, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'}) 08:53:05 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:53:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) fcntl$setlease(r0, 0x400, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) write$selinux_attr(r2, &(0x7f0000000000)='system_u:object_r:semanage_exec_t:s0\x00', 0x25) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x3, 0x40}) 08:53:05 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:53:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001100)={0x4, 0xc307, 0x474, 0x400, 0x5}) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000100)={{r5}, "13fe73cff28e06a1b67f7ade851328e63eec29f44d0ad45ae3806420ec58035948271d381db113d61e1866c76e2ada4af62ef0e45c7367229a8a3deca60dd7dead8408bddb015e7ac8ac1e4b197e2f3a5abc37d7d6341e1c760045211d2bdd8065fd001bf34e37f352c181b491d0563541758712598870041d24aa9b41432fb458bae7bf570f49cac8098def870482f1618e08f6061a765b47fe788223c4e1bd115c610c73b1a47ebd785ac4db6ee53fe384d1224547497a1bef96a676ba58535fbfe6b5783863e97d7e0db06fad593a281fe8562b735f047f4b820053bbdf877dc7e65e149989647bae96f63ab0cd1a575612151a540f6745c37be9e835b1b327741feec88b1d55258b5d3e0e22d0ae1d798e1fc108b630e27df58cec89e94a11886a3aa9b18cb51aa405310e6e7af0c9117c4ef6446675cb2ed98df86ba1f905ec18cc37e7edb0b2d40d3dee72d32f394531b0365a1e3591224023e6ceb97753494b6ef0aa7263ade0a870e4c909bea48ac0a3fdb72c1445abd3db105f8210c6b78c7daaa67370c9df2798ac07927aa0e81f7249272c9e10c18c085f2915c662a1f698bb3a51353567388d4519cab5e87c440b49d8dfcc643d8df3b2397cdaee2de80b1dc38edace99dcf8408c06581d6dbc86efe1c28e5922b0c7bdd8c53802bf01829111395f2ce561c46007d960230ae42c788cde316448b38f12fd53c1808d04d34457b949822929cb1cb3584a1f901d3b2323a26ca1b82213b4ec697b625e20d839118a9b4f1ffdd30995f1aad8353d155110b80ad07fd77d217765cf5e5d9ce0cd693a808365ea8d1575540b18d0387e888c3108e02f1200a65e8ae62dad15243f3cfbd4b50c00c5360eb5f7637d3d9979c40455e3110094c8e82251e6c1c2de55118e4a2cab724205ebaa783eb79be9f112c90dfb06cccea583e53ffea8a5fb73a7a2f44b2e0ca6878f646f839a79ccccda56c8357b8955b8229930b3e998375981cb318ee6f21ec4096ebe50764041938ec7acff79351d3c6f405f13042c139538ac8b97e61138cb40ca26c70bb6079c076d815da568858942c5ebbd841657de1d0a9caabe0c8efdf83c374551b0491a8dd1d53819cfa0857507b80a05459673860d1feaae6991c00e27919b4bb44b4c981609e6d21f518ee91d6f72be9351aeda7433b86776122eef91bc267172b634dcd18044ff4fd2c3c6297c8037be000aa5e256943d6e2122770ca860bccdd72cf56dde52aa99ed4e2059c67fceb8e74b057a1ffae9420f0243d8eb636210b922bb87597806396baea7e5af655783d3d0dec27be20843bb4078b21f843059db5592dd34168b52f3744007b8b8cf0969773e3d03a8ddeb6d1fc2e13eba738c96ef859511dd62c1027e47193575dcf4eae807fe908b2711e125cee9e0473277763bc2d7bc4c24ee7162e0062cc7bda37242ee3da2e99532ad9f54f8ae6701906030bde96ed937b2bec87ad32b652e5dcd0ca9689f6e1411102c8bce2426c78c3577361466419b76266a854629519cce465c85f742ef48978059684a407956eb0bdd8d0cd97b6bf6890f81b0114a2a44b70dee2653a96eca6c851c11480c9e72e124ac12830fb650230e8bf26f06809406e9b790bdfd507da28240cb31fbbde30af7030f4a9fd267648767133749ff42dd235c3c0bbf62934ee102b3fd809dd60b5f02e7a2abf408ea19cb5fe0cc9a549818516792401751890129376b36f668822e7c942115a972b4564114c7007d51e1a77dd0c2bc4fa4c7ee28c058ec10c5e5fcb115f99758f5b6650a0de889ec2dea1edeb622eb59cb7501c75089c6418a6f4c98b6721e72ebebd03985ab970039eae1fbef7754cb5576c7373823a2a570f05cd4556819a4324d7f6deae12953db226d23c1ac4c53d4426634ac0d3408a46a4ec90755e757cd21c31f5307c590aeca28e829b69788faf4824cb9f663fa735f44dec35e6c790e50e18dd41c4d5234e66831ccfc3278481131351d8ebbbbcce09fffc0778f1da20c8ca0af3df08e0e92e46c36c8b115e49554182339a8bbb577baf4dc800a0e3557150a7f33343e9ee0b141587ce01a162a612674c09c9971818e862fb93dda049fa95bf0b739eedeb487a89b8f0b57b974f72e2d772a1037749d2ed748c8f5bb536ed3d825af6fe396c4bf2df701db13362f172a9218e3c8837dfb12cdae3d4d3fb6087f0959cfaa01ae8a9c5f5009e00aadb177401f23962970770dccda16ced3bee06cad00969058f85a64e18f2a86571b694d3113a0c917e445df0ed13bc536236d6173cad77ae6598b6cf0ea1a056c75bbcdbb0955f1de88125702ee4a46c26e55781e25c0c87f08ad7e32737e893bdbb0b1fae4da87ab1c7d970e98a89eb396785e6f2a890129669641b0bf269efb74d6e02994dc9aec1ff145b234a89ef41704296e63ed73c265e04886eed57abb7326528bd1a720c28dc3c56832313d24b654967a40319f5a381e432d0aba7c87e0758ceb741cf9d5b797f33b6172bc40dc0a6576766dee5ad0d93996ab5c439c5622d158c2857b4399ab62d8ec0ac52d028ff7f62c6d7be1d4e48e53e4ffc64e69ee73b5ffc152d87d42acb109c3be364cc17977bd71053da64039c91c7edebdfc7e3859bec67c8d0a0d54fc3984e1eb622951d71e418be7f59b67cb689cb1c6fd73f728b45546c77e0ffd8b62d605d5a5fa6664bc423fd2da788aacce44c00ef9a6791ac495b124545e1597d6a6cb08a8c691db4dbffcf5cfdd2ae4616cea05e742859377cef44ff26eec29078c47611ac8dea6ba42a7c3d448a8dd3a2e9c2040d1fb8d68d74db7a1283fb5fffd265c484743a0dd058d89f359c0f7e07b426f5ad4e251360c123e5af995d24aacc6092790b37d7a83afde42ee60a4504508105900440e322ce4a94fad5944a5e0b459a6d555059760662d85f12743f202342754764f94909eef0967049dcb2de99e70a959a5aca4de75da8019d1b709c237b6647939a388f5e5a26c7d8802bfd7d24d90d5a3e8c8a25d404c370556d74dbb11028cbb69bae7c408e307681508b5dc67ce7d7c50f85f56f5511b6e4e9542e0b2871d3a8588526baf4ae74464c29c187eef665379b055eea97fb83fa4c25dfee771f5f8a57c16d6e03aafecfc2026a30d7249b6506af1b44dda5f5ed6430df9bd1de884e7fcab212fd52b4b962780f10a76b8f0204d31575565205ab2338838010cf942277a65b1a9068b67599f7f2ed9e7b9430cda373579d59ca954f9e9a83be008ba475a146fcecf87a0944cef391f15836ea8fba5ee4a89973348191f9b277ff96127acb823f4f04b595a742f27eb7beaf090c62ff92728aa31a886aa717fe636451ac99eb32d7174543229c60313c0caf0af11764fb57ca514335e0374296f622e666e44e5f6ecaf0ff1609d7abda1fa83e8d736c899ec715a4d14cf03465541337c124a38d437fdcd771153792c740095f8f78d9012f084b161e3a05914fc27bf123f2ce2f8b6d3b57829a3486010c3cd16e707fecb7ca27a5498d1eda18069716ba5b1b8335cd8ebc1ac48e29fb8834c402a3b7efba760d71adae88febb0efd3b4b6fe56abb47ab83158ff91e0c89ed590e6775a8087306fc9c68984161c6d4cbadbcf8728e7c1c5b1e1404ac304beaf748901d743177764dbc3e9107af11110d77f485d9072c84c33463f7ce36fc3993f2d3941164db1423ad6b79f81bf5e3c269cd96e5321be7d7c544cb3990f99b4bf9d787cf51bd118a57832d75c1304d822dbf51f9f63d6eab913125c1afec567c5c6d5716be714f201f495c5cf33f08f1386c6402f9e8a3d8837b340ad9ffbeed85a8724b8ee09b4d63a4909dda6ada41deddc30fd9078867039b6edeaeaa01088b49c6d2f30bc2a8cc6e4b54bedcc2c87fdac0fe1d3e5b783097539bb1efdb969cbfca60a4fcb2780048dfb69bcf209d49396ebc8e3ecc59ab6f2667e5104688309a4a8d564f31e7a8e56e703d6c04451a6bd58952f732d90f06997f65fd2bdb7ac901c6288469808bfdbfe67ab88a6ab1fab30ad6e630e8b5cb4f38633e1315d08d79ec2b1cd7b80bc7f4189ddb2ea14a4dee347a1b50ae1b90590863b026b175ed25344efcb137666fc8794a2c9e00ed30c474b7dbc666595b251ecdf82acd4c8ca3fa936971e03d8af3adb145fec147de9c962b6416f67311c8040ba248156437fee68dad032c332a83226e3e515b8760eb5962d433cde9d3e5dcaa8965db5943d92aca2a4ace573addf5d4c18067ecc9a9259de3fad8a2a40a1564670b404bec646fc532e32cc520dbb8ffd517acbb303d1de081c4339d37dba6f6a51eb016224a9db4c944da83a100763a61016a8b0ec9d5fa9196c471ed7b7f8c6a4d72c58a589d437aac7c661dd0a1860d13e636865c4793b73074551a17ab6ebf7c9d1e79ea6d80d467de873eb9fa4760696e75c5e82523d69fed47f4d600a28b242d18cff5f6a78117ed06b3d1bacf387bd46e6e6fa3a06b47df5b7b0bf8b53513d6a0fab505fc3e197294fa52c43fef0592c1d265bb27283ca65435592aa9fae9e194ebf001713f97c451ed19e3f9ff64b1d30b2d30f27574d8710e64241bf98a4b330f204d16746e8b410749b71cf81b939abb4ddf5828c5dc0f8cfc8dd22b4decd533e057a6ed141a21fef0fd447d6833bcafef6e48690b66a8093ba5b8aeb29d453d8bcbfe8bdf37e82dd5b611d0e6fd9dd93213954d305865e28fbf104b699ca451e1bcd1bd3a6322bd422a5c4f32cd5d868865cb9ef2dd03b9b9929161a3a09600f6f134563f30bd34c0b37a9f5cc5c67d2678ac4d2e034dbda69f0a8df8aa08c0434e7465be48d2b665137cb6c04e98ee4948edea5a16f3a03347b7fb13e69d7034982819fbd3cd0b5186b14f9fc5d154058bfc2d16df3dd422c60242f4d6103bce90c7fee0386e485de705c89c343f73206a2cc1edb354aaf57d9420a0ea9ef83f6c3db3bceb383977ae40b9fa678bf783e818dceab7e6762617bf37c558203eb5d138ca190366f32abdc3d0ec95cb71da0bcbcdd3873bea030c9f9c82cc7bbb867d1b4b954e913b2b99e40a0a3a0e3096ee902249b90bde0a803f77ac303176f40c4dd00b878343d85470a0a356564d877f90cc95ed073cd2a691579f7ea9c1e65d98aecbc80def72a967a90e6ee0c31ee772f889cc7888dbc768995f62f8010aeb41f127b1a44e23e1001bf873b8c2963dd00b2a30364e25f18dba2985d8e17b8cc38a56b034c451b944dbd15a7cf9b7c84f588e50ede4b6c0462ddcae3fcbc19660540bae1de7de6a366ba17aac0860f26757ec283d4448f06239e5a4f42579c7fb44bef4773665c4b61ff51f490eabdfd78583085644323ce35480ab62310d8026325f7fa2493a55f6b4ca873a95f9dd0975706d48b02dd4a8bdc27171bb834b4b5392257445ddfcfc044e65c798ec88e28014064cf55f47936e553d492e7dad62febd9ac0458517784b1b36eb7f465c3513ac1b148fc1ba7fce8d889a46a53e5cb4e6b7ec083a2723f99b4c2e89202eb6941563c139852b582a4643ac6c8f0d63522061fa5e4eed984f86ed3c3a24903872498da433fd342c79a8acd59a7f67fb1a7e4cfd78687230b077871c5147372bc6676a79ee56e32af88c775b63faec1e8e994b85bea8215fa2f3a32b66346dd39e57495bc486d8f82f05aa4aff46e55825a0bedea267b5a732787e833d7e57a2555ba294aa7e2dbfc9f6928f8d96c3f9d3595013b7dae38c731a61ff77ccf9bd3d019d4"}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000001140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000012c0)) r7 = fsopen(&(0x7f0000001180)='vxfs\x00', 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, 0x0, 0x1) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001280)='\'[*\x00', 0x0, r8) 08:53:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) socket$unix(0x1, 0x2, 0x0) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) sendfile(r0, r3, 0x0, 0x9) io_setup(0x4, &(0x7f00000000c0)=0x0) io_destroy(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$security_selinux(r7, &(0x7f0000001580), &(0x7f00000015c0)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x2) r8 = open(&(0x7f0000000180)='./file1\x00', 0x2, 0x50) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x7, 0x0, 0x1) r10 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x1) io_submit(r5, 0x5, &(0x7f0000001540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x8000, 0xffffffffffffffff, &(0x7f0000000000)="1d4d3c8fee26a24135258587a28e37cd9f053dbab444f583ed8f497910a0d92e43e056ec8b6dd0715b59638cbe7d49a761dff5d3e18f161787bc06d2ef4a8cfadf", 0x41, 0x4, 0x0, 0x4, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x5, r6, &(0x7f0000000240)="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", 0xfa, 0x5e6, 0x0, 0x1, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000340)="713da083c8a09af534743abe89b47d9747be853d30b9a47acbb4fc42c5430900f346d9764dfab5ecb3fab3d1243b2c198662ab774fd6ee3a17f84790039999c62f02a523e5b989bdaaf6a51330353a70a5e96d0ad812868e3282423e8d6a1121289f43649dd746803671c33c8ed5b4fcf2dd67b55e03720be80adfb725765238bd60a6057fc084c87b3e8c1618e9df1b6ba27a3c78a8b6fae3bd90ec", 0x9c, 0x608, 0x0, 0x1, r8}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x3, 0x101, r9, &(0x7f0000000400)="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", 0x1000, 0x11d7, 0x0, 0x0, r1}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x8, 0x5, r10, &(0x7f0000001440)="7a3d0dda7e4ff41cd1052719d663669c4ea2e6fe8b16413b09c725243b8ad42e4fa0c7406e026c203f22bd6a7328307545f9629e15c42d53af6f80162a7950234dab1c0f917fc8eb638b115c942a7ee58cc846ea2f293c510af020a1fea8368ba89f3c3344a02e78f050e20294872c0bf0027fc317cd2791711f623201f6be52d41b186407", 0x85, 0x1f, 0x0, 0x2}]) 08:53:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) fcntl$setstatus(r2, 0x4, 0x42800) sendfile(r2, r0, 0x0, 0x100001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='net/rpc\x00') openat$incfs(r3, &(0x7f00000008c0)='.pending_reads\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x209, 0x2001) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) [ 1439.959665] audit: type=1400 audit(1680166385.774:17): avc: denied { relabelto } for pid=8486 comm="syz-executor.6" name="UDPLITEv6" dev="sockfs" ino=31104 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:netlabel_mgmt_exec_t:s0 tclass=rawip_socket permissive=1 08:53:21 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:53:21 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:53:21 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:53:21 executing program 6: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xe4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000001c0), 0x7, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) r3 = fsopen(&(0x7f0000000280)='qnx6\x00', 0x1) open(&(0x7f00000000c0)='./file1\x00', 0x4, 0x10) r4 = syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x2) dup2(r0, r4) sendfile(r3, r1, 0x0, 0x3d963ade) 08:53:21 executing program 7: clone3(&(0x7f00000004c0)={0x300000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:53:21 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:53:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001100)={0x4, 0xc307, 0x474, 0x400, 0x5}) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000100)={{r5}, "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"}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000001140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000012c0)) r7 = fsopen(&(0x7f0000001180)='vxfs\x00', 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, 0x0, 0x1) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001280)='\'[*\x00', 0x0, r8) 08:53:21 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='net/rpc\x00') r1 = openat$incfs(r0, &(0x7f00000008c0)='.pending_reads\x00', 0x0, 0x0) write(r1, &(0x7f0000000000)="64338bea51a6130e949095ddea68cdd28ce47771410a8b5a2414ad8614b238333105979c48ed57bb0f42a1eb1ca6e7ec7cd4ca635ff62820a6731848eda52ab33333bae2ebc99043a40ece89516110be8b98db8ada2e985cc803eb0c86b528dbe5eca06d647e1650af0d3d16864a6d8d", 0x70) 08:53:21 executing program 7: clone3(&(0x7f00000004c0)={0x600000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:53:21 executing program 7: clone3(&(0x7f00000004c0)={0x800000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:53:21 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:53:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001100)={0x4, 0xc307, 0x474, 0x400, 0x5}) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000100)={{r5}, "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"}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000001140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000012c0)) r7 = fsopen(&(0x7f0000001180)='vxfs\x00', 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, 0x0, 0x1) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001280)='\'[*\x00', 0x0, r8) 08:53:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) socket$unix(0x1, 0x2, 0x0) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) sendfile(r0, r3, 0x0, 0x9) io_setup(0x4, &(0x7f00000000c0)=0x0) io_destroy(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$security_selinux(r7, &(0x7f0000001580), &(0x7f00000015c0)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x2) r8 = open(&(0x7f0000000180)='./file1\x00', 0x2, 0x50) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x7, 0x0, 0x1) r10 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x1) io_submit(r5, 0x5, &(0x7f0000001540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x8000, 0xffffffffffffffff, &(0x7f0000000000)="1d4d3c8fee26a24135258587a28e37cd9f053dbab444f583ed8f497910a0d92e43e056ec8b6dd0715b59638cbe7d49a761dff5d3e18f161787bc06d2ef4a8cfadf", 0x41, 0x4, 0x0, 0x4, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x5, r6, &(0x7f0000000240)="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", 0xfa, 0x5e6, 0x0, 0x1, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000340)="713da083c8a09af534743abe89b47d9747be853d30b9a47acbb4fc42c5430900f346d9764dfab5ecb3fab3d1243b2c198662ab774fd6ee3a17f84790039999c62f02a523e5b989bdaaf6a51330353a70a5e96d0ad812868e3282423e8d6a1121289f43649dd746803671c33c8ed5b4fcf2dd67b55e03720be80adfb725765238bd60a6057fc084c87b3e8c1618e9df1b6ba27a3c78a8b6fae3bd90ec", 0x9c, 0x608, 0x0, 0x1, r8}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x3, 0x101, r9, &(0x7f0000000400)="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", 0x1000, 0x11d7, 0x0, 0x0, r1}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x8, 0x5, r10, &(0x7f0000001440)="7a3d0dda7e4ff41cd1052719d663669c4ea2e6fe8b16413b09c725243b8ad42e4fa0c7406e026c203f22bd6a7328307545f9629e15c42d53af6f80162a7950234dab1c0f917fc8eb638b115c942a7ee58cc846ea2f293c510af020a1fea8368ba89f3c3344a02e78f050e20294872c0bf0027fc317cd2791711f623201f6be52d41b186407", 0x85, 0x1f, 0x0, 0x2}]) 08:53:21 executing program 7: clone3(&(0x7f00000004c0)={0x900000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:53:21 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:53:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4e05c3, 0x1ba) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) 08:53:35 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:53:35 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xe4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000001c0), 0x7, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) r3 = fsopen(&(0x7f0000000280)='qnx6\x00', 0x1) open(&(0x7f00000000c0)='./file1\x00', 0x4, 0x10) r4 = syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x2) dup2(r0, r4) sendfile(r3, r1, 0x0, 0x3d963ade) 08:53:35 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000001480)={[0x7fffffff]}, 0x8) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) ppoll(&(0x7f00000014c0)=[{r0, 0x20}, {0xffffffffffffffff, 0xc448}, {0xffffffffffffffff, 0x948b}, {0xffffffffffffffff, 0x280}], 0x4, &(0x7f0000001540)={r1, r2+60000000}, &(0x7f0000001580)={[0xfffffffffffffffe]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x10000027f) 08:53:35 executing program 7: clone3(&(0x7f00000004c0)={0xe00000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:53:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001100)={0x4, 0xc307, 0x474, 0x400, 0x5}) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000100)={{r5}, "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"}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000001140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000012c0)) fsopen(&(0x7f0000001180)='vxfs\x00', 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, 0x0, 0x1) 08:53:35 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:53:35 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:53:35 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:53:35 executing program 7: clone3(&(0x7f00000004c0)={0x1100000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:53:35 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:53:35 executing program 7: clone3(&(0x7f00000004c0)={0x2000000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:53:35 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:53:35 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:53:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001100)={0x4, 0xc307, 0x474, 0x400, 0x5}) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000100)={{r5}, "13fe73cff28e06a1b67f7ade851328e63eec29f44d0ad45ae3806420ec58035948271d381db113d61e1866c76e2ada4af62ef0e45c7367229a8a3deca60dd7dead8408bddb015e7ac8ac1e4b197e2f3a5abc37d7d6341e1c760045211d2bdd8065fd001bf34e37f352c181b491d0563541758712598870041d24aa9b41432fb458bae7bf570f49cac8098def870482f1618e08f6061a765b47fe788223c4e1bd115c610c73b1a47ebd785ac4db6ee53fe384d1224547497a1bef96a676ba58535fbfe6b5783863e97d7e0db06fad593a281fe8562b735f047f4b820053bbdf877dc7e65e149989647bae96f63ab0cd1a575612151a540f6745c37be9e835b1b327741feec88b1d55258b5d3e0e22d0ae1d798e1fc108b630e27df58cec89e94a11886a3aa9b18cb51aa405310e6e7af0c9117c4ef6446675cb2ed98df86ba1f905ec18cc37e7edb0b2d40d3dee72d32f394531b0365a1e3591224023e6ceb97753494b6ef0aa7263ade0a870e4c909bea48ac0a3fdb72c1445abd3db105f8210c6b78c7daaa67370c9df2798ac07927aa0e81f7249272c9e10c18c085f2915c662a1f698bb3a51353567388d4519cab5e87c440b49d8dfcc643d8df3b2397cdaee2de80b1dc38edace99dcf8408c06581d6dbc86efe1c28e5922b0c7bdd8c53802bf01829111395f2ce561c46007d960230ae42c788cde316448b38f12fd53c1808d04d34457b949822929cb1cb3584a1f901d3b2323a26ca1b82213b4ec697b625e20d839118a9b4f1ffdd30995f1aad8353d155110b80ad07fd77d217765cf5e5d9ce0cd693a808365ea8d1575540b18d0387e888c3108e02f1200a65e8ae62dad15243f3cfbd4b50c00c5360eb5f7637d3d9979c40455e3110094c8e82251e6c1c2de55118e4a2cab724205ebaa783eb79be9f112c90dfb06cccea583e53ffea8a5fb73a7a2f44b2e0ca6878f646f839a79ccccda56c8357b8955b8229930b3e998375981cb318ee6f21ec4096ebe50764041938ec7acff79351d3c6f405f13042c139538ac8b97e61138cb40ca26c70bb6079c076d815da568858942c5ebbd841657de1d0a9caabe0c8efdf83c374551b0491a8dd1d53819cfa0857507b80a05459673860d1feaae6991c00e27919b4bb44b4c981609e6d21f518ee91d6f72be9351aeda7433b86776122eef91bc267172b634dcd18044ff4fd2c3c6297c8037be000aa5e256943d6e2122770ca860bccdd72cf56dde52aa99ed4e2059c67fceb8e74b057a1ffae9420f0243d8eb636210b922bb87597806396baea7e5af655783d3d0dec27be20843bb4078b21f843059db5592dd34168b52f3744007b8b8cf0969773e3d03a8ddeb6d1fc2e13eba738c96ef859511dd62c1027e47193575dcf4eae807fe908b2711e125cee9e0473277763bc2d7bc4c24ee7162e0062cc7bda37242ee3da2e99532ad9f54f8ae6701906030bde96ed937b2bec87ad32b652e5dcd0ca9689f6e1411102c8bce2426c78c3577361466419b76266a854629519cce465c85f742ef48978059684a407956eb0bdd8d0cd97b6bf6890f81b0114a2a44b70dee2653a96eca6c851c11480c9e72e124ac12830fb650230e8bf26f06809406e9b790bdfd507da28240cb31fbbde30af7030f4a9fd267648767133749ff42dd235c3c0bbf62934ee102b3fd809dd60b5f02e7a2abf408ea19cb5fe0cc9a549818516792401751890129376b36f668822e7c942115a972b4564114c7007d51e1a77dd0c2bc4fa4c7ee28c058ec10c5e5fcb115f99758f5b6650a0de889ec2dea1edeb622eb59cb7501c75089c6418a6f4c98b6721e72ebebd03985ab970039eae1fbef7754cb5576c7373823a2a570f05cd4556819a4324d7f6deae12953db226d23c1ac4c53d4426634ac0d3408a46a4ec90755e757cd21c31f5307c590aeca28e829b69788faf4824cb9f663fa735f44dec35e6c790e50e18dd41c4d5234e66831ccfc3278481131351d8ebbbbcce09fffc0778f1da20c8ca0af3df08e0e92e46c36c8b115e49554182339a8bbb577baf4dc800a0e3557150a7f33343e9ee0b141587ce01a162a612674c09c9971818e862fb93dda049fa95bf0b739eedeb487a89b8f0b57b974f72e2d772a1037749d2ed748c8f5bb536ed3d825af6fe396c4bf2df701db13362f172a9218e3c8837dfb12cdae3d4d3fb6087f0959cfaa01ae8a9c5f5009e00aadb177401f23962970770dccda16ced3bee06cad00969058f85a64e18f2a86571b694d3113a0c917e445df0ed13bc536236d6173cad77ae6598b6cf0ea1a056c75bbcdbb0955f1de88125702ee4a46c26e55781e25c0c87f08ad7e32737e893bdbb0b1fae4da87ab1c7d970e98a89eb396785e6f2a890129669641b0bf269efb74d6e02994dc9aec1ff145b234a89ef41704296e63ed73c265e04886eed57abb7326528bd1a720c28dc3c56832313d24b654967a40319f5a381e432d0aba7c87e0758ceb741cf9d5b797f33b6172bc40dc0a6576766dee5ad0d93996ab5c439c5622d158c2857b4399ab62d8ec0ac52d028ff7f62c6d7be1d4e48e53e4ffc64e69ee73b5ffc152d87d42acb109c3be364cc17977bd71053da64039c91c7edebdfc7e3859bec67c8d0a0d54fc3984e1eb622951d71e418be7f59b67cb689cb1c6fd73f728b45546c77e0ffd8b62d605d5a5fa6664bc423fd2da788aacce44c00ef9a6791ac495b124545e1597d6a6cb08a8c691db4dbffcf5cfdd2ae4616cea05e742859377cef44ff26eec29078c47611ac8dea6ba42a7c3d448a8dd3a2e9c2040d1fb8d68d74db7a1283fb5fffd265c484743a0dd058d89f359c0f7e07b426f5ad4e251360c123e5af995d24aacc6092790b37d7a83afde42ee60a4504508105900440e322ce4a94fad5944a5e0b459a6d555059760662d85f12743f202342754764f94909eef0967049dcb2de99e70a959a5aca4de75da8019d1b709c237b6647939a388f5e5a26c7d8802bfd7d24d90d5a3e8c8a25d404c370556d74dbb11028cbb69bae7c408e307681508b5dc67ce7d7c50f85f56f5511b6e4e9542e0b2871d3a8588526baf4ae74464c29c187eef665379b055eea97fb83fa4c25dfee771f5f8a57c16d6e03aafecfc2026a30d7249b6506af1b44dda5f5ed6430df9bd1de884e7fcab212fd52b4b962780f10a76b8f0204d31575565205ab2338838010cf942277a65b1a9068b67599f7f2ed9e7b9430cda373579d59ca954f9e9a83be008ba475a146fcecf87a0944cef391f15836ea8fba5ee4a89973348191f9b277ff96127acb823f4f04b595a742f27eb7beaf090c62ff92728aa31a886aa717fe636451ac99eb32d7174543229c60313c0caf0af11764fb57ca514335e0374296f622e666e44e5f6ecaf0ff1609d7abda1fa83e8d736c899ec715a4d14cf03465541337c124a38d437fdcd771153792c740095f8f78d9012f084b161e3a05914fc27bf123f2ce2f8b6d3b57829a3486010c3cd16e707fecb7ca27a5498d1eda18069716ba5b1b8335cd8ebc1ac48e29fb8834c402a3b7efba760d71adae88febb0efd3b4b6fe56abb47ab83158ff91e0c89ed590e6775a8087306fc9c68984161c6d4cbadbcf8728e7c1c5b1e1404ac304beaf748901d743177764dbc3e9107af11110d77f485d9072c84c33463f7ce36fc3993f2d3941164db1423ad6b79f81bf5e3c269cd96e5321be7d7c544cb3990f99b4bf9d787cf51bd118a57832d75c1304d822dbf51f9f63d6eab913125c1afec567c5c6d5716be714f201f495c5cf33f08f1386c6402f9e8a3d8837b340ad9ffbeed85a8724b8ee09b4d63a4909dda6ada41deddc30fd9078867039b6edeaeaa01088b49c6d2f30bc2a8cc6e4b54bedcc2c87fdac0fe1d3e5b783097539bb1efdb969cbfca60a4fcb2780048dfb69bcf209d49396ebc8e3ecc59ab6f2667e5104688309a4a8d564f31e7a8e56e703d6c04451a6bd58952f732d90f06997f65fd2bdb7ac901c6288469808bfdbfe67ab88a6ab1fab30ad6e630e8b5cb4f38633e1315d08d79ec2b1cd7b80bc7f4189ddb2ea14a4dee347a1b50ae1b90590863b026b175ed25344efcb137666fc8794a2c9e00ed30c474b7dbc666595b251ecdf82acd4c8ca3fa936971e03d8af3adb145fec147de9c962b6416f67311c8040ba248156437fee68dad032c332a83226e3e515b8760eb5962d433cde9d3e5dcaa8965db5943d92aca2a4ace573addf5d4c18067ecc9a9259de3fad8a2a40a1564670b404bec646fc532e32cc520dbb8ffd517acbb303d1de081c4339d37dba6f6a51eb016224a9db4c944da83a100763a61016a8b0ec9d5fa9196c471ed7b7f8c6a4d72c58a589d437aac7c661dd0a1860d13e636865c4793b73074551a17ab6ebf7c9d1e79ea6d80d467de873eb9fa4760696e75c5e82523d69fed47f4d600a28b242d18cff5f6a78117ed06b3d1bacf387bd46e6e6fa3a06b47df5b7b0bf8b53513d6a0fab505fc3e197294fa52c43fef0592c1d265bb27283ca65435592aa9fae9e194ebf001713f97c451ed19e3f9ff64b1d30b2d30f27574d8710e64241bf98a4b330f204d16746e8b410749b71cf81b939abb4ddf5828c5dc0f8cfc8dd22b4decd533e057a6ed141a21fef0fd447d6833bcafef6e48690b66a8093ba5b8aeb29d453d8bcbfe8bdf37e82dd5b611d0e6fd9dd93213954d305865e28fbf104b699ca451e1bcd1bd3a6322bd422a5c4f32cd5d868865cb9ef2dd03b9b9929161a3a09600f6f134563f30bd34c0b37a9f5cc5c67d2678ac4d2e034dbda69f0a8df8aa08c0434e7465be48d2b665137cb6c04e98ee4948edea5a16f3a03347b7fb13e69d7034982819fbd3cd0b5186b14f9fc5d154058bfc2d16df3dd422c60242f4d6103bce90c7fee0386e485de705c89c343f73206a2cc1edb354aaf57d9420a0ea9ef83f6c3db3bceb383977ae40b9fa678bf783e818dceab7e6762617bf37c558203eb5d138ca190366f32abdc3d0ec95cb71da0bcbcdd3873bea030c9f9c82cc7bbb867d1b4b954e913b2b99e40a0a3a0e3096ee902249b90bde0a803f77ac303176f40c4dd00b878343d85470a0a356564d877f90cc95ed073cd2a691579f7ea9c1e65d98aecbc80def72a967a90e6ee0c31ee772f889cc7888dbc768995f62f8010aeb41f127b1a44e23e1001bf873b8c2963dd00b2a30364e25f18dba2985d8e17b8cc38a56b034c451b944dbd15a7cf9b7c84f588e50ede4b6c0462ddcae3fcbc19660540bae1de7de6a366ba17aac0860f26757ec283d4448f06239e5a4f42579c7fb44bef4773665c4b61ff51f490eabdfd78583085644323ce35480ab62310d8026325f7fa2493a55f6b4ca873a95f9dd0975706d48b02dd4a8bdc27171bb834b4b5392257445ddfcfc044e65c798ec88e28014064cf55f47936e553d492e7dad62febd9ac0458517784b1b36eb7f465c3513ac1b148fc1ba7fce8d889a46a53e5cb4e6b7ec083a2723f99b4c2e89202eb6941563c139852b582a4643ac6c8f0d63522061fa5e4eed984f86ed3c3a24903872498da433fd342c79a8acd59a7f67fb1a7e4cfd78687230b077871c5147372bc6676a79ee56e32af88c775b63faec1e8e994b85bea8215fa2f3a32b66346dd39e57495bc486d8f82f05aa4aff46e55825a0bedea267b5a732787e833d7e57a2555ba294aa7e2dbfc9f6928f8d96c3f9d3595013b7dae38c731a61ff77ccf9bd3d019d4"}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000001140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000012c0)) fsopen(&(0x7f0000001180)='vxfs\x00', 