0, 0x0, 0x7fff) r2 = syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x7, 0x7, &(0x7f0000000700)=[{&(0x7f00000001c0)="3e52628cd05c8ecbbc86989b3eea5802e7b9dfe6", 0x14, 0x4}, {&(0x7f0000000240)="e7c60bf28408b84146ce4bc868419201d92e5a6d2d45ac5367b5be06578322204e9a0392ba8c63111e64c78fad003dc10295a3b5415631e6300d82ce4ee096345f5afe6a0c234334105b7a93dd6415bffca84945386bf1be38a7cdba3aa9389dafae4348f4b32fa716d62dd376fd78562e550c1c583d56f4bffb77759df70c4226386120f4d5d4edb803edb2d87fb1f06fc73b9c6de7f53f814959bfe09bf63f239c9747c19b5f560f7ad7b5082a3b1afcd8ca3be2727c1aa0f2c65eb494952548e81d5d", 0xc4, 0x2}, {&(0x7f0000000340)="4dca999bab431dad8ee792613dcf11ee81c69c4b66ff5f8d63f7545beb18679d8d4c79127841c95ff5558d043d999098ac33fa923102c77afa23c2e70de449e406373f773e18c4c506e1d4ae7083707fa2dd0e2497b585cc69b35cdc42d854dac09251120fad0dc9ada4cc3154479a0ef61e979e5bc9d6d0572ea566b31a63dce9530244466bd1f529dbc367b99c35f5cf0cce7966713c8a10e595ac1cb863f880bc16db4a914a8f7e7a394f96bb5c3fc2df23b7c4e7e7ef371a225e7566020c34b29175", 0xc4, 0x2}, {&(0x7f0000000440)="2e41f3404c269c1af428425913edb78342b375aae894de9579c9bc5edc770873d47bb29803dbdf9a8776b743da87996a9a3f5239e27ee8579142bd7277e79b513266f2c6edf02b278723e99cbeda9f516b063e61d0377aa3bf2c53281eb00cb087d7b82d978885d03ccabc198cc77548fd1771bdee32598a50cf0ac8884bc26d4c57ced077e3351a12f1625d6a56678a15e34f5d5f062040bf36b3ecf81edef269fd78962d649fe7ec3368", 0xab, 0x4}, {&(0x7f0000000500)="25a428d9b3a42f399ab42fd23fe7854c61ec8169a1c2c62c0d77c47a319405ae87e7fe5d109fcf5294cca9b85591e813d277695003de372ae594dd490bdd4b6efb82ececc21ce4ba5a8a9d318e4c098f83e8d15a1549c6d4a5f237865bf3df3e9c6dd4298bb1d9f0d18b9f4b58a8427a5a4265223e1632297700a7d02a381aeb51e06b79d857f1b6cbc35f32c5f05f5a3bcaae7f75f49ab77b1f936cbd703eea6adf78c670dc17f6ea24382bc29590ed509720b0d270e3e3c9eb6fe04b", 0xbd, 0x9}, {&(0x7f00000005c0)="b2c1eb38a387556e3af1629e09371ba2c6eeaf98b82726095c9aabd711921d417cd1c5550f0feb52e9c9c7e5f53ede26a26ca6be95404fef733add8165162479ddb25f2dfcc82dbb6bf133c84dbd515bd346d6320114ae529527f5699646f3b9a81801def1d27da64ee005891e068adb6c353684d760355d1432d3c168ac38fba116ede437af4281163d32920809790a846078ae902ae2cbd6f40023f25fd2", 0x9f, 0x87d}, {&(0x7f0000000680)="c2ac7c74923ce1f804184b2c5b9c84e104c4fadd52c221391961c373067f22097aced54791a24b9c8f1cd89dbafb7a552366c65c48fe6110eb3f8f84f5564417ebb2322bb70614e06404", 0x4a}], 0x200004, &(0x7f00000007c0)={[{'!'}, {}, {}, {}, {}, {'}'}, {'%[@('}, {'(,#&)}:(@\\&#@[\xaa|$+-#\'-^\\'}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@measure}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f0000000dc0)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000800), &(0x7f0000000840)='./file1\x00', 0x400000, 0x4, &(0x7f0000000b80)=[{&(0x7f0000000880)="9510d7e38d49561d9e8d2e7745fa573730e32caeb39a1262bffd22b35b40621073c973e724869da96b144ea84f71336372ef4d81c856ac17d614f115ca18977247a2c5007044475750508aff54e9ca58347d6567814a7662", 0x58, 0x6}, {&(0x7f0000000900)="ae2ea313aad7bfe482bc7bb137f62a4f9f00e191c6ba55d6e5ef4a6a97f17fa348fd5a6a157775b1a0e9768db06d0b39989bce44192bf00366dcb0d4df382f6c7e866b2cf8950fad8b9f9bcb3298786c7d16c5f3257ffadfd42af9ac2035421f9e677548c8ac4563e556943cc8a5916226919c526c36521fa49cf7ca94670712dda1deb69995bdcd082192bc0b6cb99055584fa6fa9910197328af12aef849b893c4a4af18c1e9002ac1bef24e2dff95637c0fee8943bb461e4a5af81fab0d4815888cb77285e59b2610129249a8c5d7a8032d718be80378702611632eadd88f3aee4d5c82b74d2d0d", 0xe9, 0x9}, {&(0x7f0000000a00)="44aa4344dbed557bf79ad167c732e7f1d4d13e01c5df2fdaa14506c17dc782a5488152006e3b09667f9ed0c574e4739ee1dce1d996de05813281732b6f5cec5df60b1e9484773be8b71f0b80087f4353ca3ae66ad436038ebd625706f845fe8cb47de77b17382493a2e2e3b3b7e4cba323842ba5572ad94adee619a8b1693bda58", 0x81}, {&(0x7f0000000ac0)="0948cfe75db05dc1b79253d68ca4d9cf9db48cd19fc51bdefd93a5d80ecb02c8fd17e3ec4a0d09578fd8a1b7abef4902e65db353687dff8f7e081d6e11b2bbd0b41a1d5eed5fc3ae9102275a07065f02cfaeed5e6127509284053372db8866e0248681d374c86bffe5d22c002c954c3fd49a0b42c7f102bf0e469a6987eda1befc8d6283a75336", 0x87, 0x100000000}], 0x904800, &(0x7f0000000e00)={[{@gid={'gid', 0x3d, r3}}], [{@uid_gt={'uid>', r4}}, {@smackfshat={'smackfshat', 0x3d, '}'}}]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) 20:39:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x3f000000, 0x0, 0x0}, 0x58) 20:39:08 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 57) 20:39:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x4000) sendfile(r1, r0, 0x0, 0x7fff) r2 = syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x7, 0x7, &(0x7f0000000700)=[{&(0x7f00000001c0)="3e52628cd05c8ecbbc86989b3eea5802e7b9dfe6", 0x14, 0x4}, {&(0x7f0000000240)="e7c60bf28408b84146ce4bc868419201d92e5a6d2d45ac5367b5be06578322204e9a0392ba8c63111e64c78fad003dc10295a3b5415631e6300d82ce4ee096345f5afe6a0c234334105b7a93dd6415bffca84945386bf1be38a7cdba3aa9389dafae4348f4b32fa716d62dd376fd78562e550c1c583d56f4bffb77759df70c4226386120f4d5d4edb803edb2d87fb1f06fc73b9c6de7f53f814959bfe09bf63f239c9747c19b5f560f7ad7b5082a3b1afcd8ca3be2727c1aa0f2c65eb494952548e81d5d", 0xc4, 0x2}, {&(0x7f0000000340)="4dca999bab431dad8ee792613dcf11ee81c69c4b66ff5f8d63f7545beb18679d8d4c79127841c95ff5558d043d999098ac33fa923102c77afa23c2e70de449e406373f773e18c4c506e1d4ae7083707fa2dd0e2497b585cc69b35cdc42d854dac09251120fad0dc9ada4cc3154479a0ef61e979e5bc9d6d0572ea566b31a63dce9530244466bd1f529dbc367b99c35f5cf0cce7966713c8a10e595ac1cb863f880bc16db4a914a8f7e7a394f96bb5c3fc2df23b7c4e7e7ef371a225e7566020c34b29175", 0xc4, 0x2}, {&(0x7f0000000440)="2e41f3404c269c1af428425913edb78342b375aae894de9579c9bc5edc770873d47bb29803dbdf9a8776b743da87996a9a3f5239e27ee8579142bd7277e79b513266f2c6edf02b278723e99cbeda9f516b063e61d0377aa3bf2c53281eb00cb087d7b82d978885d03ccabc198cc77548fd1771bdee32598a50cf0ac8884bc26d4c57ced077e3351a12f1625d6a56678a15e34f5d5f062040bf36b3ecf81edef269fd78962d649fe7ec3368", 0xab, 0x4}, {&(0x7f0000000500)="25a428d9b3a42f399ab42fd23fe7854c61ec8169a1c2c62c0d77c47a319405ae87e7fe5d109fcf5294cca9b85591e813d277695003de372ae594dd490bdd4b6efb82ececc21ce4ba5a8a9d318e4c098f83e8d15a1549c6d4a5f237865bf3df3e9c6dd4298bb1d9f0d18b9f4b58a8427a5a4265223e1632297700a7d02a381aeb51e06b79d857f1b6cbc35f32c5f05f5a3bcaae7f75f49ab77b1f936cbd703eea6adf78c670dc17f6ea24382bc29590ed509720b0d270e3e3c9eb6fe04b", 0xbd, 0x9}, {&(0x7f00000005c0)="b2c1eb38a387556e3af1629e09371ba2c6eeaf98b82726095c9aabd711921d417cd1c5550f0feb52e9c9c7e5f53ede26a26ca6be95404fef733add8165162479ddb25f2dfcc82dbb6bf133c84dbd515bd346d6320114ae529527f5699646f3b9a81801def1d27da64ee005891e068adb6c353684d760355d1432d3c168ac38fba116ede437af4281163d32920809790a846078ae902ae2cbd6f40023f25fd2", 0x9f, 0x87d}, {&(0x7f0000000680)="c2ac7c74923ce1f804184b2c5b9c84e104c4fadd52c221391961c373067f22097aced54791a24b9c8f1cd89dbafb7a552366c65c48fe6110eb3f8f84f5564417ebb2322bb70614e06404", 0x4a}], 0x200004, &(0x7f00000007c0)={[{'!'}, {}, {}, {}, {}, {'}'}, {'%[@('}, {'(,#&)}:(@\\&#@[\xaa|$+-#\'-^\\'}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@measure}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f0000000dc0)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000800), &(0x7f0000000840)='./file1\x00', 0x400000, 0x4, &(0x7f0000000b80)=[{&(0x7f0000000880)="9510d7e38d49561d9e8d2e7745fa573730e32caeb39a1262bffd22b35b40621073c973e724869da96b144ea84f71336372ef4d81c856ac17d614f115ca18977247a2c5007044475750508aff54e9ca58347d6567814a7662", 0x58, 0x6}, {&(0x7f0000000900)="ae2ea313aad7bfe482bc7bb137f62a4f9f00e191c6ba55d6e5ef4a6a97f17fa348fd5a6a157775b1a0e9768db06d0b39989bce44192bf00366dcb0d4df382f6c7e866b2cf8950fad8b9f9bcb3298786c7d16c5f3257ffadfd42af9ac2035421f9e677548c8ac4563e556943cc8a5916226919c526c36521fa49cf7ca94670712dda1deb69995bdcd082192bc0b6cb99055584fa6fa9910197328af12aef849b893c4a4af18c1e9002ac1bef24e2dff95637c0fee8943bb461e4a5af81fab0d4815888cb77285e59b2610129249a8c5d7a8032d718be80378702611632eadd88f3aee4d5c82b74d2d0d", 0xe9, 0x9}, {&(0x7f0000000a00)="44aa4344dbed557bf79ad167c732e7f1d4d13e01c5df2fdaa14506c17dc782a5488152006e3b09667f9ed0c574e4739ee1dce1d996de05813281732b6f5cec5df60b1e9484773be8b71f0b80087f4353ca3ae66ad436038ebd625706f845fe8cb47de77b17382493a2e2e3b3b7e4cba323842ba5572ad94adee619a8b1693bda58", 0x81}, {&(0x7f0000000ac0)="0948cfe75db05dc1b79253d68ca4d9cf9db48cd19fc51bdefd93a5d80ecb02c8fd17e3ec4a0d09578fd8a1b7abef4902e65db353687dff8f7e081d6e11b2bbd0b41a1d5eed5fc3ae9102275a07065f02cfaeed5e6127509284053372db8866e0248681d374c86bffe5d22c002c954c3fd49a0b42c7f102bf0e469a6987eda1befc8d6283a75336", 0x87, 0x100000000}], 0x904800, &(0x7f0000000e00)={[{@gid={'gid', 0x3d, r3}}], [{@uid_gt={'uid>', r4}}, {@smackfshat={'smackfshat', 0x3d, '}'}}]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) 