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 08:53:35 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:53:49 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:53:49 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:53:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) openat(r1, &(0x7f0000000000)='./file1\x00', 0x40, 0x118) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) openat(r0, &(0x7f0000000040)='./file1\x00', 0x80000, 0x1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) sendfile(r0, r3, 0x0, 0x10000027f) 08:53:49 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:53:49 executing program 7: clone3(&(0x7f00000004c0)={0x2101000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:53:49 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xe4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000001c0), 0x7, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) r3 = fsopen(&(0x7f0000000280)='qnx6\x00', 0x1) open(&(0x7f00000000c0)='./file1\x00', 0x4, 0x10) r4 = syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x2) dup2(r0, r4) sendfile(r3, r1, 0x0, 0x3d963ade) 08:53:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001100)={0x4, 0xc307, 0x474, 0x400, 0x5}) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000100)={{r5}, "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"}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000001140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000012c0)) fsopen(&(0x7f0000001180)='vxfs\x00', 0x0) 08:53:49 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:53:49 executing program 7: clone3(&(0x7f00000004c0)={0x2201000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:53:49 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:53:49 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:53:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 08:53:49 executing program 7: clone3(&(0x7f00000004c0)={0x2601000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:53:49 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:53:49 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:53:49 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xe4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000001c0), 0x7, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) r3 = fsopen(&(0x7f0000000280)='qnx6\x00', 0x1) open(&(0x7f00000000c0)='./file1\x00', 0x4, 0x10) r4 = syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x2) dup2(r0, r4) sendfile(r3, r1, 0x0, 0x3d963ade) 08:53:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001100)={0x4, 0xc307, 0x474, 0x400, 0x5}) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000100)={{r5}, "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"}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000001140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000012c0)) 08:54:04 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:04 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xe4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000001c0), 0x7, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) fsopen(&(0x7f0000000280)='qnx6\x00', 0x1) open(&(0x7f00000000c0)='./file1\x00', 0x4, 0x10) r2 = syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x2) dup2(r0, r2) 08:54:04 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:54:04 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:54:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001100)={0x4, 0xc307, 0x474, 0x400, 0x5}) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000100)={{r5}, "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"}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000001140)) 08:54:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x202401, 0x52) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 08:54:04 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:04 executing program 7: clone3(&(0x7f00000004c0)={0x3f00000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:54:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001100)={0x4, 0xc307, 0x474, 0x400, 0x5}) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000100)={{r5}, "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"}) socket$inet6_udp(0xa, 0x2, 0x0) 08:54:04 executing program 7: clone3(&(0x7f00000004c0)={0x4000000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:54:04 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000000)={'\x00', 0x8, 0x1, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100010000ffffff17000000", @ANYRES32=r0, @ANYBLOB="08000000000000002e0f66696c653000"]) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000100)={0x16, @rand_addr=0x64010101, 0x4e22, 0x4, 'lblc\x00', 0x24, 0x101, 0x14}, 0x2c) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f) 08:54:04 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:54:04 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:04 executing program 7: clone3(&(0x7f00000004c0)={0x7100000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:54:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001100)={0x4, 0xc307, 0x474, 0x400, 0x5}) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000100)={{r5}, "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"}) 08:54:04 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xe4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000001c0), 0x7, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) fsopen(&(0x7f0000000280)='qnx6\x00', 0x1) open(&(0x7f00000000c0)='./file1\x00', 0x4, 0x10) syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x2) 08:54:20 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:20 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xe4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000001c0), 0x7, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) fsopen(&(0x7f0000000280)='qnx6\x00', 0x1) open(&(0x7f00000000c0)='./file1\x00', 0x4, 0x10) 08:54:20 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:54:20 executing program 7: clone3(&(0x7f00000004c0)={0xc301000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:54:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001100)={0x4, 0xc307, 0x474, 0x400, 0x5}) 08:54:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, &(0x7f00000000c0)={r3, r4+60000000}, &(0x7f0000000100)={[0x1f]}, 0x8) 08:54:20 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:54:20 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:20 executing program 7: clone3(&(0x7f00000004c0)={0xc401000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:54:20 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) 08:54:20 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:54:20 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file1\x00'}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x1) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000001c0)=@generic={0x1, 0x9, 0xffffffff}) r2 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x480000, 0x101) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x0, 0x10001}}, './file1\x00'}) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8) 08:54:20 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:20 executing program 7: clone3(&(0x7f00000004c0)={0xc501000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:54:20 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xe4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000001c0), 0x7, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) fsopen(&(0x7f0000000280)='qnx6\x00', 0x1) 08:54:36 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xe4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000001c0), 0x7, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) 08:54:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8a}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x0, 0x1}}, './file1\x00'}) sendfile(r0, r1, 0x0, 0x10000027f) 08:54:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) 08:54:36 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:54:36 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:36 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:36 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:54:36 executing program 7: clone3(&(0x7f00000004c0)={0xc601000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:54:36 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:36 executing program 7: clone3(&(0x7f00000004c0)={0xc901000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:54:36 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xe4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000001c0), 0x7, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 08:54:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) 08:54:36 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:54:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 08:54:36 executing program 7: clone3(&(0x7f00000004c0)={0xd101000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:54:36 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, 0x9, &(0x7f0000001500)=[{&(0x7f00000000c0), 0x0, 0x4000000000000}, {&(0x7f0000000100)="32193990fbd5a87fbad14234b4a4b3648dddc85cce96ef418523f34936ee5c68b6f0d5730b08468f372f9a845cd81a488e4e542f370b7845393866bb7e2708dce11dff5b28b7223c8b5baae7f337f94137886a092c767aa8886c6660fd3b8ef1cdd20605788224fa540b35407e1ba0cc9885dfe34704f558374a4be4aa28d1b3cfe9d3a57d812b71e88e269c7c0af9dc5c2f6b083948ecff713b79e9f3236e0162f1858a6d95b18078b64cd7f11879937574e4", 0xb3, 0x3}, {&(0x7f00000001c0), 0x0, 0x1}, {&(0x7f0000000240)="67542beb60966823c3528dab2178c9dc34119ed14faf2f7e5b0bb3cada6e320c36e5eb63c9acfaac4a2d5f8d0fb266da1096e5350144a61b812c89fd352fe92443a0c6dd50a08f2d5d5d73331b3220669772464240a66c9046f9f4915720d8c1305924261049541730206491032f92d473a3260df1133d54861eaa72aeecf4b033ba757e797680ba19f1df2171e05011f5bce56da47b10556a5b4462da932c887b616fc0c013d7c7ab0990cb5a96f9a0eb6d57449a8244", 0xb7, 0x8}, {&(0x7f0000000300)="32c142fffe9dedb57bb1dd5b516bf30fc6cd08a82da5f5f943b42663f7b1dbc2983f290a271ec81520823c7975fc844d7cb038c3b91c26aa98a29a68a475234c2be3b0e2ea5d3f2881227a08010fab57658d9e80ec9248e0fb45e844c7e3418af7b8872a368e82b5d527f4500430c0626ce0fc38547d456d5f2d7c4a50c5afa57057801dd8de5b9c03016246d2212ce717b9cd650286f5ae6cb90479af01316ef18f84faf344286e944c4b3f78d5c5e11c61f0d739cba938998c6c72d05a6a61be9ddaa999a2123d2119a95aabd7279ec539192848ccb2", 0xd7, 0x7}, {&(0x7f0000000400)="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", 0x1000, 0x101}, {&(0x7f0000001400)="32615fccf9aab7e99d0f48b24a54b68b337c5b7c7b279fa78c8c599c26ecd6624c878bf297ae4eaeef687a7e24021a2b1b7db18f44428433923fd1b671cf03", 0x3f, 0x3}, {&(0x7f0000001440)="0f7b6e33b010d59c3dbb931e82c011ccffc82c454ade108d2eec11fb6171751d5206255b0501d0c9581178ee610f9be1698b5a2a914e709eeea90c4fcbe9123906ad99c6eabb74639fe8d234b0b705a706ff2374396a", 0x56, 0xfffffffffffffffa}, {&(0x7f00000014c0)="caf01ad4cd44f22748de5799", 0xc, 0x8}], 0x2001, &(0x7f0000001600)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x35, 0x39, 0x32, 0x39, 0x35]}}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x38, 0x25]}}, {@huge_within_size}, {@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x78, 0x33, 0x38]}}], [{@smackfsdef={'smackfsdef', 0x3d, '*-/}'}}, {@euid_lt={'euid<', 0xee00}}]}) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) accept(0xffffffffffffffff, &(0x7f0000001700), &(0x7f00000000c0)=0x80) bind$unix(r3, &(0x7f0000001680)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendfile(r1, r2, 0x0, 0x10000027f) 08:54:36 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 1530.671901] loop6: detected capacity change from 0 to 16384 [ 1530.688255] loop6: detected capacity change from 0 to 16384 08:54:50 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xe4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000001c0), 0x7, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) 08:54:50 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) openat(r2, &(0x7f0000000040)='./file1\x00', 0x0, 0x65) 08:54:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000011c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ab51000000000000d3010100000000005a00000000000000f7ffffffffffffff090000000000000000000000000000000000000001000000ff0f0000ff0f00007f0000000000000001800000000000000500000000000000ff7f0000400000000000000000000000000000000000000000000000000000000005000000000000"]) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:54:50 executing program 7: clone3(&(0x7f00000004c0)={0xf5ffffff00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:54:50 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:50 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:54:50 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:54:50 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:54:50 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:54:50 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:50 executing program 7: clone3(&(0x7f00000004c0)={0xfbffffff00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:54:50 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xe4) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000001c0), 0x7, 0x2) 08:54:50 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:54:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:54:50 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:54:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x42280) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000000000000cd298c2db740f40e76e5a939006fca3f1e03c1cb76012b4ec3c4229200a4edeea50e8beeb5edb77e31a36597c11255acad77c5a785efa500886d18cb3235d0caa9646f7bd3dfef44133b69c48e9fcee9dfebba7877f69887df7f1c9327504f07739feca35ddeb417b4c8a3b89fba2a5249e4c5bb900a0663cf99529cbcf6d730b2a95a4abf2585ae52dc61574b28998f45e5b80ce78763f2d8011fbd9734b431f136370a4f06ea9d9b59e42dcb4e323639c07e00f62a1aee81b51725315e0cee480db7f5820bb87cbb27f513f27c43e576ced3a99d253073457c66bd7b3c403b964be6b996f1aa291c05e1056e98fe8ca36df700000000000000000000000000000000000000ece5590064", @ANYRES32=r1, @ANYBLOB="04000000000000002e2f66696c653100"]) write$eventfd(r2, &(0x7f00000000c0), 0x8) sendfile(r0, r1, 0x0, 0x10000027f) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0xc9c) openat(r4, &(0x7f0000000000)='./file1\x00', 0x4000, 0x121) 08:55:07 executing program 7: clone3(&(0x7f00000004c0)={0xffbf113fcb7f0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:55:07 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:55:07 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xe4) 08:55:07 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:55:07 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:55:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2cf6}}, './file1\x00'}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)) write(r2, &(0x7f00000000c0)="df509b8ddc0b0b173189fa027992b86801d117c8a1f3fa724dbfc9e3d1d1d59fbd3387186e4ff52f0aa38f1ecfdc80725e61e9fab3acd41e27ef854cb9c011c45e404d5c600c9a7e72905ac38e3058c5c20abc7e0d5e1aa006eb2a645a4376a4a58c6d87e362fabfb7e656e26b5294eeb65525ffb07d3e699742db39a0b549d15f34f6f15c4370c9cb319000cc723d30b5d8bf95f2632457852b252ce7634b8e1b001d4e4e2e7d98a19613be88516f6407bff2edd559434f236f099374bc314fb17bf41fb905bbea481fc7ac7c77c45f50678f8a5f92d792c0df013441d648be54dad3fe0ff029a5ba3b617a9ff14335305ddee3d34c", 0xf6) sendfile(r0, r1, 0x0, 0x10000027f) 08:55:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:55:07 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:55:07 executing program 7: clone3(&(0x7f00000004c0)={0xffefff1f00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:55:07 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:55:07 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1042, 0xa0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) 08:55:07 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:55:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:55:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x408000, 0x80) 08:55:07 executing program 7: clone3(&(0x7f00000004c0)={0xffff8034bf8c3000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:55:23 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:55:23 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:55:23 executing program 7: clone3(&(0x7f00000004c0)={0xffff8034bfac3000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:55:23 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) 08:55:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:55:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x16) sendfile(r0, r1, 0x0, 0x10000027f) 08:55:23 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:55:23 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x22080, 0x0) 08:55:23 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:55:23 executing program 7: clone3(&(0x7f00000004c0)={0xffff8034bfcc3000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:55:23 executing program 5: get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) 08:55:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:55:23 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:55:24 executing program 7: clone3(&(0x7f00000004c0)={0xffff8034bfec3000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:55:24 executing program 5: get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) 08:55:39 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x22080, 0x0) 08:55:39 executing program 0: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:55:39 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:55:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file1', [{0x20, '/proc/consoles\x00'}, {}], 0xa, "dcf86c3dc3e201950decd0ee64b1f236353f5c16030fef71b0374ce18e5664772712408954da10eed2a77f086983fc978b3b01ace6982f3302abfdae8d2d889253f0fc60f3c10d2a35373b9b0388801a7f827787733502a7ab445abf886b82d0cc2b931eac850e1964e1d64f397a19c430209fa3977f0da713c68e567b827e0c14a9fdcc1eecf07d73a07fcc0ccf560ac76ce5cdaf4e54f6e3d7ba0404067b0804c065465bdc97a6436cdfe7c77ad21044410da20385d3e1ef5a638dcafcf8e8b1168405d3f386a1d3ab8c49d657130470ef984af64d52cf08debb8d7af6037630"}, 0xfd) syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x2007, @fd_index=0x205, 0xac7, &(0x7f00000004c0)=""/95, 0x0, 0x1}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000200)=""/2, 0x2}, {&(0x7f0000000240)}], 0x3}, 0x0, 0x10000, 0x1, {0x1, r8}}, 0xeb4e) syz_io_uring_submit(r2, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000200)=""/2, 0x2}, {&(0x7f0000000240)}], 0x3}, 0x0, 0x10000, 0x1, {0x1, r7}}, 0xeb4e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)={0x74, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0x22, 0x34, @random="52f22b3b76dabfea621c2cfea2bd9ddc8bd6eafd830d23a8c0d9c2fa9eab"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008046}, 0x40048c0) syz_io_uring_submit(r2, r5, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r6, 0x5, 0x0, 0x1, 0x1, 0x0, {0x0, r7}}, 0x9) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r10, 0x40189429, &(0x7f0000000240)={0x1, 0x4, 0x7}) 08:55:39 executing program 7: clone3(&(0x7f00000004c0)={0xffff8034c00c3000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:55:39 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:55:39 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:55:39 executing program 5: get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) 08:55:40 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, &(0x7f0000000180), 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) 08:55:40 executing program 0: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:55:40 executing program 7: clone3(&(0x7f00000004c0)={0xffffffff00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:55:40 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:55:40 executing program 0: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:55:40 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, 0x0, 0x1f, &(0x7f0000ffd000/0x2000)=nil, 0x3) 08:55:40 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:55:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) r2 = accept$inet6(r0, 0x0, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000d30f00fb8fdfd8477e", @ANYRES32=r2, @ANYBLOB="0803000000000000002f66696c65312f88788669df66696c653000"]) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x10000027f) 08:55:56 executing program 7: clone3(&(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:55:56 executing program 0: r0 = syz_open_procfs(0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:55:56 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x22080, 0x0) 08:55:56 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:55:56 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) 08:55:56 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:55:56 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/../file0\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 08:55:56 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:55:56 executing program 0: r0 = syz_open_procfs(0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:55:56 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:55:56 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 08:55:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1043, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 08:55:56 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:55:56 executing program 0: r0 = syz_open_procfs(0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:55:56 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 08:55:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file1/file0\x00'}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x44009, &(0x7f0000000440)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@privport}, {@afid={'afid', 0x3d, 0x9}}, {@access_uid={'access', 0x3d, r4}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x40}}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@fscache}, {@access_any}], [{@appraise}, {@euid_gt={'euid>', r4}}, {@smackfsroot={'smackfsroot', 0x3d, '/proc/consoles\x00'}}]}}) sendfile(r0, r1, 0x0, 0x10000027f) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x38, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x575e0d97, 0x53}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 08:55:56 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:55:56 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 08:56:13 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 08:56:13 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:56:13 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:56:13 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:56:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) sendfile(r0, r1, 0x0, 0x10000027f) 08:56:13 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:56:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:56:13 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:56:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x2, 0x5, 0x2e76, 0x5, 0x10000, 0x6}, {0x7, 0x2, 0x7, 0x80000001, 0x0, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendfile(r0, r1, 0x0, 0x10000027f) 08:56:13 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:56:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:56:13 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:56:13 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:56:13 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:56:13 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 08:56:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000000)) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x8) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000140)={'wg1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendfile(r0, r1, 0x0, 0x10000027f) 08:56:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, 0x0, 0x200000, 0x0) 08:56:29 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:56:29 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:56:29 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 08:56:29 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:56:29 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x198) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r3 = fcntl$getown(r0, 0x9) r4 = getpgid(0x0) sched_rr_get_interval(r4, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) rt_tgsigqueueinfo(r5, r4, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, 0x0, 0x1) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r6, &(0x7f00000000c0)={r2, r7, 0xfffffffa}) sendfile(r1, r2, 0x0, 0x10000027f) 08:56:29 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:56:29 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 1643.723973] cgroup: fork rejected by pids controller in /syz7 08:56:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, 0x0, 0x200000, 0x0) 08:56:29 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:56:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = accept4$inet6(r0, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x0) mq_timedreceive(r0, &(0x7f00000001c0)=""/49, 0x31, 0x44, &(0x7f0000000240)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) ioctl$CDROMREADTOCHDR(r3, 0x5305, &(0x7f0000000180)={0x3, 0x69}) r4 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x800) sendfile(r2, r4, &(0x7f0000000140)=0x53f62c81, 0x9) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, 0x0, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) r6 = creat(&(0x7f0000000280)='./file1\x00', 0x10) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f00000002c0)={0x20, 0xc, 0x5, 0x0, "83f57767cdbfbbd72e42969b4f248ca252d66432e8deca03463b0a412666b15e"}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, 0x0, 0x1) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) 08:56:29 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:56:29 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:56:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, 0x0, 0x200000, 0x0) 08:56:46 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 08:56:46 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:56:46 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000003d80)=ANY=[@ANYBLOB="e4360000", @ANYRES16=r0, @ANYBLOB="040025bd7000fcdbdf254a000000080001003f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x36e4}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000003940)={0x0, 0x6, 0x0, [0x9, 0x700000000000, 0xfffffffffffffff8, 0x5, 0x6], [0x2a1, 0x3ff, 0x200, 0x3, 0x7, 0x7, 0x9, 0xff, 0x9, 0x7, 0x2, 0x3, 0x2bd5, 0x3, 0x7, 0x20, 0x1, 0x80000001, 0xe013, 0x3, 0x3, 0x9, 0x20, 0x6, 0x8, 0xfffffffffffffff8, 0x5, 0x2, 0x5220, 0x9, 0xffffffffffffffe0, 0x6, 0x800, 0xff, 0x435, 0x7, 0x8000, 0x80000000, 0x3, 0x4, 0x24, 0x8, 0xe4c8, 0x3, 0x0, 0x10000, 0x0, 0x0, 0xc00000000, 0x8, 0x2, 0x7, 0xb0f0, 0x4, 0x8a, 0x2, 0x7fffffff, 0x9, 0x1, 0x9, 0x6, 0xfffffffffffffffe, 0x8f, 0x517af022, 0x9, 0x0, 0x9, 0x40, 0xfff, 0x7f, 0x4, 0x4, 0xffffffff80000001, 0x5, 0x40, 0x4, 0x37, 0x3729e0ff, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1f, 0x6, 0x6, 0x7ff, 0x0, 0xffffffffffffff81, 0x43f, 0x7, 0x0, 0x1, 0x20400, 0x1000, 0xfffffffffffffe01, 0x101, 0x200000000, 0x8, 0x1, 0x7, 0x7fff, 0x78e, 0xe072, 0x6, 0x7, 0x7f, 0x40, 0x1, 0x6, 0x2, 0x7fffffff, 0x1, 0xeb, 0x0, 0xff, 0x5, 0x8, 0xffff, 0xe9]}) 08:56:46 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:56:46 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:56:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) 08:56:46 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:56:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 08:56:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) 08:56:46 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:56:46 executing program 6: sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0000000020801030000000000000000070000004400048008000140000000060800044000000006080003400000000408000540000000080800074000000200080007400000003f0800024000824bad1c6a96364b000008080001400000000205000300110000003400048008000240000000050800024000000040080002400000000508000140fffffff8080002400000000008000240000004010900010073797a3100000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x240480d4) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x1ff, 0xfffffe00, 0x1, 'queue0\x00', 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) 08:56:46 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:56:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) 08:56:47 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:56:47 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:56:47 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x8, 0x2, &(0x7f0000000300)=[{&(0x7f0000000100)="e55ebebcc601d8087250537a36a3c9de087eb9b8bf33038439286e6f924b0d62bdf68c8692bc13db227fb28ca0135dfbba9a62d8d839023c2110859ac35ea781b38ddae5f72ea053c9b00b6778f909c27d641464d6471b54de6a0106b5505d4b9ffe1b38c6b3492f9b37bedae1fb4ebca86ef35f002b2a74ebe69c9263583b1de3365f285639c85ba09cc864bce9b3d51eab78c43582cbb880bb6e6876cbcb8a320b41699e45de86e8ce5b9a02691379c63238d6e5c39a201984d1fe9795c84d4c9c3cc71b9680334ec7f65a3b32a094849832404cc281488b1deb14269558bc91bca602", 0xe4, 0x10001}, {&(0x7f0000000240)="08083ed8d40f9ece0f79a75ccab9fbc58e240c664a5a07579ac32d1aabf466153a8b85b8d07d6c052133e1e0188bb2c1b1d020d209665755ef0f13f7852cf27169c6700997e169a8eb6fe7b7156a081ae698927621e562389fe6ba4100a8d7a0daa8668e331fc39f209343dbef4ab9c002345b2183f7d8e2fd8afe28b4f98b51ce89949c86ab0d87dc0610087f221283464345a96df9dfb0c41c0d07cf25d3d88d35c0953ea8b68bab412c3e4343e4af651b6da10959fcd377", 0xb9, 0x1}], 0x22000, &(0x7f0000000340)={[{@uid}, {@block}, {@nocompress}, {@dmode={'dmode', 0x3d, 0x1}}, {@overriderock}], [{@fsmagic}, {@uid_eq}]}) sendfile(0xffffffffffffffff, r0, 0x0, 0x2) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000400)) [ 1661.370263] loop6: detected capacity change from 0 to 256 [ 1661.379492] loop6: detected capacity change from 0 to 256 08:57:02 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:57:02 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:57:02 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:57:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5ed8, 0x4800) write(r1, &(0x7f0000000240)="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", 0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x1, 0xffffffffffff5648}) 08:57:02 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:57:02 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:57:02 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 1677.133395] FAULT_INJECTION: forcing a failure. [ 1677.133395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1677.134647] CPU: 1 PID: 9146 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1677.135363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1677.136050] Call Trace: [ 1677.136295] [ 1677.136529] dump_stack_lvl+0xc1/0xf0 [ 1677.136566] should_fail_ex+0x4b4/0x5b0 [ 1677.136597] _copy_from_user+0x2e/0x180 [ 1677.136626] do_pages_stat+0x231/0x700 [ 1677.136650] ? __pfx_lock_release+0x10/0x10 [ 1677.136674] ? __pfx_do_pages_stat+0x10/0x10 [ 1677.136693] ? find_held_lock+0x2c/0x110 [ 1677.136718] ? cpuset_mems_allowed+0x1aa/0x440 [ 1677.136750] ? lock_release+0x1e3/0x680 [ 1677.136770] ? __pfx_lock_release+0x10/0x10 [ 1677.136788] ? __pfx_lock_release+0x10/0x10 [ 1677.136806] ? lock_is_held_type+0x9f/0x120 [ 1677.136831] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1677.136864] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1677.136948] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1677.136982] kernel_move_pages+0x1117/0x1ad0 [ 1677.137005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1677.137036] ? __pfx_kernel_move_pages+0x10/0x10 08:57:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) (fail_nth: 1) [ 1677.137060] ? fput+0x2f/0x1a0 [ 1677.137080] ? ksys_write+0x1a7/0x260 [ 1677.137108] ? __pfx_ksys_write+0x10/0x10 [ 1677.137140] __x64_sys_move_pages+0xe1/0x1c0 [ 1677.137164] ? syscall_enter_from_user_mode+0x21/0x50 [ 1677.137187] do_syscall_64+0x3f/0x90 [ 1677.137211] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1677.137242] RIP: 0033:0x7f0f10577b19 [ 1677.137257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1677.137276] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1677.137295] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1677.137309] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 08:57:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="25cdd4f3374de5b9ff400c199efb3736af2c31f84a") fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, r3}) 08:57:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) (fail_nth: 2) [ 1677.137321] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1677.137333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.137345] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1677.137371] [ 1677.179892] FAULT_INJECTION: forcing a failure. [ 1677.179892] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.179934] CPU: 0 PID: 9159 Comm: syz-executor.0 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1677.179970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1677.179987] Call Trace: [ 1677.179995] [ 1677.180006] dump_stack_lvl+0xc1/0xf0 [ 1677.180036] should_fail_ex+0x4b4/0x5b0 [ 1677.180062] ? getname_flags.part.0+0x50/0x4f0 [ 1677.180090] should_failslab+0x9/0x20 [ 1677.180112] kmem_cache_alloc+0x5a/0x390 [ 1677.180132] ? __pfx_lock_release+0x10/0x10 [ 1677.180158] getname_flags.part.0+0x50/0x4f0 [ 1677.180184] ? rcu_read_lock_any_held+0x79/0xa0 [ 1677.180211] getname+0x92/0xe0 [ 1677.180233] do_sys_openat2+0xf9/0x4c0 [ 1677.180257] ? __pfx_do_sys_openat2+0x10/0x10 [ 1677.180294] __x64_sys_openat+0x143/0x200 [ 1677.180319] ? __pfx___x64_sys_openat+0x10/0x10 [ 1677.180342] ? ksys_write+0x1a7/0x260 [ 1677.180377] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1677.180417] do_syscall_64+0x3f/0x90 [ 1677.180441] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1677.180468] RIP: 0033:0x7f31ee7a2b19 [ 1677.180482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1677.180501] RSP: 002b:00007f31ebd18188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1677.180522] RAX: ffffffffffffffda RBX: 00007f31ee8b5f60 RCX: 00007f31ee7a2b19 [ 1677.180537] RDX: 0000000000200000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1677.180550] RBP: 00007f31ebd181d0 R08: 0000000000000000 R09: 0000000000000000 [ 1677.180564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.180578] R13: 00007ffc8bb04c8f R14: 00007f31ebd18300 R15: 0000000000022000 [ 1677.180607] 08:57:03 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:57:03 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:57:03 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:57:03 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:57:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x17c}}, 0x0) 08:57:03 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) [ 1677.458923] FAULT_INJECTION: forcing a failure. [ 1677.458923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1677.460256] CPU: 0 PID: 9178 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1677.460941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1677.461607] Call Trace: [ 1677.461827] [ 1677.462079] dump_stack_lvl+0xc1/0xf0 [ 1677.462460] should_fail_ex+0x4b4/0x5b0 [ 1677.462800] _copy_to_user+0x2e/0x150 [ 1677.463144] do_pages_stat+0x588/0x700 [ 1677.463497] ? __pfx_lock_release+0x10/0x10 [ 1677.463890] ? __pfx_do_pages_stat+0x10/0x10 [ 1677.464299] ? lock_release+0x1e3/0x680 [ 1677.464661] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1677.465172] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1677.465630] kernel_move_pages+0x1117/0x1ad0 [ 1677.466017] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1677.466505] ? __pfx_kernel_move_pages+0x10/0x10 [ 1677.466952] ? fput+0x2f/0x1a0 [ 1677.467247] ? ksys_write+0x1a7/0x260 [ 1677.467583] ? __pfx_ksys_write+0x10/0x10 [ 1677.467972] __x64_sys_move_pages+0xe1/0x1c0 [ 1677.468383] ? syscall_enter_from_user_mode+0x21/0x50 [ 1677.468841] do_syscall_64+0x3f/0x90 [ 1677.469260] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1677.469726] RIP: 0033:0x7f0f10577b19 [ 1677.470095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1677.471613] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1677.472235] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1677.472805] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1677.473444] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1677.474114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.474734] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1677.475392] 08:57:17 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:57:17 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x71}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:57:17 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 3) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:57:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="565491d3", 0x4}, {&(0x7f00000000c0)="3ea528d30305ba38d9b96e98c53ac32987068d82f4bb618958c6aa0fa60d4cbc3ceae281333e752b9739df643500bf16c4dafad4463d7f50b668933dcba7e00f3c27009a8498a4faa2a363b96933b381101c4f2bbf3d082fa6fd579f0d9be47943b63e04ed1cf34d4e582860628ccd373808ace8e96f584e78c33380569e0d55337159b4ca536f81ee", 0x89}, {&(0x7f0000000240)="2923209ea9cdc59df2932d1e9f8ec8050c2f9801136361582dbebcd8309d82e85a872ac9d54a24293182435a1ab3cecf67028293a05fad6f1bae8a4846660423e5e246df3698e6ac4595aff1358f16eb323fe009322190b7d50a80022e2bc72827a45f8d2abf80301b0b129bf14acdf738b80268218fa1bca9700684de315728d0ee58f74366445334adc4b6990171893b81573c86d6fb9027a1f0febbcf132821a2d075852aee659ba08f777f95d9537ba8a228e614947d63a3c7b9dd7ae88d00b98ef3086dbc18f0eec43e75aba856f2818960e175c0c6900b80e0596f872f5d8b356d62876589459733ab3e", 0xed}], 0x3, 0x800, 0x4ea5) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) write$binfmt_aout(r2, &(0x7f0000000400)={{0xcc, 0x0, 0x6e, 0x16f, 0x247, 0x10000, 0x179, 0x2}, "7b08155e73f2269614fcfae0f474c3182e04f985fc929ebe3d1a5fdd60cfe1b6b05c470a7d550ceed00c383c1f23747db1caa22bf53eee0e4bdd555ffafe53a1dc34", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa62) sendfile(r0, r1, 0x0, 0x10000027f) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10010, r1, 0x8000000) openat(r1, &(0x7f00000001c0)='./file1\x00', 0x200, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0xa, 0x7fff, &(0x7f0000000340)="b37711d3a0e39393536a8ceeb4f73c1f6ce9028df235ffdef8a2a4c8974571a5a5686edf9016a0b3737d970ada833be2a4b221405731c8b751d82a3016b9843002b8038c7dc1153347e69a3591bc9e1b6c92440689cd2502850a5a8c07826746b14851e7702d48801cec15660b6ba5319ddbd28c2d2ad404dee002dc4d018967d5cfa0f8146657a93344de6c99b6839dfd7d05c5eacb10310bbb0ba942cc993040c01daa269df8e3446e90b6ab11666ff8b582f194d8a603", 0xb8, 0x8, 0x1}, 0xdb0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', 0x0, 0x20) 08:57:17 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 08:57:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) (fail_nth: 3) 08:57:17 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:57:17 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) [ 1691.540575] FAULT_INJECTION: forcing a failure. [ 1691.540575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.542186] CPU: 0 PID: 9198 Comm: syz-executor.0 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1691.543245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1691.544308] Call Trace: [ 1691.544657] [ 1691.544972] dump_stack_lvl+0xc1/0xf0 [ 1691.545539] should_fail_ex+0x4b4/0x5b0 [ 1691.546087] strncpy_from_user+0x38/0x3f0 [ 1691.546664] getname_flags.part.0+0x95/0x4f0 [ 1691.547274] ? rcu_read_lock_any_held+0x79/0xa0 [ 1691.547916] getname+0x92/0xe0 [ 1691.548375] do_sys_openat2+0xf9/0x4c0 [ 1691.548919] ? __pfx_do_sys_openat2+0x10/0x10 [ 1691.549574] __x64_sys_openat+0x143/0x200 [ 1691.550192] ? __pfx___x64_sys_openat+0x10/0x10 [ 1691.550891] ? ksys_write+0x1a7/0x260 [ 1691.551436] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1691.552254] do_syscall_64+0x3f/0x90 [ 1691.552834] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1691.553603] RIP: 0033:0x7f31ee7a2b19 [ 1691.554147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.556756] RSP: 002b:00007f31ebd18188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1691.557389] FAULT_INJECTION: forcing a failure. [ 1691.557389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.557873] RAX: ffffffffffffffda RBX: 00007f31ee8b5f60 RCX: 00007f31ee7a2b19 [ 1691.557900] RDX: 0000000000200000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1691.557922] RBP: 00007f31ebd181d0 R08: 0000000000000000 R09: 0000000000000000 [ 1691.557945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.562775] R13: 00007ffc8bb04c8f R14: 00007f31ebd18300 R15: 0000000000022000 [ 1691.563829] [ 1691.564179] CPU: 1 PID: 9200 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1691.564764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1691.565348] Call Trace: [ 1691.565536] [ 1691.565705] dump_stack_lvl+0xc1/0xf0 [ 1691.565996] should_fail_ex+0x4b4/0x5b0 [ 1691.566296] _copy_from_user+0x2e/0x180 [ 1691.566593] do_pages_stat+0x231/0x700 [ 1691.566886] ? __pfx_lock_release+0x10/0x10 [ 1691.567210] ? __pfx_do_pages_stat+0x10/0x10 [ 1691.567538] ? lock_release+0x1e3/0x680 [ 1691.567839] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1691.568218] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1691.568592] kernel_move_pages+0x1117/0x1ad0 [ 1691.568921] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1691.569325] ? __pfx_kernel_move_pages+0x10/0x10 [ 1691.569681] ? fput+0x2f/0x1a0 [ 1691.569929] ? ksys_write+0x1a7/0x260 [ 1691.570220] ? __pfx_ksys_write+0x10/0x10 [ 1691.570543] __x64_sys_move_pages+0xe1/0x1c0 [ 1691.570874] ? syscall_enter_from_user_mode+0x21/0x50 [ 1691.571250] do_syscall_64+0x3f/0x90 [ 1691.571537] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1691.571930] RIP: 0033:0x7f0f10577b19 [ 1691.572217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.573541] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1691.574092] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1691.574634] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1691.575148] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1691.575658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.576171] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1691.576693] 08:57:17 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 1691.604295] FAULT_INJECTION: forcing a failure. [ 1691.604295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.605230] CPU: 1 PID: 9210 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1691.605970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1691.606524] Call Trace: [ 1691.606704] [ 1691.606869] dump_stack_lvl+0xc1/0xf0 [ 1691.607139] should_fail_ex+0x4b4/0x5b0 [ 1691.607426] _copy_to_user+0x2e/0x150 [ 1691.607704] do_pages_stat+0x588/0x700 [ 1691.607980] ? __pfx_lock_release+0x10/0x10 [ 1691.608284] ? __pfx_do_pages_stat+0x10/0x10 [ 1691.608589] ? lock_release+0x1e3/0x680 [ 1691.608880] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1691.609261] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1691.609623] kernel_move_pages+0x1117/0x1ad0 [ 1691.609937] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1691.610304] ? __pfx_kernel_move_pages+0x10/0x10 [ 1691.610642] ? fput+0x2f/0x1a0 [ 1691.610877] ? ksys_write+0x1a7/0x260 [ 1691.611151] ? __pfx_ksys_write+0x10/0x10 [ 1691.611449] __x64_sys_move_pages+0xe1/0x1c0 [ 1691.611762] ? syscall_enter_from_user_mode+0x21/0x50 [ 1691.612114] do_syscall_64+0x3f/0x90 [ 1691.612409] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1691.612905] RIP: 0033:0x7f0f10577b19 [ 1691.613175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.614721] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1691.615445] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1691.615984] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1691.616500] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1691.617012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.617534] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1691.618047] 08:57:17 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x121}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:57:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) (fail_nth: 4) 08:57:17 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f) write(0xffffffffffffffff, &(0x7f00000000c0)="e1f91a437270406e3d79efd9ddde3643faefb62ee013c8f761d9485d6dee899c7ca34e58bad2d10b85c2b55fe8e7c3e65dab4efc14b91939856b37268a3aab9814523e3e8a64276873cf5fd0428aa0cbb3466b699e3cf2961897850b8b9929a59a5b5989bd43a18bd768bdc139be239ada66cfee4f5931225fb84fbc473968a36249b3897936384156d1529b0486a2d674ef3b4aeee4b79e4203962e8811c5f73ff701f0a9ac018da8cedcf949f0419da12d2d17cf8bc8092498cb6fdbef3448888cb4f2d29e13eec667f5f9d46290409f8ec50340decc26930b5d36e75c33ea", 0xe0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0xd80e, 0x0, 0x8000, 0x5}) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c6530205e5e2b2c20254d20e5c2dbfd992e81b0f3592f70726f632f636f6e736f6c6573000a628e81911a00827e688e0c4bdf4e5cf34ced0c93b15657342a5b942ca9281b1ee93174acf39c560a9a6f40854dbc4cf6f1528aebb1de91b111a853943fe5b0f363982405dd65e9522e926784137ff494"], 0x6b) 08:57:17 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:57:17 executing program 5: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:17 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 5) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 1691.736862] FAULT_INJECTION: forcing a failure. [ 1691.736862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.737739] CPU: 1 PID: 9219 Comm: syz-executor.0 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1691.738291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1691.738856] Call Trace: [ 1691.739036] [ 1691.739204] dump_stack_lvl+0xc1/0xf0 [ 1691.739484] should_fail_ex+0x4b4/0x5b0 [ 1691.739765] strncpy_from_user+0x38/0x3f0 [ 1691.740064] getname_flags.part.0+0x95/0x4f0 [ 1691.740386] ? rcu_read_lock_any_held+0x79/0xa0 [ 1691.740732] getname+0x92/0xe0 [ 1691.740976] do_sys_openat2+0xf9/0x4c0 [ 1691.741271] ? __pfx_do_sys_openat2+0x10/0x10 [ 1691.741590] __x64_sys_openat+0x143/0x200 [ 1691.741884] ? __pfx___x64_sys_openat+0x10/0x10 [ 1691.742204] ? ksys_write+0x1a7/0x260 [ 1691.742482] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1691.742861] do_syscall_64+0x3f/0x90 [ 1691.743129] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1691.743497] RIP: 0033:0x7f31ee7a2b19 [ 1691.743758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.744967] RSP: 002b:00007f31ebd18188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1691.745489] RAX: ffffffffffffffda RBX: 00007f31ee8b5f60 RCX: 00007f31ee7a2b19 [ 1691.745967] RDX: 0000000000200000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1691.746445] RBP: 00007f31ebd181d0 R08: 0000000000000000 R09: 0000000000000000 [ 1691.746929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.747441] R13: 00007ffc8bb04c8f R14: 00007f31ebd18300 R15: 0000000000022000 [ 1691.747967] 08:57:17 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x122}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1691.801307] FAULT_INJECTION: forcing a failure. [ 1691.801307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.802262] CPU: 1 PID: 9230 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1691.802842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1691.803418] Call Trace: [ 1691.803611] [ 1691.803780] dump_stack_lvl+0xc1/0xf0 [ 1691.804077] should_fail_ex+0x4b4/0x5b0 [ 1691.804379] _copy_from_user+0x2e/0x180 [ 1691.804679] do_pages_stat+0x231/0x700 [ 1691.804972] ? __pfx_lock_release+0x10/0x10 [ 1691.805304] ? __pfx_do_pages_stat+0x10/0x10 [ 1691.805635] ? lock_release+0x1e3/0x680 [ 1691.805938] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1691.806322] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1691.806704] kernel_move_pages+0x1117/0x1ad0 [ 1691.807031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1691.807402] ? __pfx_kernel_move_pages+0x10/0x10 [ 1691.807759] ? fput+0x2f/0x1a0 [ 1691.808008] ? ksys_write+0x1a7/0x260 [ 1691.808300] ? __pfx_ksys_write+0x10/0x10 [ 1691.808613] __x64_sys_move_pages+0xe1/0x1c0 [ 1691.808926] ? syscall_enter_from_user_mode+0x21/0x50 [ 1691.809324] do_syscall_64+0x3f/0x90 [ 1691.809609] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1691.809992] RIP: 0033:0x7f0f10577b19 [ 1691.810262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.811529] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1691.812070] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1691.812576] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1691.813097] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1691.813606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.814113] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1691.814631] 08:57:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) (fail_nth: 5) 08:57:17 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x126}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1691.915131] FAULT_INJECTION: forcing a failure. [ 1691.915131] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.916032] CPU: 1 PID: 9237 Comm: syz-executor.0 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1691.916594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1691.917160] Call Trace: [ 1691.917346] [ 1691.917509] dump_stack_lvl+0xc1/0xf0 [ 1691.917794] should_fail_ex+0x4b4/0x5b0 [ 1691.918077] ? __alloc_file+0x21/0x240 [ 1691.918355] should_failslab+0x9/0x20 [ 1691.918627] kmem_cache_alloc+0x5a/0x390 [ 