20:39:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000200)=ANY=[@ANYBLOB="0600006f3a7433c83d76567c00774db1040000007cd181000000001fdc7ddba35c26bbc9da6dba753b1615b859e492020e528fadfb8e5f12dd816ed8f1470c7c165b442bbfc7c048873aec7d604a11ed9f1d4426398c4c041f1959d954f5a1a2ffa452dc0233e87191a4845230dcc99e939cf04f92fcba4cf46773261fee72b6be3378b147bc0a49d414065fdcda363ae744470b1fddc2e85eed58f5f302000000b9d3d33b9fbd597f03ac8a574ed97069ea2bb9be172c674111666c54fb0a7aad7a3bcc1a388a5226a53e56cd3006c39b210e470b843e406383a06587afcbe68de0339f7bda0e4b9d1d9fdb56bbb4929d2251b9fee9c785"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x6, 0x9, 0xff, 0x0, 0x4, 0x55190, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x10000}, 0x0, 0x0, 0x101, 0x9, 0x4, 0x3, 0x2, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x9) 20:39:08 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 37) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 2517.423257] FAULT_INJECTION: forcing a failure. [ 2517.423257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2517.425403] CPU: 1 PID: 22458 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2517.426539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2517.428081] Call Trace: [ 2517.428445] [ 2517.428773] dump_stack_lvl+0x8b/0xb3 [ 2517.429334] should_fail.cold+0x5/0xa [ 2517.429907] _copy_from_user+0x2a/0x170 [ 2517.430487] copy_msghdr_from_user+0x89/0x150 [ 2517.431154] ? __copy_msghdr+0x4b0/0x4b0 [ 2517.431755] ? __lock_acquire+0x164d/0x5e70 [ 2517.432396] ___sys_sendmsg+0xdd/0x1b0 [ 2517.432976] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2517.433639] ? lock_is_held_type+0xd7/0x130 [ 2517.434293] ? lock_is_held_type+0xd7/0x130 [ 2517.434926] ? find_held_lock+0x2c/0x110 [ 2517.435514] ? lock_release+0x3b2/0x750 [ 2517.436082] ? __might_fault+0xd1/0x170 [ 2517.436662] ? lock_downgrade+0x6d0/0x6d0 [ 2517.437265] ? lock_is_held_type+0xd7/0x130 [ 2517.437919] __sys_sendmmsg+0x18b/0x460 [ 2517.438507] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2517.439175] ? bit_wait_timeout+0x170/0x170 [ 2517.439856] ? syscall_enter_from_user_mode+0x18/0x50 [ 2517.440662] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2517.441499] ? __traceiter_irq_enable+0xa0/0xa0 [ 2517.442247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.443063] __x64_sys_sendmmsg+0x99/0x100 [ 2517.443733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.444527] do_syscall_64+0x3b/0x90 [ 2517.445124] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2517.445929] RIP: 0033:0x7f67303d7b19 [ 2517.446513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2517.449221] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2517.450380] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2517.451437] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2517.452518] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2517.453578] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2517.454648] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2517.455740] 20:39:08 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x8) socket$inet6_udp(0xa, 0x2, 0x0) 20:39:08 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 56) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:39:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x40000000, 0x0, 0x0}, 0x58) 20:39:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x161042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 20:39:08 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 58) [ 2517.575499] FAULT_INJECTION: forcing a failure. [ 2517.575499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2517.576569] CPU: 0 PID: 22471 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2517.577158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2517.577982] Call Trace: [ 2517.578178] [ 2517.578350] dump_stack_lvl+0x8b/0xb3 [ 2517.578648] should_fail.cold+0x5/0xa [ 2517.578943] _copy_from_user+0x2a/0x170 [ 2517.579240] copy_msghdr_from_user+0x89/0x150 [ 2517.579602] ? __copy_msghdr+0x4b0/0x4b0 [ 2517.579912] ? __lock_acquire+0x164d/0x5e70 [ 2517.580256] ___sys_sendmsg+0xdd/0x1b0 [ 2517.580555] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2517.580901] ? lock_is_held_type+0xd7/0x130 [ 2517.581241] ? lock_is_held_type+0xd7/0x130 [ 2517.581569] ? find_held_lock+0x2c/0x110 [ 2517.581874] ? lock_release+0x3b2/0x750 [ 2517.582186] ? __might_fault+0xd1/0x170 [ 2517.582487] ? lock_downgrade+0x6d0/0x6d0 [ 2517.582811] ? lock_is_held_type+0xd7/0x130 [ 2517.583145] __sys_sendmmsg+0x18b/0x460 [ 2517.583458] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2517.583794] ? bit_wait_timeout+0x170/0x170 [ 2517.584122] ? syscall_enter_from_user_mode+0x18/0x50 [ 2517.584520] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2517.584927] ? __traceiter_irq_enable+0xa0/0xa0 [ 2517.585291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.585689] __x64_sys_sendmmsg+0x99/0x100 [ 2517.586012] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.586399] do_syscall_64+0x3b/0x90 [ 2517.586687] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2517.587074] RIP: 0033:0x7f1f0562eb19 [ 2517.587347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2517.588652] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2517.589195] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2517.589710] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2517.590268] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2517.590823] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2517.591371] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2517.591936] 20:39:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x88000000, 0x0, 0x0}, 0x58) [ 2517.661006] FAULT_INJECTION: forcing a failure. [ 2517.661006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2517.661990] CPU: 0 PID: 22472 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2517.662578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2517.663391] Call Trace: [ 2517.663591] [ 2517.663763] dump_stack_lvl+0x8b/0xb3 [ 2517.664064] should_fail.cold+0x5/0xa [ 2517.664360] _copy_from_user+0x2a/0x170 [ 2517.664664] copy_msghdr_from_user+0x89/0x150 [ 2517.665008] ? __copy_msghdr+0x4b0/0x4b0 [ 2517.665329] ? __lock_acquire+0x164d/0x5e70 [ 2517.665671] ___sys_sendmsg+0xdd/0x1b0 [ 2517.665978] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2517.666332] ? lock_is_held_type+0xd7/0x130 [ 2517.666683] ? lock_is_held_type+0xd7/0x130 [ 2517.667012] ? find_held_lock+0x2c/0x110 [ 2517.667321] ? lock_release+0x3b2/0x750 [ 2517.667630] ? __might_fault+0xd1/0x170 [ 2517.667934] ? lock_downgrade+0x6d0/0x6d0 [ 2517.668255] ? lock_is_held_type+0xd7/0x130 [ 2517.668586] __sys_sendmmsg+0x18b/0x460 [ 2517.668907] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2517.669249] ? bit_wait_timeout+0x170/0x170 [ 2517.669581] ? syscall_enter_from_user_mode+0x18/0x50 [ 2517.669982] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2517.670394] ? __traceiter_irq_enable+0xa0/0xa0 [ 2517.670775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.671330] __x64_sys_sendmmsg+0x99/0x100 [ 2517.671652] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.672117] do_syscall_64+0x3b/0x90 [ 2517.672407] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2517.672795] RIP: 0033:0x7fb1f7990b19 [ 2517.673071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2517.674369] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2517.674955] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2517.675518] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2517.676074] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2517.676619] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2517.677166] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2517.677755] [ 2517.699906] FAULT_INJECTION: forcing a failure. [ 2517.699906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2517.700882] CPU: 0 PID: 22492 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2517.701472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2517.702307] Call Trace: [ 2517.702510] [ 2517.703085] dump_stack_lvl+0x8b/0xb3 [ 2517.703882] should_fail.cold+0x5/0xa [ 2517.704523] _copy_from_user+0x2a/0x170 [ 2517.705183] copy_msghdr_from_user+0x89/0x150 [ 2517.705963] ? __copy_msghdr+0x4b0/0x4b0 [ 2517.706664] ? __lock_acquire+0x164d/0x5e70 [ 2517.707409] ___sys_sendmsg+0xdd/0x1b0 [ 2517.708085] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2517.708863] ? lock_acquire+0xaf/0x530 [ 2517.709526] ? check_preemption_disabled+0x2c/0x180 [ 2517.710366] ? lock_is_held_type+0xd7/0x130 [ 2517.711103] ? find_held_lock+0x2c/0x110 [ 2517.711817] ? lock_release+0x3b2/0x750 [ 2517.712482] ? __might_fault+0xd1/0x170 [ 2517.713184] ? lock_downgrade+0x6d0/0x6d0 [ 2517.713946] ? lock_is_held_type+0xd7/0x130 [ 2517.714649] __sys_sendmmsg+0x18b/0x460 [ 2517.715237] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2517.715903] ? bit_wait_timeout+0x170/0x170 [ 2517.716527] ? syscall_enter_from_user_mode+0x18/0x50 [ 2517.717271] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2517.718047] ? __traceiter_irq_enable+0xa0/0xa0 [ 2517.718727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.719476] __x64_sys_sendmmsg+0x99/0x100 [ 2517.720093] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2517.720842] do_syscall_64+0x3b/0x90 [ 2517.721386] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2517.722133] RIP: 0033:0x7f67303d7b19 [ 2517.722660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2517.725154] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2517.726225] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2517.727220] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2517.728172] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2517.729103] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2517.730050] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2517.731101] [ 2518.564538] syz-executor.0 (22485) used greatest stack depth: 22824 bytes left 20:39:25 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000440)={0x80000800, &(0x7f0000000000), 0x0, &(0x7f0000000100), {0x37}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000380)=[r0, 0x0, r0], 0x3}, 0x58) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0)) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x3d}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000240)={0x0, 0x1f, "ace477", 0x1f, 0x8}) syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x200000) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:39:25 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/249, &(0x7f0000000200)=0xf9) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x20, 0x7f, 0x1f, 0x20, 0x0, 0x3ed, 0x400, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x1a024, 0x8, 0x401, 0x1, 0x100, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5}) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:39:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x161042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r1, r0, 0x0, 0xfffffdef) 20:39:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x9d020000, 0x0, 0x0}, 0x58) 20:39:25 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 57) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:39:25 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 38) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:39:25 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 59) 20:39:25 executing program 7: msgsnd(0xffffffffffffffff, &(0x7f0000000100)={0x3, "a8b9c6e1921e6b2208417535ddb28b2e0a8a94d8e62dc1a0135f1b4b2b37c5816611c5b07c5a4b08995fddec536d0d96671ec472a2d13faf87189901bafab82d8ef1f7b66b08fdcc0c58c9c17eefef04a102369e30898e8e109aa707a7957e2192ff59d20420ebb74d71100028b665b6c7fae716af32db911544541d1f9376cc9911f39bd49055eef15b3332706d22c65d476a05b7f7ec425a5456fe8558950713aa2fd17b701147aa3f8267d59c6570a4760763a8f4c92306d13c1d811319451372838c387f97f59f3de8c22616"}, 0xd6, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="c90ebef38e2dce8520c60107364d71434f766889a1b5045909a31a8b78d917aab7d97a8b8d40468e8d2f80f31f03f78792e0a04ebca1a75bc2afa4e6e92fb4d04d0a74cb071f299ca336543cac988b120a211351a18e2ba09294b0276e42abbb2c4d92aba3af902a13e17fa9c04c55ca747706007e15b0de9fc17ed5e0273f89e00cb68a40d7e70ad1853348197e2c5c3c7bff3a5e1f7464869aea3218cec6889c51825449b5e5ac33a152ff", 0xac}, {&(0x7f0000000200)="e70f939fad0828aeed3791bd7ebcca8b372e69f753a8572f2b646dbf962d951866782f8a9d3b0bbf2dfec71305451cc0f068e774491704b3114da3c7bc4b0484600336d547aa0bc9f94cd39a7f62a55c5e4e172889ee924c23685f1ccd78d48ea174ebe627590b9c4e493de8ac", 0x6d}, {&(0x7f0000000280)="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", 0xda7}], 0x3, 0x0) fcntl$setpipe(r0, 0x407, 0x10001) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3f, 0x800000200}, 0x9200, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, 0x0, 0x2, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r1 = msgget(0x3, 0x0) msgsnd(r1, &(0x7f0000001040)={0x0, "0aced1f46762e465d4ec12e13b8a0372dc56973df5ffeb1d2f551f800002f4c7f3f7f33fd93563961775fb9cd8590fa581459bb2964dd561158fcc4b34fb760799ab1f3338ddbc786f3ad9"}, 0x53, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) [ 2534.176139] FAULT_INJECTION: forcing a failure. [ 2534.176139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2534.177342] CPU: 1 PID: 22596 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2534.177935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2534.178784] Call Trace: [ 2534.178983] [ 2534.179166] dump_stack_lvl+0x8b/0xb3 [ 2534.179475] should_fail.cold+0x5/0xa [ 2534.179777] _copy_from_user+0x2a/0x170 [ 2534.180097] copy_msghdr_from_user+0x89/0x150 [ 2534.180454] ? __copy_msghdr+0x4b0/0x4b0 [ 2534.180783] ? __lock_acquire+0x164d/0x5e70 [ 2534.181135] ___sys_sendmsg+0xdd/0x1b0 [ 2534.181446] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2534.181801] ? lock_is_held_type+0xd7/0x130 [ 2534.182157] ? lock_is_held_type+0xd7/0x130 [ 2534.182499] ? find_held_lock+0x2c/0x110 [ 2534.182815] ? lock_release+0x3b2/0x750 [ 2534.183126] ? __might_fault+0xd1/0x170 [ 2534.183437] ? lock_downgrade+0x6d0/0x6d0 [ 2534.183767] ? lock_is_held_type+0xd7/0x130 [ 2534.184109] __sys_sendmmsg+0x18b/0x460 [ 2534.184431] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2534.184784] ? bit_wait_timeout+0x170/0x170 [ 2534.184961] Bluetooth: hci0: HCI_REQ-0x0401 [ 2534.185120] ? syscall_enter_from_user_mode+0x18/0x50 [ 2534.186141] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2534.186555] ? __traceiter_irq_enable+0xa0/0xa0 [ 2534.186927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.187336] __x64_sys_sendmmsg+0x99/0x100 [ 2534.187668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.188065] do_syscall_64+0x3b/0x90 [ 2534.188359] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2534.188759] RIP: 0033:0x7fb1f7990b19 [ 2534.189047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2534.190416] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2534.190984] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2534.191516] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2534.192049] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2534.192582] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2534.193120] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2534.193670] [ 2534.198176] FAULT_INJECTION: forcing a failure. [ 2534.198176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2534.199192] CPU: 1 PID: 22594 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2534.199792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2534.200638] Call Trace: [ 2534.200838] [ 2534.201016] dump_stack_lvl+0x8b/0xb3 [ 2534.201317] should_fail.cold+0x5/0xa [ 2534.201623] _copy_from_user+0x2a/0x170 [ 2534.201932] copy_msghdr_from_user+0x89/0x150 [ 2534.202294] ? __copy_msghdr+0x4b0/0x4b0 [ 2534.202619] ? __lock_acquire+0x164d/0x5e70 [ 2534.202960] ___sys_sendmsg+0xdd/0x1b0 [ 2534.203271] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2534.203630] ? lock_is_held_type+0xd7/0x130 [ 2534.203975] ? lock_is_held_type+0xd7/0x130 [ 2534.204317] ? find_held_lock+0x2c/0x110 [ 2534.204633] ? lock_release+0x3b2/0x750 [ 2534.204941] ? __might_fault+0xd1/0x170 [ 2534.205255] ? lock_downgrade+0x6d0/0x6d0 [ 2534.205581] ? lock_is_held_type+0xd7/0x130 [ 2534.205928] __sys_sendmmsg+0x18b/0x460 [ 2534.206257] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2534.206606] ? bit_wait_timeout+0x170/0x170 [ 2534.206942] ? syscall_enter_from_user_mode+0x18/0x50 [ 2534.207347] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2534.207769] ? __traceiter_irq_enable+0xa0/0xa0 [ 2534.208128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.208529] __x64_sys_sendmmsg+0x99/0x100 [ 2534.208862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.209260] do_syscall_64+0x3b/0x90 [ 2534.209553] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2534.209950] RIP: 0033:0x7f1f0562eb19 [ 2534.210249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2534.211609] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2534.212180] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2534.212716] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2534.213250] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2534.213781] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2534.214336] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2534.214882] [ 2534.225847] FAULT_INJECTION: forcing a failure. [ 2534.225847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2534.226813] CPU: 1 PID: 22606 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2534.227408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2534.228255] Call