1691.918916] __alloc_file+0x21/0x240 [ 1691.919180] alloc_empty_file+0x71/0x190 [ 1691.919469] path_openat+0xd8/0x2750 [ 1691.919751] ? __pfx_path_openat+0x10/0x10 [ 1691.920060] ? __create_object+0x3ee/0xc90 [ 1691.920373] do_filp_open+0x1ba/0x410 [ 1691.920655] ? __pfx_do_filp_open+0x10/0x10 [ 1691.920963] ? expand_files+0x446/0x8e0 [ 1691.921253] ? find_held_lock+0x2c/0x110 [ 1691.921543] ? alloc_fd+0x2eb/0x760 [ 1691.921804] ? lock_release+0x1e3/0x680 [ 1691.922089] ? do_raw_spin_lock+0x125/0x270 [ 1691.922388] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1691.922721] ? _raw_spin_unlock+0x1e/0x40 [ 1691.923021] ? alloc_fd+0x2eb/0x760 [ 1691.923290] do_sys_openat2+0x171/0x4c0 [ 1691.923579] ? __pfx_do_sys_openat2+0x10/0x10 [ 1691.923904] __x64_sys_openat+0x143/0x200 [ 1691.924208] ? __pfx___x64_sys_openat+0x10/0x10 [ 1691.924559] ? ksys_write+0x1a7/0x260 [ 1691.924857] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1691.925256] do_syscall_64+0x3f/0x90 [ 1691.925539] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1691.925922] RIP: 0033:0x7f31ee7a2b19 [ 1691.926205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.927488] RSP: 002b:00007f31ebd18188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1691.928030] RAX: ffffffffffffffda RBX: 00007f31ee8b5f60 RCX: 00007f31ee7a2b19 [ 1691.928536] RDX: 0000000000200000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1691.929044] RBP: 00007f31ebd181d0 R08: 0000000000000000 R09: 0000000000000000 [ 1691.929562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.930075] R13: 00007ffc8bb04c8f R14: 00007f31ebd18300 R15: 0000000000022000 [ 1691.930595] 08:57:33 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:57:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) (fail_nth: 6) 08:57:33 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:57:33 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:57:33 executing program 5: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:33 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fedbdf25080000000c0006800800010004000000030008000000200005801c000280080001000b0000000800030002000000080001001a00"/78], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4004) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000003000000020700009b0000002b000000"], 0x400600) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x144, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4080}, 0x90) 08:57:33 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 6) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:57:33 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x1c3}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1707.848875] FAULT_INJECTION: forcing a failure. [ 1707.848875] name failslab, interval 1, probability 0, space 0, times 0 [ 1707.849998] CPU: 0 PID: 9253 Comm: syz-executor.0 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1707.850701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1707.851419] Call Trace: [ 1707.851650] [ 1707.851864] dump_stack_lvl+0xc1/0xf0 [ 1707.852227] should_fail_ex+0x4b4/0x5b0 [ 1707.852592] ? security_file_alloc+0x38/0x170 [ 1707.853002] should_failslab+0x9/0x20 [ 1707.853386] kmem_cache_alloc+0x5a/0x390 [ 1707.853757] security_file_alloc+0x38/0x170 [ 1707.854155] __alloc_file+0xb6/0x240 [ 1707.854523] alloc_empty_file+0x71/0x190 [ 1707.854903] path_openat+0xd8/0x2750 [ 1707.855269] ? __pfx_path_openat+0x10/0x10 [ 1707.855675] ? __create_object+0x3ee/0xc90 [ 1707.856073] do_filp_open+0x1ba/0x410 [ 1707.856464] ? __pfx_do_filp_open+0x10/0x10 [ 1707.856851] ? expand_files+0x446/0x8e0 [ 1707.857246] ? find_held_lock+0x2c/0x110 [ 1707.857657] ? alloc_fd+0x2eb/0x760 [ 1707.858011] ? lock_release+0x1e3/0x680 [ 1707.858368] ? do_raw_spin_lock+0x125/0x270 [ 1707.858753] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1707.859184] ? _raw_spin_unlock+0x1e/0x40 [ 1707.859610] ? alloc_fd+0x2eb/0x760 [ 1707.859964] do_sys_openat2+0x171/0x4c0 [ 1707.860331] ? __pfx_do_sys_openat2+0x10/0x10 [ 1707.860765] __x64_sys_openat+0x143/0x200 [ 1707.861186] ? __pfx___x64_sys_openat+0x10/0x10 [ 1707.861211] ? ksys_write+0x1a7/0x260 [ 1707.861243] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1707.861320] do_syscall_64+0x3f/0x90 [ 1707.861349] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1707.861380] RIP: 0033:0x7f31ee7a2b19 [ 1707.861398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1707.861420] RSP: 002b:00007f31ebd18188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 08:57:33 executing program 5: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1707.861443] RAX: ffffffffffffffda RBX: 00007f31ee8b5f60 RCX: 00007f31ee7a2b19 [ 1707.861459] RDX: 0000000000200000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1707.861475] RBP: 00007f31ebd181d0 R08: 0000000000000000 R09: 0000000000000000 [ 1707.861490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 08:57:33 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x1c4}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1707.861504] R13: 00007ffc8bb04c8f R14: 00007f31ebd18300 R15: 0000000000022000 [ 1707.861537] [ 1707.870390] FAULT_INJECTION: forcing a failure. [ 1707.870390] name fail_usercopy, interval 1, probability 0, space 0, times 0 08:57:33 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) [ 1707.870425] CPU: 0 PID: 9254 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1707.870449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1707.870461] Call Trace: [ 1707.870467] [ 1707.870475] dump_stack_lvl+0xc1/0xf0 [ 1707.870507] should_fail_ex+0x4b4/0x5b0 [ 1707.870536] _copy_to_user+0x2e/0x150 [ 1707.870561] do_pages_stat+0x588/0x700 [ 1707.870592] ? __pfx_lock_release+0x10/0x10 [ 1707.870622] ? __pfx_do_pages_stat+0x10/0x10 [ 1707.870650] ? lock_release+0x1e3/0x680 [ 1707.870683] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1707.870720] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1707.870758] kernel_move_pages+0x1117/0x1ad0 [ 1707.870783] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1707.870817] ? __pfx_kernel_move_pages+0x10/0x10 08:57:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) (fail_nth: 7) [ 1707.870844] ? fput+0x2f/0x1a0 [ 1707.870865] ? ksys_write+0x1a7/0x260 [ 1707.870896] ? __pfx_ksys_write+0x10/0x10 [ 1707.870931] __x64_sys_move_pages+0xe1/0x1c0 [ 1707.870958] ? syscall_enter_from_user_mode+0x21/0x50 [ 1707.870983] do_syscall_64+0x3f/0x90 [ 1707.871009] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1707.871038] RIP: 0033:0x7f0f10577b19 [ 1707.871053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1707.871075] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1707.871096] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1707.871111] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1707.871126] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1707.871139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1707.871153] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1707.871182] 08:57:33 executing program 5: move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0) 08:57:33 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x1c5}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:57:33 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 7) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:57:33 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 1708.131908] FAULT_INJECTION: forcing a failure. [ 1708.131908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1708.133392] CPU: 1 PID: 9279 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1708.134106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1708.134713] Call Trace: [ 1708.134944] [ 1708.135150] dump_stack_lvl+0xc1/0xf0 [ 1708.135487] should_fail_ex+0x4b4/0x5b0 [ 1708.135832] _copy_from_user+0x2e/0x180 [ 1708.136170] do_pages_stat+0x231/0x700 [ 1708.136522] ? __pfx_do_pages_stat+0x10/0x10 [ 1708.136932] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1708.137403] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 1708.137876] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1708.138339] kernel_move_pages+0x1117/0x1ad0 [ 1708.138732] ? ktime_get+0x157/0x1f0 [ 1708.139076] ? __pfx_lapic_next_deadline+0x10/0x10 [ 1708.139506] ? __pfx_kernel_move_pages+0x10/0x10 [ 1708.139941] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1708.140441] __x64_sys_move_pages+0xe1/0x1c0 [ 1708.140841] ? __x64_sys_move_pages+0x4/0x1c0 [ 1708.141228] do_syscall_64+0x3f/0x90 [ 1708.141571] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1708.142036] RIP: 0033:0x7f0f10577b19 [ 1708.142371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1708.143816] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1708.144447] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1708.145078] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1708.145697] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1708.146292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1708.146881] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1708.147502] 08:57:49 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:57:49 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:57:49 executing program 5: move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0) 08:57:49 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:57:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) (fail_nth: 8) 08:57:49 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x1c6}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:57:49 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 1723.918302] FAULT_INJECTION: forcing a failure. [ 1723.918302] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.919311] CPU: 1 PID: 9296 Comm: syz-executor.0 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1723.920016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1723.920712] Call Trace: [ 1723.920945] [ 1723.921147] dump_stack_lvl+0xc1/0xf0 [ 1723.921543] should_fail_ex+0x4b4/0x5b0 [ 1723.921908] should_failslab+0x9/0x20 [ 1723.922250] kmem_cache_alloc_lru+0x6b/0x600 [ 1723.922658] ? __d_alloc+0x31/0x9c0 [ 1723.923001] __d_alloc+0x31/0x9c0 [ 1723.923335] d_alloc_parallel+0x10e/0x1640 [ 1723.923723] ? __lock_acquire+0x1936/0x63b0 [ 1723.924120] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1723.924538] ? lockdep_init_map_type+0x21e/0x7e0 [ 1723.924957] ? lock_acquire+0x19a/0x4c0 [ 1723.925315] ? lockdep_init_map_type+0x21e/0x7e0 [ 1723.925763] __lookup_slow+0x193/0x470 [ 1723.926116] ? __pfx___lookup_slow+0x10/0x10 [ 1723.926518] ? __pfx_lock_acquire+0x10/0x10 [ 1723.926905] ? lockref_get_not_dead+0x6a/0x80 [ 1723.927325] walk_component+0x345/0x5b0 [ 1723.927694] path_lookupat+0x1ba/0x850 [ 1723.928051] path_openat+0x173b/0x2750 [ 1723.928407] ? __pfx_path_openat+0x10/0x10 [ 1723.928801] ? __create_object+0x3ee/0xc90 [ 1723.929194] do_filp_open+0x1ba/0x410 [ 1723.929591] ? __pfx_do_filp_open+0x10/0x10 [ 1723.929974] ? expand_files+0x446/0x8e0 [ 1723.930332] ? find_held_lock+0x2c/0x110 [ 1723.930719] ? do_raw_spin_lock+0x125/0x270 [ 1723.931099] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1723.931510] ? _raw_spin_unlock+0x1e/0x40 [ 1723.931888] ? alloc_fd+0x2eb/0x760 [ 1723.932242] do_sys_openat2+0x171/0x4c0 [ 1723.932616] ? __pfx_do_sys_openat2+0x10/0x10 [ 1723.933038] __x64_sys_openat+0x143/0x200 [ 1723.933415] ? __pfx___x64_sys_openat+0x10/0x10 [ 1723.933870] ? ksys_write+0x1a7/0x260 [ 1723.934230] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1723.934716] do_syscall_64+0x3f/0x90 [ 1723.935045] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1723.935510] RIP: 0033:0x7f31ee7a2b19 [ 1723.935847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1723.937130] FAULT_INJECTION: forcing a failure. [ 1723.937130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1723.937341] RSP: 002b:00007f31ebd18188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1723.938964] RAX: ffffffffffffffda RBX: 00007f31ee8b5f60 RCX: 00007f31ee7a2b19 [ 1723.939552] RDX: 0000000000200000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1723.940143] RBP: 00007f31ebd181d0 R08: 0000000000000000 R09: 0000000000000000 [ 1723.940742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.941337] R13: 00007ffc8bb04c8f R14: 00007f31ebd18300 R15: 0000000000022000 [ 1723.941986] [ 1723.942200] CPU: 0 PID: 9301 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1723.942922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1723.943623] Call Trace: [ 1723.943857] [ 1723.944070] dump_stack_lvl+0xc1/0xf0 [ 1723.944101] should_fail_ex+0x4b4/0x5b0 [ 1723.944127] _copy_to_user+0x2e/0x150 [ 1723.944152] do_pages_stat+0x588/0x700 [ 1723.944180] ? __pfx_lock_release+0x10/0x10 [ 1723.944209] ? __pfx_do_pages_stat+0x10/0x10 08:57:49 executing program 5: move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0) [ 1723.944235] ? lock_release+0x1e3/0x680 08:57:49 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x1c9}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1723.944267] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1723.944306] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1723.944341] kernel_move_pages+0x1117/0x1ad0 [ 1723.944365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1723.944401] ? __pfx_kernel_move_pages+0x10/0x10 [ 1723.944428] ? fput+0x2f/0x1a0 [ 1723.944450] ? ksys_write+0x1a7/0x260 [ 1723.944481] ? __pfx_ksys_write+0x10/0x10 [ 1723.944516] __x64_sys_move_pages+0xe1/0x1c0 [ 1723.944542] ? syscall_enter_from_user_mode+0x21/0x50 [ 1723.944566] do_syscall_64+0x3f/0x90 [ 1723.944590] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1723.944619] RIP: 0033:0x7f0f10577b19 [ 1723.944635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1723.944657] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1723.944678] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1723.944692] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1723.944706] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1723.944720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.944732] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1723.944760] 08:57:49 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 9) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:57:49 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:57:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000000)={0x0, 0x9ab3, 0x2, 0x2, 0x243}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x3, 0x0, 0x7, 0x0, 0x1}, 0xffff0001) sendfile(r0, r1, 0x0, 0x10000027f) 08:57:49 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) (fail_nth: 1) 08:57:49 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:57:49 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x1d1}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:57:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) (fail_nth: 9) [ 1724.116404] FAULT_INJECTION: forcing a failure. [ 1724.116404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1724.117928] CPU: 0 PID: 9313 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1724.118616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1724.119447] Call Trace: [ 1724.119677] [ 1724.119886] dump_stack_lvl+0xc1/0xf0 [ 1724.120240] should_fail_ex+0x4b4/0x5b0 [ 1724.120594] _copy_from_user+0x2e/0x180 [ 1724.120940] do_pages_stat+0x231/0x700 [ 1724.121286] ? __pfx_lock_release+0x10/0x10 [ 1724.125740] ? __pfx_do_pages_stat+0x10/0x10 [ 1724.126058] ? lock_release+0x1e3/0x680 [ 1724.126330] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1724.126698] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1724.127062] kernel_move_pages+0x1117/0x1ad0 [ 1724.127371] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1724.127737] ? __pfx_kernel_move_pages+0x10/0x10 [ 1724.128063] ? fput+0x2f/0x1a0 [ 1724.128292] ? ksys_write+0x1a7/0x260 [ 1724.128564] ? __pfx_ksys_write+0x10/0x10 [ 1724.128859] __x64_sys_move_pages+0xe1/0x1c0 [ 1724.129163] ? syscall_enter_from_user_mode+0x21/0x50 [ 1724.129532] do_syscall_64+0x3f/0x90 [ 1724.129797] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1724.130160] RIP: 0033:0x7f0f10577b19 [ 1724.130418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1724.131608] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1724.132113] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1724.132585] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1724.133098] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1724.133672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.134236] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1724.134816] [ 1724.161183] FAULT_INJECTION: forcing a failure. [ 1724.161183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1724.162411] CPU: 0 PID: 9318 Comm: syz-executor.5 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1724.163116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1724.163814] Call Trace: [ 1724.164058] [ 1724.164284] dump_stack_lvl+0xc1/0xf0 [ 1724.164635] should_fail_ex+0x4b4/0x5b0 [ 1724.164996] _copy_from_user+0x2e/0x180 [ 1724.165351] do_pages_stat+0x231/0x700 [ 1724.165787] ? __pfx_lock_release+0x10/0x10 [ 1724.166240] ? __pfx_do_pages_stat+0x10/0x10 [ 1724.166649] ? find_held_lock+0x2c/0x110 [ 1724.167027] ? cpuset_mems_allowed+0x1aa/0x440 [ 1724.167451] ? lock_release+0x1e3/0x680 [ 1724.167816] ? __pfx_lock_release+0x10/0x10 [ 1724.168241] ? __pfx_lock_release+0x10/0x10 [ 1724.168615] ? lock_is_held_type+0x9f/0x120 [ 1724.168998] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1724.169477] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1724.169949] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1724.170416] kernel_move_pages+0x1117/0x1ad0 [ 1724.170814] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1724.171285] ? __pfx_kernel_move_pages+0x10/0x10 [ 1724.171713] ? fput+0x2f/0x1a0 [ 1724.172029] ? ksys_write+0x1a7/0x260 [ 1724.172388] ? __pfx_ksys_write+0x10/0x10 [ 1724.172775] __x64_sys_move_pages+0xe1/0x1c0 [ 1724.173182] ? syscall_enter_from_user_mode+0x21/0x50 [ 1724.173689] do_syscall_64+0x3f/0x90 [ 1724.174036] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1724.174504] RIP: 0033:0x7fb1d2b8bb19 [ 1724.174835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1724.176424] RSP: 002b:00007fb1d0101188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1724.177094] RAX: ffffffffffffffda RBX: 00007fb1d2c9ef60 RCX: 00007fb1d2b8bb19 [ 1724.177725] RDX: 0000000020000640 RSI: 0000000000000001 RDI: 0000000000000000 [ 1724.178358] RBP: 00007fb1d01011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1724.179018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.179632] R13: 00007ffe4ccb1aaf R14: 00007fb1d0101300 R15: 0000000000022000 [ 1724.180272] [ 1724.195050] FAULT_INJECTION: forcing a failure. [ 1724.195050] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.196103] CPU: 0 PID: 9323 Comm: syz-executor.0 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1724.196761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1724.197467] Call Trace: [ 1724.197723] [ 1724.197927] dump_stack_lvl+0xc1/0xf0 [ 1724.198283] should_fail_ex+0x4b4/0x5b0 [ 1724.198650] should_failslab+0x9/0x20 [ 1724.198982] kmem_cache_alloc_lru+0x6b/0x600 [ 1724.199375] ? __d_alloc+0x31/0x9c0 [ 1724.199724] __d_alloc+0x31/0x9c0 [ 1724.200050] d_alloc_parallel+0x10e/0x1640 [ 1724.200404] ? __lock_acquire+0x1936/0x63b0 [ 1724.200796] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1724.201213] ? lockdep_init_map_type+0x21e/0x7e0 [ 1724.201666] ? lock_acquire+0x19a/0x4c0 [ 1724.202029] ? lockdep_init_map_type+0x21e/0x7e0 [ 1724.202474] __lookup_slow+0x193/0x470 [ 1724.202815] ? __pfx___lookup_slow+0x10/0x10 [ 1724.203195] ? __pfx_lock_acquire+0x10/0x10 [ 1724.203576] ? lockref_get_not_dead+0x6a/0x80 [ 1724.203993] walk_component+0x345/0x5b0 [ 1724.204361] path_lookupat+0x1ba/0x850 [ 1724.204727] path_openat+0x173b/0x2750 [ 1724.205104] ? __pfx_path_openat+0x10/0x10 [ 1724.205491] ? __create_object+0x3ee/0xc90 [ 1724.205914] do_filp_open+0x1ba/0x410 [ 1724.206260] ? __pfx_do_filp_open+0x10/0x10 [ 1724.206631] ? expand_files+0x446/0x8e0 [ 1724.206971] ? find_held_lock+0x2c/0x110 [ 1724.207371] ? do_raw_spin_lock+0x125/0x270 [ 1724.207783] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1724.208216] ? _raw_spin_unlock+0x1e/0x40 [ 1724.208609] ? alloc_fd+0x2eb/0x760 [ 1724.208958] do_sys_openat2+0x171/0x4c0 [ 1724.209311] ? __pfx_do_sys_openat2+0x10/0x10 [ 1724.209752] __x64_sys_openat+0x143/0x200 [ 1724.210131] ? __pfx___x64_sys_openat+0x10/0x10 [ 1724.210555] ? ksys_write+0x1a7/0x260 [ 1724.210900] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1724.211380] do_syscall_64+0x3f/0x90 [ 1724.211720] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1724.212174] RIP: 0033:0x7f31ee7a2b19 [ 1724.212506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1724.214000] RSP: 002b:00007f31ebd18188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1724.214625] RAX: ffffffffffffffda RBX: 00007f31ee8b5f60 RCX: 00007f31ee7a2b19 [ 1724.215240] RDX: 0000000000200000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1724.215818] RBP: 00007f31ebd181d0 R08: 0000000000000000 R09: 0000000000000000 [ 1724.216443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.217018] R13: 00007ffc8bb04c8f R14: 00007f31ebd18300 R15: 0000000000022000 [ 1724.217659] 08:58:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4048881) sendfile(r0, r1, 0x0, 0x10000027f) 08:58:05 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:58:05 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) (fail_nth: 2) 08:58:05 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:05 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) (fail_nth: 10) 08:58:05 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x300}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:58:05 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) [ 1740.048457] FAULT_INJECTION: forcing a failure. [ 1740.048457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.049902] CPU: 1 PID: 9342 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1740.050598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1740.051279] Call Trace: [ 1740.051505] [ 1740.051716] dump_stack_lvl+0xc1/0xf0 [ 1740.052061] should_fail_ex+0x4b4/0x5b0 [ 1740.052415] _copy_to_user+0x2e/0x150 [ 1740.052762] do_pages_stat+0x588/0x700 [ 1740.053118] ? __pfx_lock_release+0x10/0x10 [ 1740.053496] ? __pfx_do_pages_stat+0x10/0x10 [ 1740.053941] ? lock_release+0x1e3/0x680 [ 1740.054290] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1740.054749] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1740.055185] kernel_move_pages+0x1117/0x1ad0 [ 1740.055555] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1740.056007] ? __pfx_kernel_move_pages+0x10/0x10 [ 1740.056440] ? fput+0x2f/0x1a0 [ 1740.056742] ? ksys_write+0x1a7/0x260 [ 1740.057119] ? __pfx_ksys_write+0x10/0x10 [ 1740.057152] __x64_sys_move_pages+0xe1/0x1c0 [ 1740.057179] ? syscall_enter_from_user_mode+0x21/0x50 [ 1740.057204] do_syscall_64+0x3f/0x90 [ 1740.057230] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1740.057258] RIP: 0033:0x7f0f10577b19 [ 1740.057274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.057294] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 08:58:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x5, 0x6e, 0x8001, 0x7ff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) [ 1740.057314] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 08:58:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) [ 1740.057329] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1740.057341] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1740.057356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 08:58:05 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x600}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1740.057369] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1740.057398] 08:58:05 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) (fail_nth: 3) [ 1740.063757] FAULT_INJECTION: forcing a failure. [ 1740.063757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.063815] CPU: 1 PID: 9347 Comm: syz-executor.0 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1740.063839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1740.063852] Call Trace: [ 1740.063858] [ 1740.063866] dump_stack_lvl+0xc1/0xf0 [ 1740.063901] should_fail_ex+0x4b4/0x5b0 [ 1740.063935] _copy_to_user+0x2e/0x150 [ 1740.063966] simple_read_from_buffer+0xd0/0x170 [ 1740.064007] proc_fail_nth_read+0x19c/0x230 [ 1740.064043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1740.064076] ? security_file_permission+0xb5/0xe0 [ 1740.064119] vfs_read+0x260/0x940 [ 1740.064155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1740.064181] ? __pfx_vfs_read+0x10/0x10 [ 1740.064218] ? __fget_files+0x270/0x480 [ 1740.064254] ksys_read+0x12b/0x260 [ 1740.064280] ? __pfx_ksys_read+0x10/0x10 [ 1740.064310] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 08:58:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200002, 0x0) [ 1740.064349] do_syscall_64+0x3f/0x90 [ 1740.064373] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1740.064399] RIP: 0033:0x7f31ee75569c [ 1740.064414] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1740.064432] RSP: 002b:00007f31ebd18170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1740.064451] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f31ee75569c [ 1740.064465] RDX: 000000000000000f RSI: 00007f31ebd181e0 RDI: 0000000000000004 [ 1740.064477] RBP: 00007f31ebd181d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.064489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.064500] R13: 00007ffc8bb04c8f R14: 00007f31ebd18300 R15: 0000000000022000 [ 1740.064534] [ 1740.077570] FAULT_INJECTION: forcing a failure. [ 1740.077570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.077901] CPU: 0 PID: 9350 Comm: syz-executor.5 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1740.077924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1740.077936] Call Trace: [ 1740.077942] [ 1740.077949] dump_stack_lvl+0xc1/0xf0 [ 1740.077981] should_fail_ex+0x4b4/0x5b0 [ 1740.078008] _copy_to_user+0x2e/0x150 [ 1740.078033] do_pages_stat+0x588/0x700 [ 1740.078061] ? __pfx_lock_release+0x10/0x10 [ 1740.078092] ? __pfx_do_pages_stat+0x10/0x10 [ 1740.078114] ? find_held_lock+0x2c/0x110 [ 1740.078140] ? cpuset_mems_allowed+0x1aa/0x440 [ 1740.078176] ? lock_release+0x1e3/0x680 [ 1740.078196] ? __pfx_lock_release+0x10/0x10 [ 1740.078215] ? __pfx_lock_release+0x10/0x10 [ 1740.078232] ? lock_is_held_type+0x9f/0x120 [ 1740.078257] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1740.078293] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1740.078331] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1740.078365] kernel_move_pages+0x1117/0x1ad0 [ 1740.078388] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1740.078424] ? __pfx_kernel_move_pages+0x10/0x10 [ 1740.078451] ? fput+0x2f/0x1a0 [ 1740.078473] ? ksys_write+0x1a7/0x260 [ 1740.078501] ? __pfx_ksys_write+0x10/0x10 [ 1740.078532] __x64_sys_move_pages+0xe1/0x1c0 [ 1740.078557] ? syscall_enter_from_user_mode+0x21/0x50 [ 1740.078581] do_syscall_64+0x3f/0x90 [ 1740.078610] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1740.078639] RIP: 0033:0x7fb1d2b8bb19 [ 1740.078655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.078674] RSP: 002b:00007fb1d0101188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1740.078694] RAX: ffffffffffffffda RBX: 00007fb1d2c9ef60 RCX: 00007fb1d2b8bb19 [ 1740.078707] RDX: 0000000020000640 RSI: 0000000000000001 RDI: 0000000000000000 [ 1740.078720] RBP: 00007fb1d01011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.078731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.078744] R13: 00007ffe4ccb1aaf R14: 00007fb1d0101300 R15: 0000000000022000 [ 1740.078771] [ 1740.201938] FAULT_INJECTION: forcing a failure. [ 1740.201938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.201972] CPU: 0 PID: 9359 Comm: syz-executor.5 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1740.201994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1740.202006] Call Trace: [ 1740.202013] [ 1740.202020] dump_stack_lvl+0xc1/0xf0 [ 1740.202054] should_fail_ex+0x4b4/0x5b0 [ 1740.202085] _copy_to_user+0x2e/0x150 [ 1740.202111] simple_read_from_buffer+0xd0/0x170 [ 1740.202142] proc_fail_nth_read+0x19c/0x230 [ 1740.202168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1740.202200] ? security_file_permission+0xb5/0xe0 [ 1740.202229] vfs_read+0x260/0x940 [ 1740.202256] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1740.202280] ? __pfx_vfs_read+0x10/0x10 [ 1740.202311] ? __fget_files+0x270/0x480 [ 1740.202345] ksys_read+0x12b/0x260 [ 1740.202371] ? __pfx_ksys_read+0x10/0x10 [ 1740.202401] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1740.202445] do_syscall_64+0x3f/0x90 [ 1740.202479] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1740.202516] RIP: 0033:0x7fb1d2b3e69c [ 1740.202532] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1740.202552] RSP: 002b:00007fb1d0101170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1740.202573] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fb1d2b3e69c [ 1740.202588] RDX: 000000000000000f RSI: 00007fb1d01011e0 RDI: 0000000000000003 [ 1740.202601] RBP: 00007fb1d01011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.202618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.202632] R13: 00007ffe4ccb1aaf R14: 00007fb1d0101300 R15: 0000000000022000 [ 1740.202661] 08:58:21 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x900}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:58:21 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:58:21 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:21 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:58:21 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 08:58:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200004, 0x0) 08:58:21 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 11) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc02c0, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) [ 1756.065543] FAULT_INJECTION: forcing a failure. [ 1756.065543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1756.067163] CPU: 0 PID: 9374 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1756.067878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1756.068559] Call Trace: [ 1756.068786] [ 1756.068988] dump_stack_lvl+0xc1/0xf0 [ 1756.069336] should_fail_ex+0x4b4/0x5b0 [ 1756.069696] _copy_from_user+0x2e/0x180 [ 1756.070077] do_pages_stat+0x231/0x700 [ 1756.070107] ? __pfx_lock_release+0x10/0x10 08:58:21 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xe00}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1756.070136] ? __pfx_do_pages_stat+0x10/0x10 [ 1756.070163] ? lock_release+0x1e3/0x680 [ 1756.070194] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1756.070233] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1756.070269] kernel_move_pages+0x1117/0x1ad0 [ 1756.070293] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1756.070327] ? __pfx_kernel_move_pages+0x10/0x10 [ 1756.070352] ? fput+0x2f/0x1a0 [ 1756.070375] ? ksys_write+0x1a7/0x260 [ 1756.070405] ? __pfx_ksys_write+0x10/0x10 [ 1756.070439] __x64_sys_move_pages+0xe1/0x1c0 [ 1756.070465] ? syscall_enter_from_user_mode+0x21/0x50 [ 1756.070489] do_syscall_64+0x3f/0x90 [ 1756.070515] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1756.070546] RIP: 0033:0x7f0f10577b19 08:58:21 executing program 6: openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xcc9105636def05d1, 0x108) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) [ 1756.070562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 08:58:21 executing program 5: move_pages(0x0, 0x2, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) [ 1756.070583] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 08:58:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200008, 0x0) [ 1756.070605] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1756.070620] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1756.070634] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1756.070648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1756.070661] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1756.070690] 08:58:22 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:22 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 12) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:22 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x1100}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1756.283979] FAULT_INJECTION: forcing a failure. [ 1756.283979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1756.285332] CPU: 1 PID: 9399 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1756.286084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1756.286778] Call Trace: [ 1756.287012] [ 1756.287226] dump_stack_lvl+0xc1/0xf0 [ 1756.287620] should_fail_ex+0x4b4/0x5b0 [ 1756.288002] _copy_to_user+0x2e/0x150 [ 1756.288365] do_pages_stat+0x588/0x700 [ 1756.288716] ? __pfx_lock_release+0x10/0x10 [ 1756.289094] ? __pfx_do_pages_stat+0x10/0x10 [ 1756.289487] ? lock_release+0x1e3/0x680 [ 1756.289900] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1756.290371] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1756.290794] kernel_move_pages+0x1117/0x1ad0 [ 1756.291176] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1756.291606] ? __pfx_kernel_move_pages+0x10/0x10 [ 1756.292017] ? fput+0x2f/0x1a0 [ 1756.292293] ? ksys_write+0x1a7/0x260 [ 1756.292624] ? __pfx_ksys_write+0x10/0x10 [ 1756.292969] __x64_sys_move_pages+0xe1/0x1c0 [ 1756.293333] ? syscall_enter_from_user_mode+0x21/0x50 [ 1756.293743] do_syscall_64+0x3f/0x90 [ 1756.294107] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1756.294523] RIP: 0033:0x7f0f10577b19 [ 1756.294845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1756.296258] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1756.296896] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1756.297465] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1756.298027] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1756.298543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1756.299070] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1756.299646] 08:58:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200018, 0x0) 08:58:37 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 13) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:37 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:37 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x800, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) 08:58:37 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:58:37 executing program 5: move_pages(0x0, 0x3, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 08:58:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x2000f0, 0x0) 08:58:37 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:58:37 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1772.162276] FAULT_INJECTION: forcing a failure. [ 1772.162276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1772.163576] CPU: 1 PID: 9421 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1772.164228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1772.164914] Call Trace: [ 1772.165143] [ 1772.165347] dump_stack_lvl+0xc1/0xf0 [ 1772.165675] should_fail_ex+0x4b4/0x5b0 [ 1772.165994] _copy_from_user+0x2e/0x180 [ 1772.166351] do_pages_stat+0x231/0x700 [ 1772.166677] ? __pfx_lock_release+0x10/0x10 [ 1772.167132] ? __pfx_do_pages_stat+0x10/0x10 [ 1772.167636] ? lock_release+0x1e3/0x680 [ 1772.167979] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1772.168460] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1772.168929] kernel_move_pages+0x1117/0x1ad0 [ 1772.169317] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1772.169804] ? __pfx_kernel_move_pages+0x10/0x10 [ 1772.170247] ? fput+0x2f/0x1a0 [ 1772.170517] ? ksys_write+0x1a7/0x260 [ 1772.170836] ? __pfx_ksys_write+0x10/0x10 [ 1772.171186] __x64_sys_move_pages+0xe1/0x1c0 [ 1772.171631] ? syscall_enter_from_user_mode+0x21/0x50 [ 1772.172079] do_syscall_64+0x3f/0x90 [ 1772.172396] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1772.172846] RIP: 0033:0x7f0f10577b19 [ 1772.173146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1772.174596] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1772.175184] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1772.175786] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1772.176346] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1772.176931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1772.177562] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1772.178209] 08:58:38 executing program 5: move_pages(0x0, 0x9, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 08:58:38 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x2101}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:58:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x2000f5, 0x0) 08:58:38 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x3d5040, 0x14) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) openat(r1, &(0x7f00000002c0)='./file1\x00', 0x404000, 0x32) r2 = fsopen(&(0x7f0000000240)='nfs\x00', 0x1) sendfile(r2, r1, &(0x7f0000000280)=0x8, 0x7fff) sendfile(r0, r1, 0x0, 0x10000027f) close(r0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$FIONCLEX(r3, 0x5450) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1c}}}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x12, 0x5}, {}, {0x4, 0x5}, {0x5, 0x1}, {0x71, 0x7}, {0x4, 0x7}, {0xdd, 0x2}, {0x72}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x7}, {0x2, 0x4}], "492a94c2bed3783c"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x1, 0x7}, {0x8, 0x2}, {0x3a, 0x3}, {0x5, 0x3}, {0x80, 0x1}, {0x4, 0x2}, {0x2f, 0x6}, {0x46}, {0x7f, 0x5}], "4b899abdd4759ffe"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7f, 0x1}], "6da8535886583738"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x4, 0x3}, {0x1, 0x3}, {0x3c}, {0x8, 0x6}, {0x4, 0x3}, {0x34, 0x5}, {0x5}, {0x0, 0x4}, {0x2, 0x6}, {0xa2, 0x1}, {0x6, 0x1}], "97d5a0c6f60385ac"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x30}, {0x81, 0x6}, {0x7, 0x3}, {0xfb, 0x4}, {0xb8}, {}, {0x8, 0x1}, {0xff, 0x3}, {0xec, 0x4}, {0xdc, 0x4}, {0x0, 0x6}, {0x9, 0x2}, {0x97, 0x5}, {0x9, 0x7}, {0x8, 0x5}, {0x4, 0x1}, {0xff, 0x7}], "d710cc2841d42668"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x6, 0x6}, {0x1}, {0x5d, 0x5}, {0x3, 0x7}, {0x9, 0x6}, {0x6, 0x7}, {}, {0x0, 0x3}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x3}], "5fb808de8c1c59ec"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4040}, 0x1) 08:58:38 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 14) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:38 executing program 5: move_pages(0x0, 0x10, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 08:58:38 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x2201}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:58:38 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x2010d0, 0x0) 08:58:38 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 1772.427176] FAULT_INJECTION: forcing a failure. [ 1772.427176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1772.428452] CPU: 1 PID: 9447 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1772.429154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1772.429813] Call Trace: [ 1772.430055] [ 1772.430292] dump_stack_lvl+0xc1/0xf0 [ 1772.430642] should_fail_ex+0x4b4/0x5b0 [ 1772.431063] _copy_to_user+0x2e/0x150 [ 1772.431451] do_pages_stat+0x588/0x700 [ 1772.431797] ? __pfx_do_pages_stat+0x10/0x10 [ 1772.432179] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1772.432655] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 1772.433165] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1772.433590] kernel_move_pages+0x1117/0x1ad0 [ 1772.434035] ? ktime_get+0x157/0x1f0 [ 1772.434439] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1772.434911] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1772.435440] ? __pfx_kernel_move_pages+0x10/0x10 [ 1772.435885] ? __pfx___x64_sys_move_pages+0x10/0x10 [ 1772.436354] __x64_sys_move_pages+0xe1/0x1c0 [ 1772.436753] ? syscall_enter_from_user_mode+0x21/0x50 [ 1772.437197] do_syscall_64+0x3f/0x90 [ 1772.437537] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1772.437988] RIP: 0033:0x7f0f10577b19 [ 1772.438359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1772.439934] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1772.440577] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1772.441218] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1772.441828] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1772.442549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1772.443205] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1772.443828] 08:58:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat(r1, &(0x7f0000000000)='./file1\x00', 0x100, 0x1a9) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}, {@any, 0x1f, 0x85, 0x7d, "902c8f", 0x42f1, 0x4}, {@any, 0xcb, 0x1, 0x8, "00173a", 0x81, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0xcd, 0x80, "fcd4a5", 0x7fff, 0x1f}]}}}, 0x5e) ioctl(r2, 0x2, &(0x7f00000000c0)="34ee4c3463804c0fac4c50d01c2bde23faa96fddaa2a7df34a67a7c2318fb75b752feb6b3314f121355c326da2947872060f55f0f59e55fb09f0d5de5fbb3ce79df4afa67b83609c1a24a5d6c0eb5c49b07fc6e19810fef9c2fe250c20383216fe114de4fbd36ffc064eb74209e6326c745032e1ef23f1fff291016ee2289d2018ce1ee0cb4c506068153167db4feec5800bbfa3c2af7bd4be74e694d651165a0879eb55e5ad60133af7e90d7cb37f0f1243ab5b6e") 08:58:54 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x2601}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:58:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x201800, 0x0) 08:58:54 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x10) 08:58:54 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:54 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:58:54 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:58:54 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 15) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 1788.323960] FAULT_INJECTION: forcing a failure. [ 1788.323960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.325281] CPU: 1 PID: 9477 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1788.325960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1788.326742] Call Trace: [ 1788.326969] [ 1788.327163] dump_stack_lvl+0xc1/0xf0 [ 1788.327525] should_fail_ex+0x4b4/0x5b0 [ 1788.327877] _copy_from_user+0x2e/0x180 [ 1788.328234] do_pages_stat+0x231/0x700 [ 1788.328584] ? __pfx_lock_release+0x10/0x10 [ 1788.328965] ? __pfx_do_pages_stat+0x10/0x10 [ 1788.329356] ? lock_release+0x1e3/0x680 [ 1788.329711] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1788.330168] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1788.330702] kernel_move_pages+0x1117/0x1ad0 [ 1788.331092] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1788.331550] ? __pfx_kernel_move_pages+0x10/0x10 [ 1788.331951] ? fput+0x2f/0x1a0 [ 1788.332240] ? ksys_write+0x1a7/0x260 [ 1788.332584] ? __pfx_ksys_write+0x10/0x10 [ 1788.332945] __x64_sys_move_pages+0xe1/0x1c0 [ 1788.333333] ? syscall_enter_from_user_mode+0x21/0x50 [ 1788.333773] do_syscall_64+0x3f/0x90 [ 1788.334139] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1788.334614] RIP: 0033:0x7f0f10577b19 [ 1788.334931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1788.336423] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1788.337074] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1788.337676] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1788.338292] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1788.338895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1788.339492] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1788.340093] 08:58:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) open_tree(r0, &(0x7f0000000000)='./file1\x00', 0x8000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x47, 0x2, 0x8}, 0x9}}, 0x18) sendfile(r0, r0, 0x0, 0x7) 08:58:54 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x3f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:58:54 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:54 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x60ff) 08:58:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x20d010, 0x0) 08:58:54 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 16) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:58:54 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x4000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:58:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) sendfile(r0, r1, 0x0, 0x10000027f) [ 1788.515376] FAULT_INJECTION: forcing a failure. [ 1788.515376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.516662] CPU: 1 PID: 9497 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1788.517344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1788.518017] Call Trace: [ 1788.518233] [ 1788.518489] dump_stack_lvl+0xc1/0xf0 [ 1788.518833] should_fail_ex+0x4b4/0x5b0 [ 1788.519179] _copy_to_user+0x2e/0x150 [ 1788.519512] do_pages_stat+0x588/0x700 [ 1788.519850] ? __pfx_lock_release+0x10/0x10 [ 1788.520213] ? __pfx_do_pages_stat+0x10/0x10 [ 1788.520608] ? lock_release+0x1e3/0x680 [ 1788.520957] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1788.521396] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1788.521836] kernel_move_pages+0x1117/0x1ad0 [ 1788.522209] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1788.522741] ? __pfx_kernel_move_pages+0x10/0x10 [ 1788.523150] ? fput+0x2f/0x1a0 [ 1788.523458] ? ksys_write+0x1a7/0x260 [ 1788.523798] ? __pfx_ksys_write+0x10/0x10 [ 1788.524160] __x64_sys_move_pages+0xe1/0x1c0 [ 1788.524557] ? syscall_enter_from_user_mode+0x21/0x50 [ 1788.524986] do_syscall_64+0x3f/0x90 [ 1788.525313] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1788.525757] RIP: 0033:0x7f0f10577b19 [ 1788.526072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1788.527578] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1788.528204] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1788.528784] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1788.529377] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1788.529940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1788.530529] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1788.531131] 08:58:54 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0xf0ff1f) 08:59:09 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:59:09 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:59:09 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x10000000) 08:59:09 executing program 6: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x101000, 0x0, 0x3}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 08:59:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x20f000, 0x0) 08:59:09 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x7100}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:59:09 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 17) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:59:09 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 1804.217920] FAULT_INJECTION: forcing a failure. [ 1804.217920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1804.219100] CPU: 1 PID: 9523 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1804.219752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1804.220440] Call Trace: [ 1804.220666] [ 1804.220877] dump_stack_lvl+0xc1/0xf0 [ 1804.221227] should_fail_ex+0x4b4/0x5b0 [ 1804.221594] _copy_from_user+0x2e/0x180 [ 1804.221950] do_pages_stat+0x231/0x700 [ 1804.222291] ? __pfx_lock_release+0x10/0x10 [ 1804.222731] ? __pfx_do_pages_stat+0x10/0x10 [ 1804.223142] ? lock_release+0x1e3/0x680 [ 1804.223514] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1804.224005] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1804.224482] kernel_move_pages+0x1117/0x1ad0 [ 1804.224885] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1804.225339] ? __pfx_kernel_move_pages+0x10/0x10 [ 1804.225757] ? fput+0x2f/0x1a0 [ 1804.226061] ? ksys_write+0x1a7/0x260 [ 1804.226406] ? __pfx_ksys_write+0x10/0x10 [ 1804.226833] __x64_sys_move_pages+0xe1/0x1c0 [ 1804.227225] ? syscall_enter_from_user_mode+0x21/0x50 [ 1804.227679] do_syscall_64+0x3f/0x90 [ 1804.228012] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1804.228469] RIP: 0033:0x7f0f10577b19 [ 1804.228802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1804.230303] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1804.231003] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1804.231600] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1804.232209] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1804.232802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1804.233397] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1804.234024] 08:59:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x20f500, 0x0) 08:59:10 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x1fffefff) 08:59:10 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xc301}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:59:10 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x8001, 0x200) r3 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x10000027f) 08:59:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x2) 08:59:10 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 18) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:59:10 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 1804.435550] FAULT_INJECTION: forcing a failure. [ 1804.435550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1804.436656] CPU: 0 PID: 9545 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1804.437339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1804.438060] Call Trace: [ 1804.438298] [ 1804.438518] dump_stack_lvl+0xc1/0xf0 [ 1804.438923] should_fail_ex+0x4b4/0x5b0 [ 1804.439305] _copy_to_user+0x2e/0x150 [ 1804.439666] do_pages_stat+0x588/0x700 [ 1804.440027] ? __pfx_lock_release+0x10/0x10 [ 1804.440410] ? __pfx_do_pages_stat+0x10/0x10 [ 1804.440793] ? lock_release+0x1e3/0x680 [ 1804.441156] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1804.441597] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1804.442074] kernel_move_pages+0x1117/0x1ad0 [ 1804.442481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1804.443018] ? __pfx_kernel_move_pages+0x10/0x10 [ 1804.443440] ? fput+0x2f/0x1a0 [ 1804.443756] ? ksys_write+0x1a7/0x260 [ 1804.444138] ? __pfx_ksys_write+0x10/0x10 [ 1804.444534] __x64_sys_move_pages+0xe1/0x1c0 [ 1804.444935] ? syscall_enter_from_user_mode+0x21/0x50 [ 1804.445398] do_syscall_64+0x3f/0x90 [ 1804.445742] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1804.446201] RIP: 0033:0x7f0f10577b19 [ 