Trace: [ 2534.228460] [ 2534.228638] dump_stack_lvl+0x8b/0xb3 [ 2534.228939] should_fail.cold+0x5/0xa [ 2534.229245] _copy_from_user+0x2a/0x170 [ 2534.229562] copy_msghdr_from_user+0x89/0x150 [ 2534.229922] ? __copy_msghdr+0x4b0/0x4b0 [ 2534.230255] ? __lock_acquire+0x164d/0x5e70 [ 2534.230609] ___sys_sendmsg+0xdd/0x1b0 [ 2534.230919] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2534.231268] ? lock_is_held_type+0xd7/0x130 [ 2534.231614] ? lock_is_held_type+0xd7/0x130 [ 2534.231955] ? find_held_lock+0x2c/0x110 [ 2534.232276] ? lock_release+0x3b2/0x750 [ 2534.232588] ? __might_fault+0xd1/0x170 [ 2534.232900] ? lock_downgrade+0x6d0/0x6d0 [ 2534.233230] ? lock_is_held_type+0xd7/0x130 [ 2534.233570] __sys_sendmmsg+0x18b/0x460 [ 2534.233895] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2534.234260] ? bit_wait_timeout+0x170/0x170 [ 2534.234603] ? syscall_enter_from_user_mode+0x18/0x50 [ 2534.235011] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2534.235433] ? __traceiter_irq_enable+0xa0/0xa0 [ 2534.235799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.236213] __x64_sys_sendmmsg+0x99/0x100 [ 2534.236549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.236959] do_syscall_64+0x3b/0x90 [ 2534.237255] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2534.237658] RIP: 0033:0x7f67303d7b19 [ 2534.237943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2534.239292] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2534.239863] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2534.240402] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2534.240938] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2534.241481] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2534.242014] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2534.242572] 20:39:25 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 39) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:39:25 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 60) [ 2534.330079] FAULT_INJECTION: forcing a failure. [ 2534.330079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2534.331159] CPU: 1 PID: 22664 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2534.331770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2534.332622] Call Trace: [ 2534.332823] [ 2534.333003] dump_stack_lvl+0x8b/0xb3 [ 2534.333309] should_fail.cold+0x5/0xa [ 2534.333616] _copy_from_user+0x2a/0x170 [ 2534.333931] copy_msghdr_from_user+0x89/0x150 [ 2534.334304] ? __copy_msghdr+0x4b0/0x4b0 [ 2534.334628] ? __lock_acquire+0x164d/0x5e70 [ 2534.334987] ___sys_sendmsg+0xdd/0x1b0 [ 2534.335296] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2534.335657] ? lock_is_held_type+0xd7/0x130 [ 2534.336010] ? lock_is_held_type+0xd7/0x130 [ 2534.336346] ? find_held_lock+0x2c/0x110 [ 2534.336670] ? lock_release+0x3b2/0x750 [ 2534.336982] ? __might_fault+0xd1/0x170 [ 2534.337305] ? lock_downgrade+0x6d0/0x6d0 [ 2534.337637] ? lock_is_held_type+0xd7/0x130 [ 2534.337982] __sys_sendmmsg+0x18b/0x460 [ 2534.338307] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2534.338647] ? lock_is_held_type+0xd7/0x130 [ 2534.338999] ? recalibrate_cpu_khz+0x10/0x10 [ 2534.339348] ? ktime_get+0x153/0x1f0 [ 2534.339651] ? syscall_enter_from_user_mode+0x18/0x50 [ 2534.340057] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2534.340479] ? __traceiter_irq_enable+0xa0/0xa0 [ 2534.340842] ? hrtimer_interrupt+0x5b0/0x770 [ 2534.341189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.341591] __x64_sys_sendmmsg+0x99/0x100 [ 2534.341919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.342341] do_syscall_64+0x3b/0x90 [ 2534.342634] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2534.343033] RIP: 0033:0x7fb1f7990b19 [ 2534.343323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2534.344673] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2534.345247] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2534.345774] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2534.346324] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2534.346867] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2534.347403] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2534.347953] [ 2534.467523] FAULT_INJECTION: forcing a failure. [ 2534.467523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2534.469684] CPU: 0 PID: 22714 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2534.470940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2534.472575] Call Trace: [ 2534.472966] [ 2534.473323] dump_stack_lvl+0x8b/0xb3 [ 2534.473915] should_fail.cold+0x5/0xa [ 2534.474528] _copy_from_user+0x2a/0x170 [ 2534.475142] copy_msghdr_from_user+0x89/0x150 [ 2534.475868] ? __copy_msghdr+0x4b0/0x4b0 [ 2534.476531] ? __lock_acquire+0x164d/0x5e70 [ 2534.477239] ___sys_sendmsg+0xdd/0x1b0 [ 2534.477876] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2534.478609] ? lock_is_held_type+0xd7/0x130 [ 2534.479328] ? lock_is_held_type+0xd7/0x130 [ 2534.480020] ? find_held_lock+0x2c/0x110 [ 2534.480671] ? lock_release+0x3b2/0x750 [ 2534.481298] ? __might_fault+0xd1/0x170 [ 2534.481938] ? lock_downgrade+0x6d0/0x6d0 [ 2534.482624] ? lock_is_held_type+0xd7/0x130 [ 2534.483330] __sys_sendmmsg+0x18b/0x460 [ 2534.483976] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2534.484692] ? bit_wait_timeout+0x170/0x170 [ 2534.485374] ? syscall_enter_from_user_mode+0x18/0x50 [ 2534.486225] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2534.487085] ? __traceiter_irq_enable+0xa0/0xa0 [ 2534.487840] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.488671] __x64_sys_sendmmsg+0x99/0x100 [ 2534.489354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.490183] do_syscall_64+0x3b/0x90 [ 2534.490786] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2534.491592] RIP: 0033:0x7f67303d7b19 [ 2534.492145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2534.494796] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2534.495903] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2534.496945] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2534.497979] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2534.499019] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2534.500114] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2534.501225] [ 2536.193997] Bluetooth: hci0: command 0x0401 tx timeout 20:39:42 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xb2e, 0xfff}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0x4, r0, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) r4 = syz_open_procfs(r1, &(0x7f00000003c0)='oom_score\x00') getsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000400), &(0x7f0000000440)=0x4) 20:39:42 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x3d00, 0x80080) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x81, @private0, 0x10001}, 0x1c) 20:39:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xd5310000, 0x0, 0x0}, 0x58) 20:39:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x4, 0x1f, 0x3, 0x4}, {0x3, 0x30, 0xbc, 0x80}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:39:42 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 40) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:39:42 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="c90ebef38e2dce8520c60107364d71434f766889a1b5045909a31a8b78d917aab7d97a8b8d40468e8d2f80f31f03f78792e0a04ebca1a75bc2afa4e6e92fb4d04d0a74cb071f299ca336543cac988b120a211351a18e2ba09294b0276e42abbb2c4d92aba3af902a13e17fa9c04c55ca747706007e15b0de9fc17ed5e0273f89e00cb68a40d7e70ad1853348197e2c5c3c7bff3a5e1f7464869aea3218cec6889c51825449b5e5ac33a152ff", 0xac}, {&(0x7f0000000200)="e70f939fad0828aeed3791bd7ebcca8b372e69f753a8572f2b646dbf962d951866782f8a9d3b0bbf2dfec71305451cc0f068e774491704b3114da3c7bc4b0484600336d547aa0bc9f94cd39a7f62a55c5e4e172889ee924c23685f1ccd78d48ea174ebe627590b9c4e493de8ac", 0x6d}, {&(0x7f0000000280)="c489bc8693af917f5f0732e4c89f711eed746ede586d40a716d0035626e76eaf8eb19134837bab1969588e03759b9e0a0d378c772ed205616e3ef0dcb4783a0b8199c67f991532ee255d419aaad5b425668c800d48a8588557b107d70b9de42e6170f80b31526e955bf99e9a0fb20d39dd71992803d15618912e3b107d27158b84dfeaa814f73cf36179da5dca3d07bd34d553f7909693b55c6c87f20ce1a9350c8421c19dfa27ca474b6944b18d70216e780ef8f85fcaa74b2c753ebddc3731bf8dfe7d2a2410219037dd2b35ea6d9ed4d3e5d9d936276f2e90f7a8761301c95336c42889973d54d63ab032995f97489269c72659c37f564965732bb4e7cc3456cb46782689829e9520bc28e99cccabe1db48f1445ed18e7840de479f36c2b931b3b246417bebbd1c93969cd2dd046f7927d60497e8adba56f14528eb82a34bd41bf67f065ca08b813440f81202ea7d5bf70250204e198cf7c977cc1383ed5edd3f070c9b89eee6128631fbf60f946bc0421146c7d2f9ca580b9d84843e67dd86e7e6643022fbf2bcc78378bc15b32796a6f23c4aa323dd85f62a01cb0de9c3ea8267fe9a3f26bec93eeb30b2583773aa838a213fb3aa056909ca3e25d9ccfa017b2f9938cf47d579d160bd573b09936d3b8c38dc4a9975a72a21104404b1f63a265639228f1bd4a3d0e3f6d23281e8d9e6d67231b2452a8c67f82fee63eacf76fc601bceb0f3aabab72509584aff32ac8556e3b33148b09d5c33c26d065cbd14c84f91084812e2dc1c079a93a3bb23bc6889f9f04d44e409f02e16ff783a63bd914f5ff32934d123b50d13a0c01144c0bf021dd911f9efd5bf1cecaa0621af07177e9500b2ce78932aae406c84a2dbd34b1d5f79dc3005b716dd58e365bf221d527694c172eb6322e60f131f22497415135f153735846930ada438f0f62134c15c258c517d91493ac790d5d780324f506a90b0a7f2c47d70d115f7cd968799e4a28ebc73ae4805fe08a3d9f13212a96b9ba3326b8ee8d804b5e1dde56dc68d7357e4a130183dfbef8187ec4d4bc1e6cb8d1de7cfb64478402ac2efd87b678d6dfaa7746c587c8d76f5aba9bc5e85584785f4597b99583ed730f5e2e6907bbfc0ab038108c452d8e87a8869addba43191f9a128c830b74073d3c47eae946c0e59819012902ea11b1fba22c77597c0cdcc85b7a92372807e3797e1c2fa6cf46710063828a65caf8e1092e7068977b2028a4f09c2f4d14047b871724d762e3dd48e85915fdb649a4d984db3b036e7d4394af4560d7c6f2d4255670ffb95c26d1d8f0b926571d7c0069d71a5b63bdb747c2cc3ad46da6a098912b294a358c4df0f8e57762b3995d9d704a2cc0c07620247dbf5e8568e6d78a0119c8c27185810999152ffd3556681a4a0882d9df398955d3466932e4453f5c3f1198353f9360fab68328cb826f6750db72c5b744710ef1211f81ce727165ee6964034d183885886d3761e2d28c26fd20f37ee4d1eef24e9fa4ce4dfcba139fa03098acc6d5ed1df58e733c3b8e3045b1157ca96b02f7d45f430f3c1c5d6582d8218e9102a5f6636c92ca1865a171c3a355ca0390df99fa0ec66e9ec5aef0d4cea4454550ce634c6cad9e1110b06b41c63c00b05f13151fa3c177f82ac2049a43dc763b228704a92ca99534a37b14150f7627ab0bba7072edd92296c766ac795c5ba5d50bc5c8a7c94aa59adf8a9e39cb3c0f20027fba0b25aacb7f008699b90eee1faaf71c685209a5289aac879d19a8720afac4a61cc26acf0673609d9cfb15144c11e9414cd56b95af2e5acd69c308a82ee5ad42b865f16f9e333aaeb74e5dfcd24290bcfa9d3b49fb49095701c5dee3a1a25039532c42276a889bb109b7387f114d3bae57c9840deee14f8089d287c8af5d8182f459c6d75ce037afc5c4585d346a31218bcea409ba4601a4163cf232ec2a56fb0b7adbcbd861c1fb255f36b2a3f86ca88b95f4cf0e8f2b0adc8f5c773ad0130b117c5c06c02a941c24728f0283eba995e3fab7bcd2a10b04e3b695e5f8ed849e83d1618814377bcb72f78e7d825741db00e173415bacfc926f8d827adc1e7c86e5e14cb9d6d4d7e39f09b0e260e692e65cf2e38ec0c9354a2b733dea19230974600cf14f160061af6bc2602971c456fb87f5c323f55d80ecadf6d22f7fbfcf90990f91a67a0cd4fb55fafe31e25471fb33b15b78d251cc984c37887abd92b8b0e1785c89df643fd0d112efa7b62327e142fc316224afef03cb53cfcb58f076b5042b1fed40d3368eecb8e41ffdeef0f27daaecff92df5f9ef0a1372e1488eb3012acde35c82cc777928fa1058ff452ec8378a23daeaaedf8e85652b59785d75ef72b3ac30cfb394e9a7cbff523f1a5f01906fadf32fbb8d461e587fbabeeee916a334db6f8fefe6097cbd814770b938af1f0643b9079d8ed9f265d58812326ebc50fb7e1d0115bfd672e31c7c02cecdfc3529eeadae78543356545b1a2bff9b805f0b46b76fb9b39e46f4fb4254baa0e1d8ca69683b97b85b46b3897c47d7ec76e65cee5baccc43d65fa5278048b859838524a47314997632521370d51e4d42bf6696c16e7d2d866415b15a825b4bf2102eb1d75248bfbdcfa8994fa928ac944b3bdcb47d5854d7bfee0780bdd3231b39a6fc0bf0bab909051f5510305ab21b9587f1a7b22dd8e16dd4e9e0970a535d5cd5de6d97ec183d93d717342a7e03db618c5901cc64a6bf7b020c573f2d3242f287b3929a44c8bb31112456f42a584aa49efde57cf7aab7ea8ca32cc55ed106a601e4d080d0a9314ad89fec44ede06aef5ddbc3c9d62750e4cd5d8f150fddbb271b9ceb6610b2c287cc3956ca7d327fe4c2f595f157f03b9c5b467c99d4c55ddb2bdbd971c72007ee07a4548a1b9da2ddf8f14cacdff74ee8d42e8caff16487fb8e1a72a92b75f23cae8752e9671027b89751c112c093d267ce60397e3f4cb312ee9e83ce01d2d03d98f353ecb2f291f2df42a2375962b579f6aa306bef976514a76d1b0956671eb72c11fe7cbacc2dac32c163abbd096e68b402733678796656aa3e7ecccff75da5e65c95bac3956274e29e7c64daea254ec2d192965dfc180a25a37b4cca54e375b7ffc1e646998384a48588a0ceacb786bf532434e43a7f24526ef71372f199c2fdff84745311d33074e440524d47235a44e8f8eb8a1ba8a17a80b6ae78b5b6d54af8b7077285cc2edbc8cdbb19a49b6a53cb8b96e5dd3410546fe9c5ace53759f5db013b88bedb010f074b6861ae2983ac89ecc544534dc2e33caa53496ed0404daab79fe25f20d8f60c3874bfea4c641fcb0454b7340c5ce186ff708a15c628bc2a7b647edacd131e3556f287b57016319335a7a653d46abd48aaddcf11befc2c7f277743db0d4c7196c8c7d5993e7e5c549246341350b3d0d7347744343cc17b25d89284bb38cced6cadfcfa555c725640dff005b5a59025baf1c42398bacee8117aba43f24753e6d921d4a0a114d17c38bc950a62d22a80af764259d7b2d6dcd0847ee7ffcf0716fa2125ec535f6eacde968ec8b16ea80fe27c2d6b8adbfa71781376ef657d35fa7c4d1a553830b8e1a137e43ab57754e16d631184d5d5ad8fa9c0b6ee2f82d30d39ebe06f64cfc4fd21a05f0c8e64dde5df871b1192f9022398cdd9a5ae43aa9da706817b99529d9eddbfc67c9e863c75e27349268172189e769681873619cf5176775661c6b1226f38c45029dcb6f8eef7a61d128fa378bb861d50454930cd5b09f48ad51efa922ab92f18dccbd69b67e33ff33dc8d5ec05ae3df9575bcce70492e9f50a179c0b22b5a417de37cd276a703aafceca92f465a92d91e296a884d3c8f24a27d811b079187c6952a806efc002e2783bbf5841e37bb47761370e05ebe45b344bc84067d85006fcf74d557a4594c6f01c49f845cb419859242b2550468c46571891d99dcb040f70730770a2d975c9176f38ade8b7a3877e7ebe391cda690d31be3b5c9500b3dea4f06e54d542054d5ed10927cdc38296f471e0bfd8c12632d46235ed3deb1b8457f54e4fbe2b53567f37316f9c9555e5324b49cc6105429e8dedc1ecc5e32a0c7b5ebc476e3e3b3b243c981fa6fd71744c0e05dec5ff3a5f08cc3c125001a74b61a3920b1409065d3ef8a55e473de2581178fca4cda8a057fedd892df5b80903f42e63b7ad6e0303740ad14058359d1a22f2ac4aec5cc062c2643ee1c4889b51d3e5b60165cd7ea6c15ce5d43e30a090c04560f5778588cab8117a3db59575c2e88ab1eadedc1f5ca0688889bc8cb0e28ab82f1a42e6f291c04578bb4f85aa329d0fc9bb4b0a375069efd35fc1ae46bf5262ba5a567bfa496ab9830a2a20743991e051e8bacb50ab6709701138658531c6a3c0756acf632a39b13077d3ab5a115fa5df88cfba3e549d5f3e2f5eb6fe9173bd7284493a786eabb768ea513ecd3a1fe7c39eadcf68542262c36e7b6fa3e0fbabe18f55a82a1bab880b5c1dc89ed181db72e3c3a58756719bc53f35e8cf81f10fe73da8bc1087d8d84b43fd24fda8d5affe391ab01ce97e8050a2cb6b4e8b8a2b47330923e65a643abcf3af91faed44ffa8a439e302de755108b69c4ba6eb961d16845d6fc2087bdf5677fff75fb86c8b1cfb5c5bc57c0880e7674363d36e19435699ef71c61466b70493ab7130c8c1c2865684b221a15f8ad86d21f9b33c1434b84e8e13fd8278410084d8da2bb011fb69aa1a595e72852912c4eda5d4eb9ac9ee56d39f2684f73049d7e9886c822813f83abaff96534782aa75431544b4358acb30cf5b01956d2e38dbfa62c56f047a2d145dbe0490dde36550a1f4c54bb9dd21df7816dd99135dbf586f2f4d47d16900b6d25af588ecb4afd8209f5e9242619b4ba5ead75cb9a688032a506d2776405fa569fc128fbf0947e8d853", 0xda7}], 0x3, 0x0) fcntl$setpipe(r0, 0x407, 0x10001) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file1\x00'}) sendmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)="d2f6b29bc951ea86cf3ccf8a3c640d7f51748d7eb1c56e912efad62926757c003b1453c5abebd66edba6f4558b3df61d390852e5c7fcf1bdd32e62e8a9748705dadb1dc14e510ed6a7cbcb8196e43a25f75122c733f5ad280a9252c67716c0a05f5e7a9021f83ab03f9e0b9a0b746aed96d6dbec19dec943908592b29082112e5820a435ae1ebed2d0da79a009079209740087f8781d9d62924be9e9368443f12fa53fc2d27e6f677199ca03bad00b093149ff46139539e1cbd962383ecc7062513e60641f333c8f9fad4aaf7db646f1e6930dee8498e87e5a56d90713a4397e36b4280375d8b8a840f8", 0xea}, {&(0x7f0000000000)="b7301261c746264223945e892bdec5b98184dc5ddb7710ecc447f42d0bde843bb76e7dbe00539ab66707d3d48040ef8531b6148d980a2e48e876c2", 0x3b}, {&(0x7f00000002c0)="0f2dfabca3be139cdf17f32bf38cfc835c3c7c0c8de332559b19d6bdcd6b23b62b6c5eae6f494f0d1af8a68e09c7f34bd8509e3ebfb11bfcca82dceeea542a0032b50e77f0dfa7d9607fc7cf401b4927636184a243190483707dfff85011db39b1e23a2c75c4bec99fcf302f59894a7f6e3873aa23a6d90a5c1763e1436df58c82b7f9d81516182d925a76031f1af2932aca2451dd5179b3354f08d4f7a6873a2c8ca6959f3c7d94d7b055d6c42306baa34ef690764644b74659f043c7e27a21b3891a3165879040d105b97c16bcebd79268fbfd1b4038cb1358300840caaedc400e759d920a", 0xe6}], 0x3, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1, r3}}}], 0x20, 0x40}}], 0x1, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@clone_children}, {@cpuset_v2_mode}]}) 20:39:42 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 61) 20:39:42 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 58) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) [ 2551.876624] FAULT_INJECTION: forcing a failure. [ 2551.876624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2551.877630] CPU: 0 PID: 22719 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2551.878234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2551.879098] Call Trace: [ 2551.879302] [ 2551.879479] dump_stack_lvl+0x8b/0xb3 [ 2551.879791] should_fail.cold+0x5/0xa [ 2551.880098] _copy_from_user+0x2a/0x170 [ 2551.880416] copy_msghdr_from_user+0x89/0x150 [ 2551.880782] ? __copy_msghdr+0x4b0/0x4b0 [ 2551.881101] ? __lock_acquire+0x164d/0x5e70 [ 2551.881458] ___sys_sendmsg+0xdd/0x1b0 [ 2551.881769] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2551.882133] ? lock_is_held_type+0xd7/0x130 [ 2551.882503] ? lock_is_held_type+0xd7/0x130 [ 2551.882841] ? find_held_lock+0x2c/0x110 [ 2551.883155] ? lock_release+0x3b2/0x750 [ 2551.883466] ? __might_fault+0xd1/0x170 [ 2551.883778] ? lock_downgrade+0x6d0/0x6d0 [ 