1804.446526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1804.447997] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1804.448562] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1804.449083] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1804.449600] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1804.450123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1804.450682] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1804.451291] 08:59:25 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x1ffff000) 08:59:25 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:59:25 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:59:25 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xc401}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:59:25 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendfile(r1, r0, 0x0, 0x10000027f) 08:59:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x4) 08:59:25 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 19) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:59:25 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 1820.191916] FAULT_INJECTION: forcing a failure. [ 1820.191916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1820.193235] CPU: 1 PID: 9567 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1820.193923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1820.194631] Call Trace: [ 1820.194918] [ 1820.195137] dump_stack_lvl+0xc1/0xf0 [ 1820.195494] should_fail_ex+0x4b4/0x5b0 [ 1820.195866] _copy_from_user+0x2e/0x180 [ 1820.196238] do_pages_stat+0x231/0x700 [ 1820.196609] ? __pfx_lock_release+0x10/0x10 [ 1820.196997] ? __pfx_do_pages_stat+0x10/0x10 [ 1820.197416] ? lock_release+0x1e3/0x680 [ 1820.197781] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1820.198259] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1820.198732] kernel_move_pages+0x1117/0x1ad0 [ 1820.199230] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1820.199717] ? __pfx_kernel_move_pages+0x10/0x10 [ 1820.200147] ? fput+0x2f/0x1a0 [ 1820.200444] ? ksys_write+0x1a7/0x260 [ 1820.200795] ? __pfx_ksys_write+0x10/0x10 [ 1820.201197] __x64_sys_move_pages+0xe1/0x1c0 [ 1820.201603] ? syscall_enter_from_user_mode+0x21/0x50 [ 1820.202104] do_syscall_64+0x3f/0x90 [ 1820.202445] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1820.202953] RIP: 0033:0x7f0f10577b19 [ 1820.203289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1820.204849] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1820.205511] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1820.206100] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1820.206741] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1820.207384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1820.207999] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1820.208607] 08:59:26 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0xff600000) 08:59:26 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xc501}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:59:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x8) 08:59:26 executing program 6: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000040)=0x1227) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1703], 0x6a7) openat(r0, &(0x7f0000000000)='./file1\x00', 0x111000, 0x4) 08:59:26 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0xffefff1f) 08:59:26 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 20) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:59:26 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xc601}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1820.492102] FAULT_INJECTION: forcing a failure. [ 1820.492102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1820.493543] CPU: 1 PID: 9591 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1820.494218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1820.494991] Call Trace: [ 1820.495214] [ 1820.495413] dump_stack_lvl+0xc1/0xf0 [ 1820.495754] should_fail_ex+0x4b4/0x5b0 [ 1820.496106] _copy_to_user+0x2e/0x150 [ 1820.496467] do_pages_stat+0x588/0x700 [ 1820.496815] ? __pfx_lock_release+0x10/0x10 [ 1820.497202] ? __pfx_do_pages_stat+0x10/0x10 [ 1820.497615] ? lock_release+0x1e3/0x680 [ 1820.497993] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1820.498475] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1820.498956] kernel_move_pages+0x1117/0x1ad0 [ 1820.499345] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1820.499813] ? __pfx_kernel_move_pages+0x10/0x10 [ 1820.500235] ? fput+0x2f/0x1a0 [ 1820.500553] ? ksys_write+0x1a7/0x260 [ 1820.500929] ? __pfx_ksys_write+0x10/0x10 [ 1820.501300] __x64_sys_move_pages+0xe1/0x1c0 [ 1820.501685] ? syscall_enter_from_user_mode+0x21/0x50 [ 1820.502116] do_syscall_64+0x3f/0x90 [ 1820.502442] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1820.502927] RIP: 0033:0x7f0f10577b19 [ 1820.503237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1820.504673] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1820.505308] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1820.505877] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1820.506465] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1820.507115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1820.507727] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1820.508328] 08:59:42 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 08:59:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x18) 08:59:42 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:59:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x2001, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 08:59:42 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:59:42 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x60ffffffffff) 08:59:42 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 21) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:59:42 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xc901}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1836.595074] FAULT_INJECTION: forcing a failure. [ 1836.595074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1836.596574] CPU: 0 PID: 9605 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1836.597375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1836.598050] Call Trace: [ 1836.598277] [ 1836.598488] dump_stack_lvl+0xc1/0xf0 [ 1836.598833] should_fail_ex+0x4b4/0x5b0 [ 1836.599237] _copy_from_user+0x2e/0x180 [ 1836.599602] do_pages_stat+0x231/0x700 [ 1836.599958] ? __pfx_lock_release+0x10/0x10 [ 1836.600351] ? __pfx_do_pages_stat+0x10/0x10 [ 1836.600747] ? lock_release+0x1e3/0x680 [ 1836.601143] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1836.601598] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1836.602063] kernel_move_pages+0x1117/0x1ad0 [ 1836.602462] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1836.602939] ? __pfx_kernel_move_pages+0x10/0x10 [ 1836.603422] ? fput+0x2f/0x1a0 [ 1836.603729] ? ksys_write+0x1a7/0x260 [ 1836.604120] ? __pfx_ksys_write+0x10/0x10 [ 1836.604494] __x64_sys_move_pages+0xe1/0x1c0 [ 1836.604907] ? syscall_enter_from_user_mode+0x21/0x50 [ 1836.605413] do_syscall_64+0x3f/0x90 [ 1836.605764] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1836.606261] RIP: 0033:0x7f0f10577b19 [ 1836.606590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1836.608165] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1836.608838] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1836.609490] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1836.610115] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1836.610768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1836.611393] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1836.612025] 08:59:42 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xd101}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:59:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x3c1042, 0x54) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0) fgetxattr(r2, &(0x7f00000000c0)=@random={'trusted.', '/proc/consoles\x00'}, &(0x7f0000000100)=""/23, 0x17) openat(r0, &(0x7f0000000000)='./file1\x00', 0x1, 0x71) 08:59:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xf0) 08:59:42 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x7fb1d00e1fff) 08:59:42 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 22) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:59:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xf5) [ 1836.820573] FAULT_INJECTION: forcing a failure. [ 1836.820573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1836.822143] CPU: 0 PID: 9630 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1836.822847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1836.823567] Call Trace: [ 1836.823812] [ 1836.824029] dump_stack_lvl+0xc1/0xf0 [ 1836.824373] should_fail_ex+0x4b4/0x5b0 [ 1836.824725] _copy_to_user+0x2e/0x150 [ 1836.825070] do_pages_stat+0x588/0x700 [ 1836.825424] ? __pfx_lock_release+0x10/0x10 [ 1836.825818] ? __pfx_do_pages_stat+0x10/0x10 [ 1836.826223] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1836.826742] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 1836.827232] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1836.827668] kernel_move_pages+0x1117/0x1ad0 [ 1836.828060] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1836.828537] ? __pfx_kernel_move_pages+0x10/0x10 [ 1836.828967] ? fput+0x2f/0x1a0 [ 1836.829266] ? ksys_write+0x1a7/0x260 [ 1836.829614] ? __pfx_ksys_write+0x10/0x10 [ 1836.829977] __x64_sys_move_pages+0xe1/0x1c0 [ 1836.830354] ? syscall_enter_from_user_mode+0x21/0x50 [ 1836.830794] do_syscall_64+0x3f/0x90 [ 1836.831132] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1836.831571] RIP: 0033:0x7f0f10577b19 [ 1836.831886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1836.833387] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1836.834043] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1836.834653] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1836.835255] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1836.835825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1836.836393] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1836.837019] 08:59:58 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x7fffffffeffc) 08:59:58 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, 0x0, 0x814fc7fca637320, 0x20) 08:59:58 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:59:58 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:59:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x10d0) 08:59:58 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x20010}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:59:58 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 23) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:59:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) sendfile(r0, r1, 0x0, 0x10000027f) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x101040) openat(r2, &(0x7f0000000040)='./file1\x00', 0x22000, 0x30) [ 1852.741388] FAULT_INJECTION: forcing a failure. [ 1852.741388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1852.743154] CPU: 1 PID: 9648 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1852.744195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1852.745231] Call Trace: [ 1852.745574] [ 1852.745878] dump_stack_lvl+0xc1/0xf0 [ 1852.746398] should_fail_ex+0x4b4/0x5b0 [ 1852.746925] _copy_from_user+0x2e/0x180 [ 1852.747460] do_pages_stat+0x231/0x700 [ 1852.747973] ? __pfx_lock_release+0x10/0x10 [ 1852.748545] ? __pfx_do_pages_stat+0x10/0x10 [ 1852.749131] ? lock_release+0x1e3/0x680 [ 1852.749670] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1852.750338] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1852.751009] kernel_move_pages+0x1117/0x1ad0 [ 1852.751601] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1852.752301] ? __pfx_kernel_move_pages+0x10/0x10 [ 1852.752926] ? fput+0x2f/0x1a0 [ 1852.753365] ? ksys_write+0x1a7/0x260 [ 1852.753883] ? __pfx_ksys_write+0x10/0x10 [ 1852.754438] __x64_sys_move_pages+0xe1/0x1c0 [ 1852.755032] ? syscall_enter_from_user_mode+0x21/0x50 [ 1852.755715] do_syscall_64+0x3f/0x90 [ 1852.756213] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1852.756895] RIP: 0033:0x7f0f10577b19 [ 1852.757378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1852.759679] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1852.759711] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1852.759731] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1852.759750] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1852.759769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1852.759788] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1852.759828] 08:59:58 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x7ffffffff000) 08:59:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x1800) 08:59:58 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x20200}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:59:58 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 24) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 08:59:58 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0xf0ff1f00000000) 08:59:58 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x80000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1853.011491] FAULT_INJECTION: forcing a failure. [ 1853.011491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1853.013339] CPU: 0 PID: 9667 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1853.014356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1853.015393] Call Trace: [ 1853.015725] [ 1853.016023] dump_stack_lvl+0xc1/0xf0 [ 1853.016531] should_fail_ex+0x4b4/0x5b0 [ 1853.017061] _copy_to_user+0x2e/0x150 [ 1853.017558] do_pages_stat+0x588/0x700 [ 1853.018071] ? __pfx_lock_release+0x10/0x10 [ 1853.018634] ? __pfx_do_pages_stat+0x10/0x10 [ 1853.019213] ? lock_release+0x1e3/0x680 [ 1853.019756] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1853.020438] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1853.021109] kernel_move_pages+0x1117/0x1ad0 [ 1853.021679] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1853.022357] ? __pfx_kernel_move_pages+0x10/0x10 [ 1853.022955] ? fput+0x2f/0x1a0 [ 1853.023390] ? ksys_write+0x1a7/0x260 [ 1853.023897] ? __pfx_ksys_write+0x10/0x10 [ 1853.024451] __x64_sys_move_pages+0xe1/0x1c0 [ 1853.025018] ? syscall_enter_from_user_mode+0x21/0x50 [ 1853.025674] do_syscall_64+0x3f/0x90 [ 1853.026173] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1853.026827] RIP: 0033:0x7f0f10577b19 [ 1853.027324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1853.029516] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1853.030458] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1853.031331] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1853.032204] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1853.033091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1853.033980] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1853.034881] 08:59:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xd010) 08:59:58 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0xf0ffffff7f0000) 08:59:58 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 08:59:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xf000) 09:00:14 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x101000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:00:14 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, 0x0, 0x814fc7fca637320, 0x20) 09:00:14 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:00:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xf500) 09:00:14 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 25) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:00:14 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x1000000000000000) 09:00:14 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:00:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40030) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendfile(r0, r1, 0x0, 0x10000027f) [ 1869.221020] FAULT_INJECTION: forcing a failure. [ 1869.221020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1869.222234] CPU: 1 PID: 9699 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1869.222879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1869.223893] Call Trace: [ 1869.224203] [ 1869.224448] dump_stack_lvl+0xc1/0xf0 [ 1869.224815] should_fail_ex+0x4b4/0x5b0 [ 1869.225157] _copy_from_user+0x2e/0x180 [ 1869.225517] do_pages_stat+0x231/0x700 [ 1869.225885] ? __pfx_lock_release+0x10/0x10 [ 1869.226298] ? __pfx_do_pages_stat+0x10/0x10 [ 1869.226726] ? lock_release+0x1e3/0x680 [ 1869.227094] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1869.227571] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1869.228067] kernel_move_pages+0x1117/0x1ad0 [ 1869.228911] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1869.229379] ? __pfx_kernel_move_pages+0x10/0x10 [ 1869.230022] ? fput+0x2f/0x1a0 [ 1869.230417] ? ksys_write+0x1a7/0x260 [ 1869.230766] ? __pfx_ksys_write+0x10/0x10 [ 1869.231170] __x64_sys_move_pages+0xe1/0x1c0 [ 1869.231594] ? syscall_enter_from_user_mode+0x21/0x50 [ 1869.232031] do_syscall_64+0x3f/0x90 [ 1869.232390] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1869.232871] RIP: 0033:0x7f0f10577b19 [ 1869.233205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1869.234673] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1869.235316] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1869.235927] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1869.236518] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1869.237109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1869.237719] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1869.238277] 09:00:15 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0xfcefffffff7f0000) 09:00:15 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:00:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x2, 0x7, 0x4, 0x1, 0x0, 0x6, 0x51001, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x4}, 0x186ca, 0xedf, 0x4, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x4, 0x0, 0xfffffffffffffbd4}, r2, 0xa, 0xffffffffffffffff, 0x8) sendfile(r0, r1, 0x0, 0x10000027f) 09:00:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x10040) 09:00:15 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0xff1f0ed0b17f0000) 09:00:15 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 26) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:00:15 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:00:15 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x2000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1869.485958] FAULT_INJECTION: forcing a failure. [ 1869.485958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1869.487181] CPU: 0 PID: 9724 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1869.487859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1869.488538] Call Trace: [ 1869.488747] [ 1869.488951] dump_stack_lvl+0xc1/0xf0 [ 1869.489278] should_fail_ex+0x4b4/0x5b0 [ 1869.489620] _copy_to_user+0x2e/0x150 [ 1869.489956] do_pages_stat+0x588/0x700 [ 1869.490282] ? __pfx_lock_release+0x10/0x10 [ 1869.490652] ? __pfx_do_pages_stat+0x10/0x10 [ 1869.491028] ? lock_release+0x1e3/0x680 [ 1869.491388] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1869.491848] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1869.492292] kernel_move_pages+0x1117/0x1ad0 [ 1869.492655] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1869.493108] ? __pfx_kernel_move_pages+0x10/0x10 [ 1869.493490] ? fput+0x2f/0x1a0 [ 1869.493759] ? ksys_write+0x1a7/0x260 [ 1869.494071] ? __pfx_ksys_write+0x10/0x10 [ 1869.494418] __x64_sys_move_pages+0xe1/0x1c0 [ 1869.494777] ? syscall_enter_from_user_mode+0x21/0x50 [ 1869.495198] do_syscall_64+0x3f/0x90 [ 1869.495527] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1869.495928] RIP: 0033:0x7f0f10577b19 [ 1869.496233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1869.497583] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1869.498188] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1869.498736] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1869.499315] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1869.499903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1869.500491] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1869.501037] 09:00:31 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, 0x0, 0x814fc7fca637320, 0x20) 09:00:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x18983) 09:00:31 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x0, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:00:31 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x3000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:00:31 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0xffefff1f00000000) 09:00:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0xe6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) sendfile(r1, r0, &(0x7f0000000000)=0x3, 0xb6) 09:00:31 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 27) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:00:31 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 1885.665053] FAULT_INJECTION: forcing a failure. [ 1885.665053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1885.666285] CPU: 0 PID: 9747 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1885.666919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1885.667525] Call Trace: [ 1885.667770] [ 1885.667961] dump_stack_lvl+0xc1/0xf0 [ 1885.668286] should_fail_ex+0x4b4/0x5b0 [ 1885.668639] _copy_from_user+0x2e/0x180 [ 1885.668983] do_pages_stat+0x231/0x700 [ 1885.669290] ? __pfx_lock_release+0x10/0x10 [ 1885.669627] ? __pfx_do_pages_stat+0x10/0x10 [ 1885.669982] ? lock_release+0x1e3/0x680 [ 1885.670344] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1885.670805] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1885.671201] kernel_move_pages+0x1117/0x1ad0 [ 1885.671553] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1885.672004] ? __pfx_kernel_move_pages+0x10/0x10 [ 1885.672391] ? fput+0x2f/0x1a0 [ 1885.672672] ? ksys_write+0x1a7/0x260 [ 1885.672990] ? __pfx_ksys_write+0x10/0x10 [ 1885.673336] __x64_sys_move_pages+0xe1/0x1c0 [ 1885.673743] ? syscall_enter_from_user_mode+0x21/0x50 [ 1885.674182] do_syscall_64+0x3f/0x90 [ 1885.674505] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1885.674952] RIP: 0033:0x7f0f10577b19 [ 1885.675265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1885.676762] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1885.677377] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1885.677938] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1885.678479] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1885.679026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1885.679542] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1885.680144] 09:00:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x80000) 09:00:31 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0xffffffffff600000) 09:00:31 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x6000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:00:31 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x94) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000027f) 09:00:31 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 28) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:00:31 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x8000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1885.892127] FAULT_INJECTION: forcing a failure. [ 1885.892127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1885.893495] CPU: 0 PID: 9768 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1885.894164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1885.894786] Call Trace: [ 1885.895029] [ 1885.895232] dump_stack_lvl+0xc1/0xf0 [ 1885.895602] should_fail_ex+0x4b4/0x5b0 [ 1885.896025] _copy_to_user+0x2e/0x150 [ 1885.896404] do_pages_stat+0x588/0x700 [ 1885.896778] ? __pfx_do_pages_stat+0x10/0x10 [ 1885.897181] ? lock_release+0x1e3/0x680 [ 1885.897538] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1885.897991] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1885.898454] kernel_move_pages+0x1117/0x1ad0 [ 1885.898867] ? ktime_get+0x157/0x1f0 [ 1885.899227] ? __pfx_lapic_next_deadline+0x10/0x10 [ 1885.899684] ? __pfx_kernel_move_pages+0x10/0x10 [ 1885.900121] ? hrtimer_interrupt+0x586/0x750 [ 1885.900527] __x64_sys_move_pages+0xe1/0x1c0 [ 1885.901011] ? syscall_enter_from_user_mode+0x21/0x50 [ 1885.901489] do_syscall_64+0x3f/0x90 [ 1885.901818] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1885.902286] RIP: 0033:0x7f0f10577b19 [ 1885.902608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1885.904193] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1885.904841] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1885.905428] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1885.906077] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1885.906747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1885.907424] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1885.908179] 09:00:47 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x0, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:00:47 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x20) 09:00:47 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:00:47 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000440)={0x2, 0x0, {0x3, 0x1, 0x80, 0x0, 0xffffffbe}, 0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev, @in=@multicast1}}, {{@in=@private}}}, &(0x7f0000000400)=0xe8) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1ac, 0x3d, 0x4, 0x70bd25, 0x25dfdbfd, {0x14}, [@generic="baa1df90843fee47e71ec8dfc47f027bb001273f86520439e618b3f8205b4d001870b2cd0f46d9e2106a26f4c13bd26ecc41395d4858c5e905f5ee734b533d3ea771cce6c58f753671b8b2fc9f279ac2a991742d04228ac3fc225e2fc386b9eb993f85ecf96c2236ced6449fcecad7b336218c3dba204d279ead4052e27f195dc2996c841387237dc0aae40c96e51d806c966753c757556ec7f3752bc64d0d6c852c7be56a459b6a5f96992419a2bbc84a5218b4", @nested={0xc, 0x3a, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @fd=r1}]}, @typed={0x14, 0x65, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x35}}, @typed={0x8, 0x93, 0x0, 0x0, @uid=0xee01}, @typed={0x4, 0x4b}, @generic="f4827d0490a94510439314b55f5aa0aeb5b51cb2c55b5451cb4b798654ef5dd43c4a7b8e3008bc00be1e03ee00855ba8941e960cd55681ed63c5c726ba1c3a824433fdb62bf32f4452da514ca665e9e4e522c14a8eefbc2688cb77df3640c3d0cd31ef414578caad01796b0d9741bf781af49ee6b65957bd7a489237a48795036ef69001717e525fd8ce77d438cbda220382768989452ea093efea14505149f62bf7d11be6a3265fd98e81c31bdde57af991130917f51a"]}, 0x1ac}}, 0x5) sendfile(r1, r2, 0x0, 0x10000027f) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) dup3(r2, r4, 0x0) 09:00:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xf0ffff) 09:00:47 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0xffffffffffffffff) 09:00:47 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x9000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:00:47 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 29) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 1902.097116] FAULT_INJECTION: forcing a failure. [ 1902.097116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1902.098241] CPU: 0 PID: 9789 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1902.098830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1902.099497] Call Trace: [ 1902.099731] [ 1902.099946] dump_stack_lvl+0xc1/0xf0 [ 1902.100293] should_fail_ex+0x4b4/0x5b0 [ 1902.100672] _copy_from_user+0x2e/0x180 [ 1902.101002] do_pages_stat+0x231/0x700 [ 1902.101312] ? __pfx_lock_release+0x10/0x10 [ 1902.101723] ? __pfx_do_pages_stat+0x10/0x10 [ 1902.102084] ? lock_release+0x1e3/0x680 [ 1902.102408] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1902.102821] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1902.103232] kernel_move_pages+0x1117/0x1ad0 [ 1902.103590] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1902.104093] ? __pfx_kernel_move_pages+0x10/0x10 [ 1902.104505] ? fput+0x2f/0x1a0 [ 1902.104801] ? ksys_write+0x1a7/0x260 [ 1902.105131] ? __pfx_ksys_write+0x10/0x10 [ 1902.105542] __x64_sys_move_pages+0xe1/0x1c0 [ 1902.105945] ? syscall_enter_from_user_mode+0x21/0x50 [ 1902.106375] do_syscall_64+0x3f/0x90 [ 1902.106765] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1902.107228] RIP: 0033:0x7f0f10577b19 [ 1902.107570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1902.109098] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1902.109777] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1902.110413] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1902.111077] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1902.111672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1902.112305] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1902.112912] 09:00:47 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xe000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:00:47 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0xc5, 0x1, 0x1, 0x7, 0x0, 0x6, 0x40000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x11240, 0x5, 0xfffffffe, 0x2, 0x5, 0x100, 0x4, 0x0, 0x6, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)="a220eb4cb8477531d740ed0e07b5fe9055022a8f582949efb182512810010858125cd943dabd9e4acd3ea9d14671834c172dc783e721b0fbb4cd119ea63285793c2ddb0a5ea916b979d53c919f0d45c25611540bc644ee5441bfd501f9c6c21fef6309a264fd00993664bf3b970b414ad0c49b0209a9bb6122335b78f9a09def818e02c54466b13cf2c934d499adbc510bb10a655600e13302d0824a3511da9d15f8f7f8331496adb4be0246d1a634c618df32bb604a381aefd9644eaf9cce4c8420282ace681047db0f5b2c004db9", 0xcf) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000680)={0x0, r1, "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", "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"}) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 09:00:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x1000000) 09:00:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x14a82, 0x0) openat(r1, &(0x7f0000000440)='./file1\x00', 0x107000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000001c0)) preadv2(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/255, 0xff}, {&(0x7f0000000000)=""/74, 0x4a}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000000340)=""/77, 0x4d}], 0x5, 0x2, 0x31, 0x1c) io_setup(0xb, &(0x7f00000004c0)) 09:00:48 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 30) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:00:48 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x10000200}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:00:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x2000000) [ 1902.301998] FAULT_INJECTION: forcing a failure. [ 1902.301998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1902.303230] CPU: 1 PID: 9808 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1902.303965] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1902.304650] Call Trace: [ 1902.304912] [ 1902.305117] dump_stack_lvl+0xc1/0xf0 [ 1902.305447] should_fail_ex+0x4b4/0x5b0 [ 1902.305783] _copy_to_user+0x2e/0x150 [ 1902.306139] do_pages_stat+0x588/0x700 [ 1902.306473] ? __pfx_lock_release+0x10/0x10 [ 1902.306849] ? __pfx_do_pages_stat+0x10/0x10 [ 1902.307238] ? lock_release+0x1e3/0x680 [ 1902.307600] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1902.308074] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1902.308542] kernel_move_pages+0x1117/0x1ad0 [ 1902.308911] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1902.309349] ? __pfx_kernel_move_pages+0x10/0x10 [ 1902.309743] ? fput+0x2f/0x1a0 [ 1902.310058] ? ksys_write+0x1a7/0x260 [ 1902.310407] ? __pfx_ksys_write+0x10/0x10 [ 1902.310775] __x64_sys_move_pages+0xe1/0x1c0 [ 1902.311238] ? syscall_enter_from_user_mode+0x21/0x50 [ 1902.311672] do_syscall_64+0x3f/0x90 [ 1902.312046] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1902.312478] RIP: 0033:0x7f0f10577b19 [ 1902.312808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1902.314293] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1902.314931] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1902.315523] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1902.316120] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1902.316687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1902.317251] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1902.317835] 09:00:48 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x313040, 0x0) lseek(r0, 0x2ce9, 0x4) 09:01:04 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x11000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:01:04 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x0, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:01:04 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x20) 09:01:04 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:01:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x4000000) 09:01:04 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x8, 0x4000010, r1, 0x10000000) clone3(&(0x7f0000000280)={0x2408a4200, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x3e}, &(0x7f0000000900)=""/243, 0xf3, &(0x7f0000000140)=""/142, &(0x7f0000000240), 0x0, {r2}}, 0x58) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000680)={0x1f, 0x3, 0x400, 0x4, 0x9}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000001000000180000008b1f97dcbe4c5d6b37d560bab0357fb9439de121032c83d2bb89e627f038836e2627b0a129a41a6eeb9fc8a395229e4b182dade444699d0b419b2f349f2336bb0ecafbdede911a0c540482e688e1ba2c0f8f5542ab1ababe854f1f57fba8c6ada690ec8124e4b950e9dd721eec374e5aca8727f43099509f139c991e9a5842cd3d10af67675f3602b15219909fcf65551dbf86630c509ca52596157a8eb7c5af09d48aa74ec8989e2aecd42b4aa8fd2d4ccfeb730e0cac83224979ca91154b987c548fbe8de19fa52d4ee28475b1af65451c44846d65", @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) recvmsg$unix(r4, &(0x7f0000000700)={&(0x7f0000000340), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000240)}, {&(0x7f00000003c0)=""/138, 0xdc}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000000540)=""/46, 0x2e}, {&(0x7f0000000580)=""/4, 0x4}], 0x100001ec, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2e000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff], 0x78}, 0x20010123) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, 0x0, 0x1) accept$unix(r6, &(0x7f0000000a80), &(0x7f0000000b00)=0x6e) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, 0x0, 0x1) recvmsg$unix(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x100) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x7, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000004ce19d011ddfb1001219ca1fe800000000", @ANYRES16=r9, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) fsmount(r5, 0x0, 0x78) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 09:01:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)="c952d4da405aa7644d523bdf0716703ca2e364ee6220b89881a443226d83b83770f30572083e5eeb983dd5d9d80c1559eb97e4f4a5670ee70b1cc771676c3b405311e2dbac0acaa2bb071693434046e037c4657c58550f60abce847203561a58abad0452e3c5275e28ada2dab91fc8becca8486ba41aec1fcce94cd113f8a796eb84ae2c56cefb5860db7fb6164b6a0c8dfdc351aa36404b55d5ea9cc7f23a5074bc40dcd005fee8ecdbd6267b5f25a58b26702567aba793327cdd5376c4805c6704f2d5663fa0b1a1689e18bb63ffb6773e43fef3ec3a0b8bb8439dc36eedae86bad8becf69e45b098577740b5e438855ffb5", 0xf3}, {&(0x7f0000000000)="2c1d7c0051402b0e501aa16a1a95eeb655200340a9c06d41d9fd4812a6411009d63758e29a5b1cc920dcef2f1e19eb3a5d2b9ea68b6ab132618ca9df66388b95ec4771b8e9320134168e43d5d7c6ed853b360968", 0x54}, {&(0x7f00000001c0)="61b8aa8b79fb5f17e3616aabbc7120d88326b4865bfd8207b9112b77e129e2f87f926a14f14ed4", 0x27}], 0x3, 0x80000000, 0xffffffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x83, 0x108) syz_mount_image$msdos(&(0x7f0000000280), &(0x7f00000002c0)='./file1\x00', 0x9, 0x2, &(0x7f0000000480)=[{&(0x7f0000000300)="4a97bd16130e5f0c1714a5d39c3f57f4c8283c482eb2f9425e1025a67364c820f87dd15da58b4b2042e6109c7f0735c0dc00b37178d047b142f6956e6d9ddf0018517a121691d9cbaa0c2db12b6011125c6a691c3dcc7eb88c2a0137fb873cc447d9bfc4863b97508e442cf8b9a40b37c827fd262217d67dcd7f2f5a6d0c18399277955fa92f994433a27d6708b770dd0223843ca99c0e7f357dc0f1b22781ad6ffdc5faeafd69fdecaf6dae302ec9caf2a5b40b46a6ea4802932808e6a0e9ec64f7cf8bda4e56f87b5481fd60533bb9bf48afbce69b793749c0c997eb4a60a2bf", 0xe1, 0x7}, {&(0x7f0000000400)="b0b7025e19635712bd4d2f70699f81f30426c982cf0e5d8005c706211b577bbd353d5a19ca6801d9abed53c42da6519f52f84b6a381898ac0429d30acda0b64f5cb6bcd3abc6478d4757a57f007f456ae901b3b8e4eaac50adfccd9cbe49e43f59d8e11a1c", 0x65, 0xff}], 0xa404, &(0x7f0000000780)=ANY=[@ANYBLOB="73686f77657865632c73686f77657865632c636865636b3d7374726963742c6e6f646f74732c646f74732c6e6f646f74732c646f74732c646f6e745f686173682c6f626a5f747970653d2f70726f632f636f6e736f6c6573002c00f22541c95527d9bd507efbef3cb63f14ea06c9cb85f87cda5e2b0991978f4bf55ef1947443dbca2b90dfcc153b6baf1bcfeb57941cd812bef9a8d28ad50ae2716e4ca1a91254d8be61cab9ac2536963370476d225af5dc9f5555"]) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000600)=0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000640)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000680)={"a8498da3d612d20d008c7b870f157b59", r4, r5, {0x289a, 0xe6cd}, {0x4f}, 0x6, [0x2, 0xffffffffffffffe1, 0xfffffffffffffff7, 0xfffffffffffffffd, 0x7f, 0x1ff, 0xfffffffffffffffa, 0x100000001, 0x2da4, 0x8, 0x7, 0x1f, 0x28, 0x1, 0x8, 0x6]}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x400000, 0x0) sendfile(r6, r0, &(0x7f00000005c0)=0x7ff, 0x3) sendfile(r0, r1, 0x0, 0x10000027f) 09:01:04 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 31) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 1918.553111] FAULT_INJECTION: forcing a failure. [ 1918.553111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1918.554442] CPU: 0 PID: 9828 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1918.555105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1918.555781] Call Trace: [ 1918.555999] [ 1918.556233] dump_stack_lvl+0xc1/0xf0 [ 1918.556577] should_fail_ex+0x4b4/0x5b0 [ 1918.556917] _copy_from_user+0x2e/0x180 [ 1918.557259] do_pages_stat+0x231/0x700 [ 1918.557629] ? __pfx_do_pages_stat+0x10/0x10 [ 1918.558022] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1918.558506] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 1918.558942] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1918.559353] kernel_move_pages+0x1117/0x1ad0 [ 1918.559708] ? ktime_get+0x157/0x1f0 [ 1918.560020] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1918.560530] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1918.561030] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1918.561521] ? __pfx_kernel_move_pages+0x10/0x10 [ 1918.561950] __x64_sys_move_pages+0xe1/0x1c0 [ 1918.562318] ? syscall_enter_from_user_mode+0x21/0x50 [ 1918.562732] do_syscall_64+0x3f/0x90 [ 1918.563038] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1918.563454] RIP: 0033:0x7f0f10577b19 [ 1918.563755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1918.565263] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1918.565891] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1918.566464] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1918.567090] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1918.567694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1918.568318] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1918.568909] [ 1918.572804] audit: type=1400 audit(1680166864.388:18): avc: denied { map } for pid=9831 comm="syz-executor.5" path="pipe:[35621]" dev="pipefs" ino=35621 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 09:01:04 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x1fffefff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:01:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x18000000) 09:01:04 executing program 5: move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil], 0x0, 0x0, 0x0) 09:01:04 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 32) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:01:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x8, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) chroot(&(0x7f00000004c0)='./file1\x00') setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000500)="1eb1df2cd01ddd64d4195de67871f47e82860d68ec2e4eb78d7e723494bdb78e5650a78c396b1311952d11507a42", 0x2e}, {&(0x7f0000000540)="61b1748652a97df73386c759b9335d876c4ce7a797ab3abbc7b29eeab2404d6465914e41efd22c773c41badd2cfa5c88041962607d87cd5350818489b9730f66ee7cc73b768e75", 0x47}, {&(0x7f00000005c0)="b36016766a0958b4ad2e8e2ed3b0874932723da23eb1b46e1cc6b38a5f1da62bd585f331216a21200d90015aa422b6d67ddfd30b3e55fd240c7e368ec8355158e992fd1973262ce3a8c4a2d157515c5d1fef4e995c7ecc2773320b7832e101759b6c4d45fc9a36cd621f84f30eef5bf88701929c2ee5a834814ed5e4d3c53660fc6ba9d99209199335e4e6d6d7e084f94a38ca903fb52a1538626b78ca1fdd106a", 0xa1}], 0x3) statx(r2, &(0x7f0000000140)='./file1\x00', 0x0, 0x800, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x10, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@dfltuid={'dfltuid', 0x3d, r3}}, {@common=@cachetag={'cachetag', 0x3d, '/proc/vmstat\x00'}}, {@sq={'sq', 0x3d, 0x1f}}, {@timeout={'timeout', 0x3d, 0x10000}}, {@rq={'rq', 0x3d, 0x9c}}, {@sq={'sq', 0x3d, 0x1f}}, {@rq={'rq', 0x3d, 0x5}}, {@rq={'rq', 0x3d, 0x1}}, {@common=@access_client}], [{@audit}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) mount$9p_unix(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x200000, &(0x7f0000000780)={'trans=unix,', {[{@cache_loose}, {@loose}, {@uname={'uname', 0x3d, ']%^+'}}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@privport}, {@cache_loose}, {@aname={'aname', 0x3d, '\xb2'}}], [{@obj_role={'obj_role', 0x3d, '$+(.:'}}, {@fsname={'fsname', 0x3d, 'rq'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'trans=rdma,'}}, {@fowner_gt={'fowner>', r3}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_gt={'euid>', r5}}, {@fowner_lt={'fowner<', r6}}, {@smackfshat={'smackfshat', 0x3d, 'timeout'}}]}}) sendfile(r0, r1, 0x0, 0x10000027f) 09:01:04 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:01:04 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1918.792877] FAULT_INJECTION: forcing a failure. [ 1918.792877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1918.793961] CPU: 1 PID: 9856 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1918.794600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1918.795253] Call Trace: [ 1918.795464] [ 1918.795652] dump_stack_lvl+0xc1/0xf0 [ 1918.795977] should_fail_ex+0x4b4/0x5b0 [ 1918.796350] _copy_to_user+0x2e/0x150 [ 1918.796669] do_pages_stat+0x588/0x700 [ 1918.797012] ? __pfx_lock_release+0x10/0x10 [ 1918.797402] ? __pfx_do_pages_stat+0x10/0x10 [ 1918.797766] ? lock_release+0x1e3/0x680 [ 1918.798107] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1918.798528] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1918.798985] kernel_move_pages+0x1117/0x1ad0 [ 1918.799398] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1918.799854] ? __pfx_kernel_move_pages+0x10/0x10 [ 1918.800249] ? fput+0x2f/0x1a0 [ 1918.800521] ? ksys_write+0x1a7/0x260 [ 1918.800847] ? __pfx_ksys_write+0x10/0x10 [ 1918.801195] __x64_sys_move_pages+0xe1/0x1c0 [ 1918.801562] ? syscall_enter_from_user_mode+0x21/0x50 [ 1918.801970] do_syscall_64+0x3f/0x90 [ 1918.802288] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1918.802722] RIP: 0033:0x7f0f10577b19 [ 1918.803064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1918.804828] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1918.805430] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1918.806006] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1918.806573] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1918.807132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1918.807686] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1918.808307] 09:01:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x40000100) 09:01:04 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x4) 09:01:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat(r1, &(0x7f0000000000)='./file1\x00', 0x100, 0x1a9) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}, {@any, 0x1f, 0x85, 0x7d, "902c8f", 0x42f1, 0x4}, {@any, 0xcb, 0x1, 0x8, "00173a", 0x81, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0xcd, 0x80, "fcd4a5", 0x7fff, 0x1f}]}}}, 0x5e) ioctl(r2, 0x2, &(0x7f00000000c0)="34ee4c3463804c0fac4c50d01c2bde23faa96fddaa2a7df34a67a7c2318fb75b752feb6b3314f121355c326da2947872060f55f0f59e55fb09f0d5de5fbb3ce79df4afa67b83609c1a24a5d6c0eb5c49b07fc6e19810fef9c2fe250c20383216fe114de4fbd36ffc064eb74209e6326c745032e1ef23f1fff291016ee2289d2018ce1ee0cb4c506068153167db4feec5800bbfa3c2af7bd4be74e694d651165a0879eb55e5ad60133af7e90d7cb37f0f1243ab5b6e") 09:01:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x83890100) 09:01:20 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 33) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:01:20 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x21010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:01:20 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xb11, &(0x7f0000ffc000/0x2000)=nil, 0x0) r0 = pkey_alloc(0x0, 0x1) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000a, r1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/105, 0x69, 0x1, &(0x7f0000001680)=""/102400, 0x19000}, &(0x7f00000001c0)=0x40) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, r0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @remote}, 0x3a}) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000680)="5dad0f535fed0705025fb81a0bfe8b4e6b7760566ad93691b392d441ce5e4567ae378ce4615777d50485584b98a3b89c0d62aabe9b9eb840ae54bf507a98a3b467dfcc69a3b3049daef74e68f3c52216c3b48f125d1159c71b4d310a1065d97a317eb1efd6e340d6eaad5ca176434469f26482487c41f1ff18c2e048fef728da26aec56ddadc687a9f0bef6668cb50901ea85a0d3daa6a35137db009991b3e736bf3648dbc123e577c5f9b04ada2d5cac6d85ef9f9d76711fa5338b850f5aa42fa06da22a1757b5fb0bb6aaee071f9869ef8aa046499e322fb342208d5203222c520503a5c8096c369916471bec221bdedf63eca9fc84a120c0bf5a80439972dc4da9721eb58162684fd7082754602ea47c5747d226a9c38368838c1b406c6fab35aa0c2e6cf50444b35994e2f3f82c2ba6ee32bb773da773efeb23ba02d0efb901fc018433ebdd866cb68df8b385782dccc2b04e959ec9dbfcf78b47a057076bd8a9057e23f9428dceef1d8ce070a3d2a7f558a63452ea8a764f7e445ed930737387245540c57fecf062385c3dd1c9a8aba885577c48a5b433bd74c29947b68beed0c4d7fb6dd6e5e939874c14ca54837021a01d13aae2f699090168b25c5aabc1fccd3e29a0e03593e323e737d3468a970ef216432bcdd6766e993758f16f7919754977a5073aa2714661947d5c364401092f3036779659827b5a48b7ce86dce8cbee4bf343459d5e3076f3c4f2a571eed354efbf2f3f34732a82f1799544a2e791ec520b33747eb18677d769ea774eede3920d6e549f8932a415ecd8e173b396760eddb3fd90ca43105afede808314a7f973123e5005769b8305ef6d69fb430ec1f8af1f05eeefc78ea84b20553dbed1de0fa3118d047bab12fc037136eb875b664b7e2da1b322dffb08f87fd8aa069e2f60de40c4d06528e569e1d6791837a56232c097b62395392a3ca124baa3f1c4d00695ed87ef8bb909da9da9ac6d7c6e8f2f1e4111098dcc5320659d08fb80e3e684814d49926c63a8730369c575a166fdecafecdac5be857cd515fc61f34a0eba49241e4858627d71dff3585492e58a59d4f0641bff5c4332b62476047ae462d86b8bb27452fac0d9b5865e791255ef80fd7c47751a3aeb2e088a01120f342d97d835e04d6337b0e203c9ea9c16c943f1895a06ca8b38af89b0020ef4b0532783100b52652e51899d909e88515cd0ce1a183893a0c8554d93ba6a4f9c0e77aa46941f58e29947734399f8b790007368de0c7c9825c1c7d53005fffb9d6292758e21c2abc525930e03b50bc96f91ac029fa394ca1e5b3d1ba6ee1d774e96e50a55a0d86f5192209cc461dcf83c168c9ada5e2a9f2015ae6ad686cb1e4d8f0571b73553712bab8fdd4aa77f4ecd8c6f08184bd556cd2692de9bf4a0d5336e2149fc4558e8929ef97bfa4f6e6da2ede22ac3924481f53e41ac04cde4bdacd803172a76e89b4702886554ab7880d0b03ce12006952ca2b9f6dde4c0fd5994f3b954d1a74098054b90a98465618b708b18a9770f7d4d2aefd47e2286712610e027c26331bfd1ad141db409c267d095d1a91f05cf034ea7f27c91f09165813dd34ba42309d767d2d54b7fd08533ff944ee6099698af52dd515addeb2b03e32edefe56faeb6ac137af046bfb2ceed16f510908746bd5b03c9f68b35902938c5c7439a585b1e1f4cf94e6c021964b87629195b6f304cfee4e4159af450f923235faf86aaa7d6fb7a3abc0c166da07f1f9d4da7bcd255305245e7b7ae6432757e8d41a8e68e69caa27224f78388ddb29fd6b13838cccdd1f0c27c813b89b641901a4b2b231697fdc6170e75b86a267912b2936924648b809a4d4deeb85ba48817c51942375b153debf0f1d9f40f83ab2df466aa73171841b5db3c11d8e9a51c38eba99d2f29b2dc5a58d6d564e25ded5b9066a71975395cbd0f967506a2e487c4b8a34717a9171879192c3565776efeea383b2cca19f414c821dc079786a96460ed87c8dd1cc88ecc605123cd1b505aff9e822ffe054f2255c705e8e2bfd3bd381b2788c188fbe3ade9e190653f78ae4e92d4253bdbe4592cd14e27a8a8be5e785ea3bdc5b126da28795b4ad493db72242b953c667171585896b80f0d766c595548c5a589d8fd1282ab75c8f3fe21c86f994e6ba220da0aaf5644df65655f529b0e2757934652c3ea12cc48c859593a03f9e4f8d105bf8afe21febcde241b0b510309afdd799b9e3a524b229930509160ddb69ac6f4b0810f541ddb993f1dd6e20f09056ec9a6a26ba573fcb5cecf804b160e56d65372d1303e739721432d38badcc1d94e88ffeecde695ebbfbe2bf192c786b64881fbe24319860b82744d084d26cd89473f237469822b744dee9e606d11771e38d5f09a3dc9a7334b352db168011aa962190369f396a24585093cdc1b52ad18e5b2bce663d5b2019a7b988b8b824d1655d952628681894b30fbe8b7a267be3d274fa754b03d263afd85d10d60141105eb1c1e85d348dd77c2db64834e66d94cec473301db7937ab581c37e690b334a6c7c1402703fdc246f8ca1dd67bb5699688df4536a700adc098c17d7c99b27f8ea0a70139c5ba2e15297ea43ba99faac58233aaede42209f986cba6cf1fa2859d292fbf53f4344ca16376f1bcac944842d23c9a9764e727ae856c10609a9742316d6e5138e93eb42b0248bc40ea4e46e53dda09993b1ad54d47644742b7ac0abd125dbee6d334f37b1a05207afdb4d041a16081d950a593035ef30bd64c16afa748eab24af3149f0c15a9228942cfa9341f9c76c0788a0ba9e869900094be9ac5c1fdca36ff8f0b1778087a83c4c7af18304aed1a83638820d2da5f48a52a2f9c59efde73b40160f4554ddfd0ace2440f0b3a3f734dd831c03695999d9f75ee9bd5e72be1eabd0a9cead1ca857964d96f81ac1a6cf851256aefb62996341f732e48aeb96daf024a81537434a1a72eefe500120059d07dca3b8c96d7fa846e44339e7f452d9959ebfcf7a89415686d0e28bd033a6ea93814b207c3c88dcad4ebdb8824ff84aa3030ef07dfa6135a7e9013372df9505ae7fb924f1e540e43f4fe235fd97943eb873d6e7e97f5a81f6e47d1b2c3dfce3bf1108cba37db038a06ba3f0b4702ec7fc3a249d22e7357ed5b6d86fbbabbe28966acc15043e1dd6603a8f7bd1e8a43a60e75cb68135b22c81b74e246bcdf0e50869b8e8cc611c7a99251f75753be579cafd8d60f703bcc5a1d4967714a8a1c3d5c35ac2983ff48d2c68ca6290ea3330aef1db6c97271b4f04c8dd44d92ce8eb69dbea417835d5608c67a2f49d30ea1ed819d5666d76eccfdf25c9a7eef026aabd63d4707258295b6b833da021e98d3a1aef48c17f01a26605dbb317bd18121a6d00543192e8f24c99c13d5eafd2a3e6c6c7f0c7c24994442346a73bace5ba78457f0c9b1845b40c5d90d30bb3866bf0a89fd2510f359fdadeeba80570ac65d66f580c33a2466154aa50b70007116d40287927403acf48898d2498c7ca5de67d4a67128b6e28f0eee2f8cdaf54cf3a5213d91ae0a0d84cc2cace9e6d2c6b7c65e7b5cbc2faf5513ced2d9874004a3b2434301b593ad400f7c79d4f257d82d0ffd30b336c91a4787e309c4915223957d31dc694b554c0d41177bfbab439fcf1bbd16990520597306728a114fd118c9cd1ec2b537ac9106211eb8dfab7937ee910575a26f30c51f13f62d8eb68a5c63b76c0cca9295e6f62e78fac83e144192e5acd26e2b21b08db99c4ff89018a6b26bdfb16cf015e4b40889a20c9581046a239091d76ec3a6bbcd64b662b322743c0ba9cfd9443de626036eb5bf0d42bb91373cd5c489bbe7eddd6bf22258009c3760b751f2786cce3acf8259cec9733bdfbf0d173a9a37cb39bf5c83add2b07b2a8997049678075df6e98c7e43c407ee9c4d8c1ccfe1cd5e1bc8c02ad049bf4c0aa24d9beada532557758115a48b4a1fd2dea353cfbcec6fb1cb1636b9df395ac5acd29f7985653c7135e3508fc04b0e061fe4dd9db98f372a7345bf73b8cacde2752a32e101197c7c3c21e76d570bb0271954b95041fdbe59afb46faf36fe388e8a41dd4bb2e06b9279313f9500011479a014a1b9f415942ec8f504a1f14db7749dd5ca89389e93647e052a234622e73569099d558473723abccf04d1566990a657a52de73d453272b8c0c150e1a325dee7e1e717e069c07bdcbca28fc12cda8f33e63162db7ad60e4e3b26239d2981bede30bc950ba7fbf3036c962fb8c69e794c2c8c24b6bed0107cf3c7f768a00b22afe088cd47fc639dbcc39aaffefc6eada7d78a41e0d5265bc9b67aaa275386a97098ce5f24ffba3aa21b8d85a5fd60f3d56636c7d268e0f7499d5fc2358418c1995244c73068f44b6065702a840c3fb3275d758ca8c6130356202ea6467e819441f186ee10b06e8f4a0ffa6ead5cae636a5c566fe3ef3ecdd6298861070f2b478bbbf41415cc28f37583f5d1e7249692aa7d7ded0f4023d54643f0b0e4901cd332b36ed0a9921199d7081779f45febb4532bbed5021679945975aeaf4a8d5722abcd489d1802654669e64e77db3e06dc4bf3ab79acc760eef3d784e1a303bec03c06555c838c088faa9d33b73c44dced9d8f9dadaaef5b047ca6792cb0bd30c109dd03fbe75d7a9d7432567b1adcdd17cc7fbacd0b2e23660c7182a7f2ba8ea6ea7d9b13fdc7c304c7bbd9d2abc48be661c18a46cbf33989bdfbe956f9e0dc2000eca0d0ff9ea2a054cd4a3173b1afa1599de8bdcf8d5fded8dfa8343273a98d40432d575906e2dcc380f07865928824e2dcdb60423607e41160b386b8cd2f8c06be2b125c52a009e30ce2679b61d4d71a2a357a7a523e5ed6c613b51df52ab676881b377c466b961b06b7a97ab27392fd64946fe9250e4dbbbf766f84a58604090d7bffd2c0702948c824e5ae831be2638919fa7e8395de77a97b4f79f0b7a7f1ecad9f8f40f628e3f878752f5b785c95068f8dfa17f18695d4c07ada237946f63be421201d2a18d38177cf954164886737c540401acf325d3583371e3fbbc4f8b3969b37cba9ff22af0044d3cd49c18c1bdf778dd3d5113feedf76fc2d826a171e5695eec7e63df6532aa11c985a294c8d11578fcfaf1f931cc5b3d27ed45e82e26a30ba322a1ba1728ea630a0215164ca850d2c8062ab923e2b18cceb3cf9bcb13c0060fc71aaff9ee6588319c004f33c86fe7b3d4aeaa643cf18ecb4236e2a5ff265e36e9d9ec346f197c25ca95113ec14c3fe904ac1b74aacfd27fc47b4848353a51f58b5585cb62e23cb3208f1615f7c5fef118e4653d02a2bf5dacba79d589d2ec7a7760b626d7a63730f8262246fdabce0b2163c6cd4a85d064b2eaa0f03d7391f0cb1c88fad4db5d9c5d8cd71b411e7389ab1838d8230c25ced630f55afd5dd43a5603919acad5f75251c06b8a32d426297b99dd7a790a447928d86c8e1786204966380ae73a51cbbd81a20fab4cb018449cb63e36f7fdb5f4d5a63064f88f8b4096d2352e997df90af96a1dd3caf755edd98368c24198060bf460bce00de82d5ef8429676c10d7dc57d29dba46f808f399862ea5e9f4df386039c1f1940d859d1edd9fb7f17442c99b557d0b121cc1f2424d757d6b7a230b6be9e99541436ec9e06c0e42a8c2118fb0202a9160e495db273dc6b90f3ce7f0fabf0faf8c72d9b28f1a72533638c58dcab2e5d1d3d3178105054cd1752398599dc6f8ea40a657024b493242237d231079de2b0fa372c05f2e5a6c88051cd1", 