2551.884107] ? lock_is_held_type+0xd7/0x130 [ 2551.884446] __sys_sendmmsg+0x18b/0x460 [ 2551.884759] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2551.885107] ? bit_wait_timeout+0x170/0x170 [ 2551.885442] ? syscall_enter_from_user_mode+0x18/0x50 [ 2551.885843] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2551.886260] ? __traceiter_irq_enable+0xa0/0xa0 [ 2551.886633] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2551.887044] __x64_sys_sendmmsg+0x99/0x100 [ 2551.887374] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2551.887782] do_syscall_64+0x3b/0x90 [ 2551.888078] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2551.888481] RIP: 0033:0x7fb1f7990b19 [ 2551.888770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2551.890131] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2551.890721] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2551.891261] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2551.891799] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2551.892335] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2551.892875] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2551.893441] 20:39:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4068}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x2cfa04e, @remote, 0x4}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) [ 2551.973608] FAULT_INJECTION: forcing a failure. [ 2551.973608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2551.974670] CPU: 0 PID: 22731 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2551.975282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2551.976129] Call Trace: [ 2551.976333] [ 2551.976509] dump_stack_lvl+0x8b/0xb3 [ 2551.976820] should_fail.cold+0x5/0xa [ 2551.977128] _copy_from_user+0x2a/0x170 [ 2551.977443] copy_msghdr_from_user+0x89/0x150 [ 2551.977801] ? __copy_msghdr+0x4b0/0x4b0 [ 2551.977924] FAULT_INJECTION: forcing a failure. [ 2551.977924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2551.978128] ? __lock_acquire+0x164d/0x5e70 [ 2551.980297] ___sys_sendmsg+0xdd/0x1b0 [ 2551.980625] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2551.980991] ? lock_is_held_type+0xd7/0x130 [ 2551.981353] ? lock_is_held_type+0xd7/0x130 [ 2551.981695] ? find_held_lock+0x2c/0x110 [ 2551.982024] ? lock_release+0x3b2/0x750 [ 2551.982343] ? __might_fault+0xd1/0x170 [ 2551.982693] ? lock_downgrade+0x6d0/0x6d0 [ 2551.983030] ? lock_is_held_type+0xd7/0x130 [ 2551.983381] __sys_sendmmsg+0x18b/0x460 [ 2551.983702] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2551.984064] ? bit_wait_timeout+0x170/0x170 [ 2551.984409] ? syscall_enter_from_user_mode+0x18/0x50 [ 2551.984820] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2551.985243] ? __traceiter_irq_enable+0xa0/0xa0 [ 2551.985609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2551.986020] __x64_sys_sendmmsg+0x99/0x100 [ 2551.986364] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2551.986768] do_syscall_64+0x3b/0x90 [ 2551.987063] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2551.987468] RIP: 0033:0x7f1f0562eb19 [ 2551.987758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2551.989111] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2551.989685] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2551.990224] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2551.990773] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2551.991316] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2551.991855] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2551.992403] [ 2551.992588] CPU: 1 PID: 22736 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2551.993858] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2551.995625] Call Trace: [ 2551.996053] [ 2551.996423] dump_stack_lvl+0x8b/0xb3 [ 2551.997060] should_fail.cold+0x5/0xa [ 2551.997692] _copy_from_user+0x2a/0x170 [ 2551.998343] copy_msghdr_from_user+0x89/0x150 [ 2551.999113] ? __copy_msghdr+0x4b0/0x4b0 [ 2551.999789] ? __lock_acquire+0x164d/0x5e70 [ 2552.000510] ___sys_sendmsg+0xdd/0x1b0 [ 2552.001161] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2552.001933] ? lock_is_held_type+0xd7/0x130 [ 2552.002668] ? find_held_lock+0x2c/0x110 [ 2552.003336] ? lock_release+0x3b2/0x750 [ 2552.003993] ? __might_fault+0xd1/0x170 [ 2552.004646] ? lock_downgrade+0x6d0/0x6d0 [ 2552.005327] ? lock_is_held_type+0xd7/0x130 [ 2552.006045] __sys_sendmmsg+0x18b/0x460 [ 2552.006721] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2552.007454] ? bit_wait_timeout+0x170/0x170 [ 2552.008161] ? syscall_enter_from_user_mode+0x18/0x50 [ 2552.008993] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2552.009880] ? __traceiter_irq_enable+0xa0/0xa0 [ 2552.010670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.011512] __x64_sys_sendmmsg+0x99/0x100 [ 2552.012211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.013045] do_syscall_64+0x3b/0x90 [ 2552.013657] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2552.014497] RIP: 0033:0x7f67303d7b19 [ 2552.015095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2552.017907] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2552.019110] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2552.020235] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 20:39:43 executing program 7: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x31c0, &(0x7f00000001c0)={0x0, 0x2f69, 0x20, 0x1, 0x3bc}, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000500)) fchdir(r0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e23, 0x1, @loopback, 0xfffffff7}, {0xa, 0x4e20, 0x8, @local, 0x9}, 0x8000, [0x5, 0xad7, 0x3f, 0x397e, 0xdc, 0x7ff, 0x2, 0xffffffff]}, 0x5c) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) r5 = accept$unix(r2, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000300)) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$inet6_udp(0xa, 0x2, 0x0) [ 2552.021341] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2552.022639] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2552.023752] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2552.024920] 20:39:43 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 41) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 2552.092357] FAULT_INJECTION: forcing a failure. [ 2552.092357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2552.093403] CPU: 0 PID: 22803 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2552.094007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2552.094875] Call Trace: [ 2552.095075] [ 2552.095254] dump_stack_lvl+0x8b/0xb3 [ 2552.095566] should_fail.cold+0x5/0xa [ 2552.095869] _copy_from_user+0x2a/0x170 [ 2552.096182] copy_msghdr_from_user+0x89/0x150 [ 2552.096541] ? __copy_msghdr+0x4b0/0x4b0 [ 2552.096865] ? __lock_acquire+0x164d/0x5e70 [ 2552.097216] ___sys_sendmsg+0xdd/0x1b0 [ 2552.097532] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2552.097896] ? lock_is_held_type+0xd7/0x130 [ 2552.098253] ? lock_is_held_type+0xd7/0x130 [ 2552.098616] ? find_held_lock+0x2c/0x110 [ 2552.098942] ? lock_release+0x3b2/0x750 [ 2552.099266] ? __might_fault+0xd1/0x170 [ 2552.099585] ? lock_downgrade+0x6d0/0x6d0 [ 2552.099926] ? lock_is_held_type+0xd7/0x130 [ 2552.100275] __sys_sendmmsg+0x18b/0x460 [ 2552.100601] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2552.100958] ? bit_wait_timeout+0x170/0x170 [ 2552.101305] ? syscall_enter_from_user_mode+0x18/0x50 [ 2552.101710] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2552.102132] ? __traceiter_irq_enable+0xa0/0xa0 [ 2552.102513] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.102918] __x64_sys_sendmmsg+0x99/0x100 [ 2552.103256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.103658] do_syscall_64+0x3b/0x90 [ 2552.103956] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2552.104354] RIP: 0033:0x7fb1f7990b19 [ 2552.104648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2552.106010] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2552.106611] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2552.107163] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2552.107706] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2552.108260] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2552.108807] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2552.109365] 20:39:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xe4ffffff, 0x0, 0x0}, 0x58) 20:39:43 executing program 6: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000840)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000006c0)="cde504c9f3e3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000100)={{0x10001, 0x7}, 0x100, './file0\x00'}) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) 20:39:43 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 42) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:39:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xfd030000, 0x0, 0x0}, 0x58) 20:39:43 executing program 1: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x2ee7) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') r2 = creat(&(0x7f0000000140)='./file1\x00', 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000180)={0x80000000, 0x8}) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = clone3(&(0x7f0000000300)={0x100000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x39}, &(0x7f00000001c0)=""/178, 0xb2, &(0x7f0000000280)=""/28, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) tkill(r6, 0x17) clone3(&(0x7f0000000600)={0x43802000, &(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400), {0x19}, &(0x7f0000000440)=""/87, 0x57, &(0x7f00000004c0)=""/253, &(0x7f00000005c0)=[r5, r6], 0x2}, 0x58) waitid(0x0, r7, &(0x7f0000000680), 0x1, &(0x7f0000000700)) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x8}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r4, &(0x7f0000000080)="01", 0x41030) 20:39:43 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 59) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x88, 0x68, 0x0, &(0x7f00000002c0)=0xb04a03851b890010) 20:39:43 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000600), 0x7}, 0x9000, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2, 0x9, 0x4, 0x80, 0x0, 0x8001, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xfff}, 0x4201c, 0x0, 0x40, 0x5, 0x40, 0xff, 0x1, 0x0, 0x7ff, 0x0, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 62) [ 2552.290883] FAULT_INJECTION: forcing a failure. [ 2552.290883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2552.292015] CPU: 0 PID: 22854 Comm: syz-executor.5 Not tainted 5.19.0-next-20220811 #1 [ 2552.292621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2552.293466] Call Trace: [ 2552.293671] [ 2552.293857] dump_stack_lvl+0x8b/0xb3 [ 2552.294166] should_fail.cold+0x5/0xa [ 2552.294483] _copy_from_user+0x2a/0x170 [ 2552.294806] copy_msghdr_from_user+0x89/0x150 [ 2552.295169] ? __copy_msghdr+0x4b0/0x4b0 [ 2552.295492] ? lock_is_held_type+0xd7/0x130 [ 2552.295839] ? find_held_lock+0x2c/0x110 [ 2552.296157] ? lock_release+0x3b2/0x750 [ 2552.296467] ? finish_task_switch.isra.0+0x228/0x8a0 [ 2552.296858] ___sys_sendmsg+0xdd/0x1b0 [ 2552.297169] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2552.297527] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 2552.297922] ? lockdep_hardirqs_on+0x79/0x100 [ 2552.298273] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 2552.298673] ? __switch_to+0x5bf/0xf20 [ 2552.298993] ? __schedule+0x895/0x2490 [ 2552.299307] ? io_schedule_timeout+0x150/0x150 [ 2552.299663] ? lock_is_held_type+0xd7/0x130 [ 2552.300002] ? __cond_resched+0x17/0x30 [ 2552.300313] __sys_sendmmsg+0x18b/0x460 [ 2552.300642] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2552.300989] ? bit_wait_timeout+0x170/0x170 [ 2552.301332] ? syscall_enter_from_user_mode+0x18/0x50 [ 2552.301740] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2552.302179] ? __traceiter_irq_enable+0xa0/0xa0 [ 2552.302569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.302975] __x64_sys_sendmmsg+0x99/0x100 [ 2552.303305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.303707] do_syscall_64+0x3b/0x90 [ 2552.304008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2552.304416] RIP: 0033:0x7fb1f7990b19 [ 2552.304704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2552.306076] RSP: 002b:00007fb1f4f06188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2552.306660] RAX: ffffffffffffffda RBX: 00007fb1f7aa3f60 RCX: 00007fb1f7990b19 [ 2552.307189] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000006 [ 2552.307732] RBP: 00007fb1f4f061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2552.308270] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2552.308811] R13: 00007ffe59f8f25f R14: 00007fb1f4f06300 R15: 0000000000022000 [ 2552.309373] [ 2552.362001] FAULT_INJECTION: forcing a failure. [ 2552.362001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2552.363152] CPU: 0 PID: 22862 Comm: syz-executor.2 Not tainted 5.19.0-next-20220811 #1 [ 2552.363797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2552.364633] Call Trace: [ 2552.364843] [ 2552.365034] dump_stack_lvl+0x8b/0xb3 [ 2552.365344] should_fail.cold+0x5/0xa [ 2552.365645] _copy_from_user+0x2a/0x170 [ 2552.365974] copy_msghdr_from_user+0x89/0x150 [ 2552.366330] ? __copy_msghdr+0x4b0/0x4b0 [ 2552.366665] ? __lock_acquire+0x164d/0x5e70 [ 2552.367017] ___sys_sendmsg+0xdd/0x1b0 [ 2552.367333] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2552.367701] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2552.368152] ? lock_is_held_type+0xd7/0x130 [ 2552.368490] ? find_held_lock+0x2c/0x110 [ 2552.368811] ? lock_release+0x3b2/0x750 [ 2552.369118] ? __might_fault+0xd1/0x170 [ 2552.369443] ? lock_downgrade+0x6d0/0x6d0 [ 2552.369773] ? lock_is_held_type+0xd7/0x130 [ 2552.370140] __sys_sendmmsg+0x18b/0x460 [ 2552.370478] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2552.370834] ? bit_wait_timeout+0x170/0x170 [ 2552.371188] ? syscall_enter_from_user_mode+0x18/0x50 [ 2552.371597] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2552.372011] ? __traceiter_irq_enable+0xa0/0xa0 [ 2552.372380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.372792] __x64_sys_sendmmsg+0x99/0x100 [ 2552.373133] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.373538] do_syscall_64+0x3b/0x90 [ 2552.373842] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2552.374249] RIP: 0033:0x7f67303d7b19 [ 2552.374559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2552.375911] RSP: 002b:00007f672d94d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2552.376494] RAX: ffffffffffffffda RBX: 00007f67304eaf60 RCX: 00007f67303d7b19 [ 2552.377028] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2552.377576] RBP: 00007f672d94d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2552.378132] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2552.378700] R13: 00007ffd3ba2682f R14: 00007f672d94d300 R15: 0000000000022000 [ 2552.379261] 20:39:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000640)={0x127363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xff600000, 0x0, 0x0}, 0x58) [ 2552.390028] [ 2552.390401] ====================================================== [ 2552.391378] WARNING: possible circular locking dependency detected [ 2552.392348] 5.19.0-next-20220811 #1 Not tainted [ 2552.393074] ------------------------------------------------------ [ 2552.394005] syz-executor.1/22861 is trying to acquire lock: [ 2552.394881] ffff88800fe58170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x15e/0x310 [ 2552.396386] [ 2552.396386] but task is already holding lock: [ 2552.397296] ffff88800fe86bd0 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x177/0x530 [ 2552.398942] [ 2552.398942] which lock already depends on the new lock. [ 2552.398942] [ 2552.400191] [ 2552.400191] the existing dependency chain (in reverse order) is: [ 2552.401364] [ 2552.401364] -> #3 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 2552.402520] ext4_writepages+0x1d2/0x3690 [ 2552.403548] do_writepages+0x1b0/0x6a0 [ 2552.404494] filemap_fdatawrite_wbc+0x147/0x1b0 [ 2552.405308] __filemap_fdatawrite_range+0xb6/0x100 [ 2552.406153] filemap_write_and_wait_range+0x89/0x110 [ 2552.407032] __iomap_dio_rw+0x5ed/0x1bd0 [ 2552.407739] iomap_dio_rw+0x3c/0xa0 [ 2552.408388] ext4_file_write_iter+0xa96/0x1820 [ 2552.409194] do_iter_readv_writev+0x211/0x3c0 [ 2552.409981] do_iter_write+0x18b/0x700 [ 2552.410677] vfs_iter_write+0x70/0xa0 [ 2552.411354] iter_file_splice_write+0x73a/0xca0 [ 2552.412149] direct_splice_actor+0x10f/0x170 [ 2552.412914] splice_direct_to_actor+0x336/0x8c0 [ 2552.413707] do_splice_direct+0x1b8/0x290 [ 2552.414455] do_sendfile+0xb1d/0x1280 [ 2552.415131] __x64_sys_sendfile64+0x1d1/0x210 [ 2552.415908] do_syscall_64+0x3b/0x90 [ 2552.416576] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2552.417471] [ 2552.417471] -> #2 (&sb->s_type->i_mutex_key#6){++++}-{3:3}: [ 2552.418622] down_read+0x98/0x450 [ 2552.419277] ext4_bmap+0x4e/0x470 [ 2552.419917] bmap+0xac/0x120 [ 2552.420508] jbd2_journal_bmap+0xa8/0x180 [ 2552.421254] jbd2_journal_flush+0x853/0xc00 [ 2552.422029] __ext4_ioctl+0x9e9/0x4090 [ 2552.422765] __x64_sys_ioctl+0x19a/0x210 [ 2552.423500] do_syscall_64+0x3b/0x90 [ 2552.424188] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2552.425090] [ 2552.425090] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 2552.426237] mutex_lock_io_nested+0x148/0x1310 [ 2552.427059] jbd2_journal_flush+0x19a/0xc00 [ 2552.427829] __ext4_ioctl+0x9e9/0x4090 [ 2552.428552] __x64_sys_ioctl+0x19a/0x210 [ 2552.429273] do_syscall_64+0x3b/0x90 [ 2552.429956] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2552.430888] [ 2552.430888] -> #0 (&journal->j_barrier){+.+.}-{3:3}: [ 2552.431934] __lock_acquire+0x2a02/0x5e70 [ 2552.432693] lock_acquire+0x1a2/0x530 [ 2552.433400] __mutex_lock+0x136/0x14d0 [ 2552.434103] jbd2_journal_lock_updates+0x15e/0x310 [ 2552.434968] ext4_change_inode_journal_flag+0x17f/0x530 [ 2552.435880] ext4_fileattr_set+0x140d/0x18a0 [ 2552.436653] vfs_fileattr_set+0x77c/0xb80 [ 2552.437375] do_vfs_ioctl+0xfc2/0x1610 [ 2552.438059] __x64_sys_ioctl+0x10c/0x210 [ 2552.438778] do_syscall_64+0x3b/0x90 [ 2552.439441] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2552.440318] [ 2552.440318] other info that might help us debug this: [ 2552.440318] [ 2552.441497] Chain exists of: [ 2552.441497] &journal->j_barrier --> &sb->s_type->i_mutex_key#6 --> &sbi->s_writepages_rwsem [ 2552.441497] [ 2552.443401] Possible unsafe locking scenario: [ 2552.443401] [ 2552.444266] CPU0 CPU1 [ 2552.444953] ---- ---- [ 2552.445639] lock(&sbi->s_writepages_rwsem); [ 2552.446326] lock(&sb->s_type->i_mutex_key#6); [ 2552.447415] lock(&sbi->s_writepages_rwsem); [ 2552.448485] lock(&journal->j_barrier); [ 2552.449123] [ 2552.449123] *** DEADLOCK *** [ 2552.449123] [ 2552.450025] 4 locks held by syz-executor.1/22861: [ 2552.450782] #0: ffff88800fe84438 (sb_writers#3){.+.+}-{0:0}, at: do_vfs_ioctl+0xf87/0x1610 [ 2552.452110] #1: ffff88801d6f17e0 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: vfs_fileattr_set+0x148/0xb80 [ 2552.453634] #2: ffff88801d6f1980 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x11e/0x530 [ 2552.455300] #3: ffff88800fe86bd0 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x177/0x530 [ 2552.456951] [ 2552.456951] stack backtrace: [ 2552.457622] CPU: 1 PID: 22861 Comm: syz-executor.1 Not tainted 5.19.0-next-20220811 #1 [ 2552.458839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2552.460573] Call Trace: [ 2552.460987] [ 2552.461346] dump_stack_lvl+0x8b/0xb3 [ 2552.461948] check_noncircular+0x263/0x2e0 [ 2552.462599] ? print_circular_bug+0x450/0x450 [ 2552.463287] ? mark_lock.part.0+0xef/0x2f70 [ 2552.463940] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 2552.464616] __lock_acquire+0x2a02/0x5e70 [ 2552.465252] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2552.466046] lock_acquire+0x1a2/0x530 [ 2552.466617] ? jbd2_journal_lock_updates+0x15e/0x310 [ 2552.467374] ? lock_release+0x750/0x750 [ 2552.467973] ? find_held_lock+0x2c/0x110 [ 2552.468579] ? lock_is_held_type+0xd7/0x130 [ 2552.469238] __mutex_lock+0x136/0x14d0 [ 2552.469823] ? jbd2_journal_lock_updates+0x15e/0x310 [ 2552.470591] ? lock_is_held_type+0xd7/0x130 [ 2552.471229] ? jbd2_journal_lock_updates+0x15e/0x310 [ 2552.471988] ? mutex_lock_io_nested+0x1310/0x1310 [ 2552.472704] ? lock_release+0x3b2/0x750 [ 2552.473305] ? jbd2_journal_lock_updates+0x150/0x310 [ 2552.474062] ? lock_downgrade+0x6d0/0x6d0 [ 2552.474697] ? do_raw_read_unlock+0x70/0x70 [ 2552.475348] ? rcu_sync_enter_start+0x70/0x70 [ 2552.476041] jbd2_journal_lock_updates+0x15e/0x310 [ 2552.476785] ? jbd2_journal_wait_updates+0x240/0x240 [ 2552.477545] ? lock_is_held_type+0xd7/0x130 [ 2552.478201] ext4_change_inode_journal_flag+0x17f/0x530 [ 2552.479017] ext4_fileattr_set+0x140d/0x18a0 [ 2552.479697] ? ext4_fileattr_get+0x280/0x280 [ 2552.480372] ? down_write+0xde/0x150 [ 2552.480928] ? memset+0x20/0x50 [ 2552.481426] ? fileattr_fill_flags+0x27b/0x320 [ 2552.482083] vfs_fileattr_set+0x77c/0xb80 [ 2552.482691] ? ioctl_file_clone+0x100/0x100 [ 2552.483304] ? memset+0x20/0x50 [ 2552.483804] do_vfs_ioctl+0xfc2/0x1610 [ 2552.484359] ? vfs_fileattr_set+0xb80/0xb80 [ 2552.484975] ? inode_has_perm+0x171/0x1d0 [ 2552.485584] ? inode_has_perm+0x1d0/0x1d0 [ 2552.486183] ? perf_trace_preemptirq_template+0x274/0x420 [ 2552.486991] ? selinux_file_ioctl+0xb1/0x260 [ 2552.487673] __x64_sys_ioctl+0x10c/0x210 [ 2552.488304] do_syscall_64+0x3b/0x90 [ 2552.488910] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2552.489704] RIP: 0033:0x7f22d2cb2b19 [ 2552.490280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2552.492971] RSP: 002b:00007f22d0228188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2552.494106] RAX: ffffffffffffffda RBX: 00007f22d2dc5f60 RCX: 00007f22d2cb2b19 [ 2552.495175] RDX: 0000000020000080 RSI: 0000000040086602 RDI: 0000000000000006 [ 2552.496255] RBP: 00007f22d2d0cf6d R08: 0000000000000000 R09: 0000000000000000 [ 2552.497326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2552.498408] R13: 00007fff4ad92c2f R14: 00007f22d0228300 R15: 0000000000022000 [ 2552.499483] [ 2552.524235] FAULT_INJECTION: forcing a failure. [ 2552.524235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2552.525269] CPU: 0 PID: 22865 Comm: syz-executor.3 Not tainted 5.19.0-next-20220811 #1 [ 2552.525875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2552.526757] Call Trace: [ 2552.526953] [ 2552.527128] dump_stack_lvl+0x8b/0xb3 [ 2552.527429] should_fail.cold+0x5/0xa [ 2552.527730] _copy_from_user+0x2a/0x170 [ 2552.528054] copy_msghdr_from_user+0x89/0x150 [ 2552.528420] ? __copy_msghdr+0x4b0/0x4b0 [ 2552.528747] ? __pmd_alloc+0x680/0x680 [ 2552.529064] ? rcu_read_lock_sched_held+0xd/0x80 [ 2552.529442] ? kfree+0x203/0x5e0 [ 2552.529718] ___sys_sendmsg+0xdd/0x1b0 [ 2552.530032] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2552.530409] ? __traceiter_irq_enable+0xa0/0xa0 [ 2552.530775] ? rcu_read_lock_sched_held+0xd/0x80 [ 2552.531155] ? rcu_read_lock_sched_held+0xd/0x80 [ 2552.531536] ? trace_rcu_dyntick+0x1a7/0x250 [ 2552.531890] ? ct_nmi_exit+0x119/0x1c0 [ 2552.532199] ? rcu_read_lock_sched_held+0xd/0x80 [ 2552.532586] ? lock_acquire+0x45e/0x530 [ 2552.532899] ? rcu_read_lock_sched_held+0xd/0x80 [ 2552.533270] ? lock_release+0x547/0x750 [ 2552.533576] ? __might_fault+0xd1/0x170 [ 2552.533888] ? lock_downgrade+0x6d0/0x6d0 [ 2552.534214] ? asm_exc_page_fault+0x22/0x30 [ 2552.534569] __sys_sendmmsg+0x18b/0x460 [ 2552.534887] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2552.535241] ? preempt_count_add+0x78/0x150 [ 2552.535583] ? bit_wait_timeout+0x170/0x170 [ 2552.535933] ? syscall_enter_from_user_mode+0x18/0x50 [ 2552.536347] ? perf_trace_preemptirq_template+0xa2/0x420 [ 2552.536764] ? __traceiter_irq_enable+0xa0/0xa0 [ 2552.537128] ? rcu_read_lock_sched_held+0xd/0x80 [ 2552.537500] ? rcu_read_lock_sched_held+0xd/0x80 [ 2552.537864] ? trace_rcu_dyntick+0x1a7/0x250 [ 2552.538217] __x64_sys_sendmmsg+0x99/0x100 [ 2552.538565] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.538962] do_syscall_64+0x3b/0x90 [ 2552.539250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2552.539650] RIP: 0033:0x7f1f0562eb19 [ 2552.539942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2552.541295] RSP: 002b:00007f1f02ba4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2552.541872] RAX: ffffffffffffffda RBX: 00007f1f05741f60 RCX: 00007f1f0562eb19 [ 2552.542408] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000005 [ 2552.542964] RBP: 00007f1f02ba41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2552.543507] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 2552.544040] R13: 00007fffc5d756ef R14: 00007f1f02ba4300 R15: 0000000000022000 [ 2552.544598] VM DIAGNOSIS: 20:39:43 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff813676a0 RCX=0000000000000000 RDX=ffff88804852b600 RSI=ffffffff813676e8 RDI=0000000000000001 RBP=ffff888017f8fd98 RSP=ffff88806ce09e28 R8 =0000000000000000 R9 =ffff88800bb8d9c3 R10=ffffed1001771b38 R11=0000000000000001 R12=ffff88806ce2a640 R13=ffff88806ce2a6c0 R14=dffffc0000000000 R15=ffff88804852b600 RIP=ffffffff8136a4ee RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc17a83e8c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc179f02344 CR3=000000002039e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffff0000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 00000000000000ff 0000000000ff0000 YMM03=0000000000000000 0000000000000000 000000000f000000 00000037706f6f6c YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000006561 6124242f6867632f YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 732f636f72702f00 6b63616d7300632e YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82408651 RDI=ffffffff8762a600 RBP=ffffffff8762a5c0 RSP=ffff88804a927028 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000073 R11=0000000000000001 R12=0000000000000073 R13=ffffffff8762a5c0 R14=0000000000000010 R15=ffffffff82408640 RIP=ffffffff824086a9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f22d0228700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002000a038 CR3=000000004b82e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000