0x1000}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="78d0c6996faa5361d884d8e294fc264f2dcc0df36543bd8358c09d96501dbfffc0ee228c586f737af51cf8546fed7f3f341f115cdfd6ec1eaf629fe45a3e151cc3d6c19bcc", 0x45}], 0x1, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}}], 0x2, 0x40000) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, r0) 09:01:20 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x20) 09:01:20 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:01:20 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x0, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 1934.534406] FAULT_INJECTION: forcing a failure. [ 1934.534406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1934.535549] CPU: 1 PID: 9889 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1934.536100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.536679] Call Trace: [ 1934.536869] [ 1934.537031] dump_stack_lvl+0xc1/0xf0 [ 1934.537306] should_fail_ex+0x4b4/0x5b0 [ 1934.537589] _copy_from_user+0x2e/0x180 [ 1934.537853] do_pages_stat+0x231/0x700 [ 1934.538124] ? __pfx_lock_release+0x10/0x10 [ 1934.538425] ? __pfx_do_pages_stat+0x10/0x10 [ 1934.538743] ? lock_release+0x1e3/0x680 [ 1934.539035] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1934.539394] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1934.539752] kernel_move_pages+0x1117/0x1ad0 [ 1934.540064] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1934.540534] ? __pfx_kernel_move_pages+0x10/0x10 [ 1934.540944] ? fput+0x2f/0x1a0 [ 1934.541228] ? ksys_write+0x1a7/0x260 [ 1934.541573] ? __pfx_ksys_write+0x10/0x10 [ 1934.541965] __x64_sys_move_pages+0xe1/0x1c0 [ 1934.542376] ? syscall_enter_from_user_mode+0x21/0x50 [ 1934.542854] do_syscall_64+0x3f/0x90 [ 1934.543220] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1934.543702] RIP: 0033:0x7f0f10577b19 [ 1934.544028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.545538] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1934.546145] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1934.546727] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1934.547290] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1934.547861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1934.548450] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1934.549045] 09:01:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xd0100000) 09:01:20 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x22010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:01:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat(r1, &(0x7f0000000000)='./file1\x00', 0x100, 0x1a9) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}, {@any, 0x1f, 0x85, 0x7d, "902c8f", 0x42f1, 0x4}, {@any, 0xcb, 0x1, 0x8, "00173a", 0x81, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0xcd, 0x80, "fcd4a5", 0x7fff, 0x1f}]}}}, 0x5e) ioctl(r2, 0x2, &(0x7f00000000c0)="34ee4c3463804c0fac4c50d01c2bde23faa96fddaa2a7df34a67a7c2318fb75b752feb6b3314f121355c326da2947872060f55f0f59e55fb09f0d5de5fbb3ce79df4afa67b83609c1a24a5d6c0eb5c49b07fc6e19810fef9c2fe250c20383216fe114de4fbd36ffc064eb74209e6326c745032e1ef23f1fff291016ee2289d2018ce1ee0cb4c506068153167db4feec5800bbfa3c2af7bd4be74e694d651165a0879eb55e5ad60133af7e90d7cb37f0f1243ab5b6e") 09:01:20 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) dup2(0xffffffffffffffff, r0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) fcntl$notify(r1, 0x402, 0x80000001) 09:01:20 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 34) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:01:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xf5000000) 09:01:20 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x26010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:01:20 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) rt_tgsigqueueinfo(r2, r1, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) move_pages(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 09:01:20 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000004c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 1934.778270] FAULT_INJECTION: forcing a failure. [ 1934.778270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1934.779477] CPU: 1 PID: 9911 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1934.780170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.780920] Call Trace: [ 1934.781155] [ 1934.781378] dump_stack_lvl+0xc1/0xf0 [ 1934.781714] should_fail_ex+0x4b4/0x5b0 [ 1934.782062] _copy_to_user+0x2e/0x150 [ 1934.782412] do_pages_stat+0x588/0x700 [ 1934.782771] ? __pfx_lock_release+0x10/0x10 [ 1934.783146] ? __pfx_do_pages_stat+0x10/0x10 [ 1934.783530] ? lock_release+0x1e3/0x680 [ 1934.783881] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1934.784390] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1934.784857] kernel_move_pages+0x1117/0x1ad0 [ 1934.785267] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1934.785748] ? __pfx_kernel_move_pages+0x10/0x10 [ 1934.786177] ? fput+0x2f/0x1a0 [ 1934.786495] ? ksys_write+0x1a7/0x260 [ 1934.786854] ? __pfx_ksys_write+0x10/0x10 [ 1934.787265] __x64_sys_move_pages+0xe1/0x1c0 [ 1934.787680] ? syscall_enter_from_user_mode+0x21/0x50 [ 1934.788122] do_syscall_64+0x3f/0x90 [ 1934.788493] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1934.788982] RIP: 0033:0x7f0f10577b19 [ 1934.789321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.790900] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1934.791573] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1934.792174] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1934.792840] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1934.793481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1934.794119] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1934.794751] 09:01:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat(r1, &(0x7f0000000000)='./file1\x00', 0x100, 0x1a9) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}, {@any, 0x1f, 0x85, 0x7d, "902c8f", 0x42f1, 0x4}, {@any, 0xcb, 0x1, 0x8, "00173a", 0x81, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0xcd, 0x80, "fcd4a5", 0x7fff, 0x1f}]}}}, 0x5e) ioctl(r2, 0x2, &(0x7f00000000c0)="34ee4c3463804c0fac4c50d01c2bde23faa96fddaa2a7df34a67a7c2318fb75b752feb6b3314f121355c326da2947872060f55f0f59e55fb09f0d5de5fbb3ce79df4afa67b83609c1a24a5d6c0eb5c49b07fc6e19810fef9c2fe250c20383216fe114de4fbd36ffc064eb74209e6326c745032e1ef23f1fff291016ee2289d2018ce1ee0cb4c506068153167db4feec5800bbfa3c2af7bd4be74e694d651165a0879eb55e5ad60133af7e90d7cb37f0f1243ab5b6e") 09:01:20 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x3f000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:01:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xf6ffffff) 09:01:20 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f00003fe000/0xc00000)=nil], 0x0, 0x0, 0x2) 09:01:37 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 35) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:01:37 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x0, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:01:37 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x0) 09:01:37 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:01:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xfffff000) 09:01:37 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/26, 0x1a) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=@sha1={0x1, "9f6b702ee91953a62c471edb8ac95c857264dc48"}, 0x15, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = memfd_secret(0x0) syz_io_uring_setup(0x55f1, &(0x7f0000000000)={0x0, 0xc996, 0x2, 0x3, 0x41, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:01:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat(r1, &(0x7f0000000000)='./file1\x00', 0x100, 0x1a9) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}, {@any, 0x1f, 0x85, 0x7d, "902c8f", 0x42f1, 0x4}, {@any, 0xcb, 0x1, 0x8, "00173a", 0x81, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0xcd, 0x80, "fcd4a5", 0x7fff, 0x1f}]}}}, 0x5e) 09:01:37 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 1951.743721] FAULT_INJECTION: forcing a failure. [ 1951.743721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1951.746425] CPU: 0 PID: 9945 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1951.747114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.747832] Call Trace: [ 1951.748065] [ 1951.748263] dump_stack_lvl+0xc1/0xf0 [ 1951.748629] should_fail_ex+0x4b4/0x5b0 [ 1951.748969] _copy_from_user+0x2e/0x180 [ 1951.749315] do_pages_stat+0x231/0x700 [ 1951.749647] ? __pfx_lock_release+0x10/0x10 [ 1951.750010] ? __pfx_do_pages_stat+0x10/0x10 [ 1951.750394] ? lock_release+0x1e3/0x680 [ 1951.750750] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1951.751213] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1951.751686] kernel_move_pages+0x1117/0x1ad0 [ 1951.752088] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1951.752603] ? __pfx_kernel_move_pages+0x10/0x10 [ 1951.753018] ? fput+0x2f/0x1a0 [ 1951.753319] ? ksys_write+0x1a7/0x260 [ 1951.753673] ? __pfx_ksys_write+0x10/0x10 [ 1951.754067] __x64_sys_move_pages+0xe1/0x1c0 [ 1951.754467] ? syscall_enter_from_user_mode+0x21/0x50 [ 1951.754930] do_syscall_64+0x3f/0x90 [ 1951.755294] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1951.755803] RIP: 0033:0x7f0f10577b19 [ 1951.756155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.757832] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1951.758489] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1951.759120] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1951.759741] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1951.760391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1951.761056] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1951.761711] 09:01:37 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x71000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:01:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat(r1, &(0x7f0000000000)='./file1\x00', 0x100, 0x1a9) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) 09:01:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xfffffff6) 09:01:37 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 36) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:01:37 executing program 5: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@empty, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000040)=0x1, 0x4) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x3f, 0x3f, 0x5, 0x10, @empty, @loopback, 0x8, 0x1, 0x1, 0x4768}}) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) [ 1951.932078] FAULT_INJECTION: forcing a failure. [ 1951.932078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1951.933448] CPU: 1 PID: 9964 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1951.934140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.934803] Call Trace: [ 1951.935027] [ 1951.935225] dump_stack_lvl+0xc1/0xf0 [ 1951.935568] should_fail_ex+0x4b4/0x5b0 [ 1951.935913] _copy_to_user+0x2e/0x150 [ 1951.936252] do_pages_stat+0x588/0x700 [ 1951.936625] ? __pfx_lock_release+0x10/0x10 [ 1951.937020] ? __pfx_do_pages_stat+0x10/0x10 [ 1951.937404] ? lock_release+0x1e3/0x680 [ 1951.937763] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1951.938197] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1951.938649] kernel_move_pages+0x1117/0x1ad0 [ 1951.939033] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1951.939490] ? __pfx_kernel_move_pages+0x10/0x10 [ 1951.939911] ? fput+0x2f/0x1a0 [ 1951.940202] ? ksys_write+0x1a7/0x260 [ 1951.940570] ? __pfx_ksys_write+0x10/0x10 [ 1951.940983] __x64_sys_move_pages+0xe1/0x1c0 [ 1951.941389] ? syscall_enter_from_user_mode+0x21/0x50 [ 1951.941858] do_syscall_64+0x3f/0x90 [ 1951.942189] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1951.942668] RIP: 0033:0x7f0f10577b19 [ 1951.942987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.944553] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1951.945186] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1951.945815] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1951.946474] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1951.947077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1951.947707] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1951.948315] 09:01:37 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xc3010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:01:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat(r1, &(0x7f0000000000)='./file1\x00', 0x100, 0x1a9) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) 09:01:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x1000000000000) 09:01:54 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x0) 09:01:54 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x0, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:01:54 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 37) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:01:54 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:01:54 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xc4010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:01:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat(r1, &(0x7f0000000000)='./file1\x00', 0x100, 0x1a9) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) 09:01:54 executing program 5: move_pages(0x0, 0xc, &(0x7f00000000c0)=[&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, 0x0, 0x0) 09:01:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x8000000000000) [ 1968.292253] FAULT_INJECTION: forcing a failure. [ 1968.292253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1968.293624] CPU: 1 PID: 9986 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1968.294340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1968.294970] Call Trace: [ 1968.295180] [ 1968.295421] dump_stack_lvl+0xc1/0xf0 [ 1968.295804] should_fail_ex+0x4b4/0x5b0 [ 1968.296170] _copy_from_user+0x2e/0x180 [ 1968.296534] do_pages_stat+0x231/0x700 [ 1968.296915] ? __pfx_lock_release+0x10/0x10 [ 1968.297293] ? __pfx_do_pages_stat+0x10/0x10 [ 1968.297699] ? lock_release+0x1e3/0x680 [ 1968.298069] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1968.298529] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1968.298954] kernel_move_pages+0x1117/0x1ad0 [ 1968.299338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1968.299773] ? __pfx_kernel_move_pages+0x10/0x10 [ 1968.300169] ? fput+0x2f/0x1a0 [ 1968.300489] ? ksys_write+0x1a7/0x260 [ 1968.300874] ? __pfx_ksys_write+0x10/0x10 [ 1968.301242] __x64_sys_move_pages+0xe1/0x1c0 [ 1968.301635] ? syscall_enter_from_user_mode+0x21/0x50 [ 1968.302077] do_syscall_64+0x3f/0x90 [ 1968.302413] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1968.302874] RIP: 0033:0x7f0f10577b19 [ 1968.303212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1968.304804] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1968.305457] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1968.306034] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1968.306674] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1968.307274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1968.307876] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1968.308522] 09:01:54 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xc5010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:01:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat(r1, &(0x7f0000000000)='./file1\x00', 0x100, 0x1a9) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}, {@any, 0x1f, 0x85, 0x7d, "902c8f", 0x42f1, 0x4}, {@any, 0xcb, 0x1, 0x8, "00173a", 0x81, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0xcd, 0x80, "fcd4a5", 0x7fff, 0x1f}]}}}, 0x5e) 09:01:54 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x6, &(0x7f0000ffd000/0x3000)=nil, 0x1) 09:02:10 executing program 5: connect(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x80) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) fork() 09:02:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xf0ffffffffffff) 09:02:10 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x0) 09:02:10 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x0, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:02:10 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xc6010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:02:10 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat(r1, &(0x7f0000000000)='./file1\x00', 0x100, 0x1a9) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}, {@any, 0x1f, 0x85, 0x7d, "902c8f", 0x42f1, 0x4}, {@any, 0xcb, 0x1, 0x8, "00173a", 0x81, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0xcd, 0x80, "fcd4a5", 0x7fff, 0x1f}]}}}, 0x5e) 09:02:10 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:02:10 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 38) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 1984.716234] FAULT_INJECTION: forcing a failure. [ 1984.716234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1984.718966] CPU: 1 PID: 10027 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1984.719625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1984.720267] Call Trace: [ 1984.720488] [ 1984.720674] dump_stack_lvl+0xc1/0xf0 [ 1984.721026] should_fail_ex+0x4b4/0x5b0 [ 1984.721353] _copy_to_user+0x2e/0x150 [ 1984.721663] do_pages_stat+0x588/0x700 [ 1984.721987] ? __pfx_lock_release+0x10/0x10 [ 1984.722355] ? __pfx_do_pages_stat+0x10/0x10 [ 1984.722721] ? lock_release+0x1e3/0x680 [ 1984.723049] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1984.723467] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1984.723884] kernel_move_pages+0x1117/0x1ad0 [ 1984.724263] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1984.724703] ? __pfx_kernel_move_pages+0x10/0x10 [ 1984.725139] ? fput+0x2f/0x1a0 [ 1984.725447] ? ksys_write+0x1a7/0x260 [ 1984.725771] ? __pfx_ksys_write+0x10/0x10 [ 1984.726122] __x64_sys_move_pages+0xe1/0x1c0 [ 1984.726514] ? syscall_enter_from_user_mode+0x21/0x50 [ 1984.726926] do_syscall_64+0x3f/0x90 [ 1984.727234] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1984.727692] RIP: 0033:0x7f0f10577b19 [ 1984.727996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1984.729495] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1984.730105] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1984.730714] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1984.730727] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1984.730740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1984.730752] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1984.730778] 09:02:10 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xc9010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:02:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x100000000000000) 09:02:10 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}, {@any, 0x1f, 0x85, 0x7d, "902c8f", 0x42f1, 0x4}, {@any, 0xcb, 0x1, 0x8, "00173a", 0x81, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0xcd, 0x80, "fcd4a5", 0x7fff, 0x1f}]}}}, 0x5e) 09:02:10 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 39) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:02:10 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40d803, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @empty, 0x80000001}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) fcntl$notify(r1, 0x402, 0x11) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 09:02:10 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xd1010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:02:10 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}, {@any, 0x1f, 0x85, 0x7d, "902c8f", 0x42f1, 0x4}, {@any, 0xcb, 0x1, 0x8, "00173a", 0x81, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0xcd, 0x80, "fcd4a5", 0x7fff, 0x1f}]}}}, 0x5e) 09:02:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x200000000000000) 09:02:10 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x0, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 1984.940874] FAULT_INJECTION: forcing a failure. [ 1984.940874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1984.942184] CPU: 0 PID: 10044 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 1984.942948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1984.943603] Call Trace: [ 1984.943858] [ 1984.944054] dump_stack_lvl+0xc1/0xf0 [ 1984.944382] should_fail_ex+0x4b4/0x5b0 [ 1984.944750] _copy_from_user+0x2e/0x180 [ 1984.945161] do_pages_stat+0x231/0x700 [ 1984.945485] ? __pfx_lock_release+0x10/0x10 [ 1984.945832] ? __pfx_do_pages_stat+0x10/0x10 [ 1984.946190] ? lock_release+0x1e3/0x680 [ 1984.946561] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1984.947047] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1984.947503] kernel_move_pages+0x1117/0x1ad0 [ 1984.947967] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1984.948436] ? __pfx_kernel_move_pages+0x10/0x10 [ 1984.948869] ? fput+0x2f/0x1a0 [ 1984.949217] ? ksys_write+0x1a7/0x260 [ 1984.949560] ? __pfx_ksys_write+0x10/0x10 [ 1984.949953] __x64_sys_move_pages+0xe1/0x1c0 [ 1984.950335] ? syscall_enter_from_user_mode+0x21/0x50 [ 1984.950782] do_syscall_64+0x3f/0x90 [ 1984.951119] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1984.951547] RIP: 0033:0x7f0f10577b19 [ 1984.951899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1984.953482] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1984.954174] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 1984.954772] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 1984.955386] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1984.956006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1984.956582] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 1984.957299] 09:02:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x400000000000000) 09:02:26 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xf5ffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2000.701464] FAULT_INJECTION: forcing a failure. [ 2000.701464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2000.702567] CPU: 0 PID: 10072 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2000.703250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2000.703881] Call Trace: [ 2000.704095] [ 2000.704283] dump_stack_lvl+0xc1/0xf0 [ 2000.704605] should_fail_ex+0x4b4/0x5b0 [ 2000.704936] _copy_to_user+0x2e/0x150 [ 2000.705287] do_pages_stat+0x588/0x700 [ 2000.705612] ? __pfx_lock_release+0x10/0x10 [ 2000.705978] ? __pfx_do_pages_stat+0x10/0x10 [ 2000.706398] ? lock_release+0x1e3/0x680 [ 2000.706986] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2000.707413] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2000.707815] kernel_move_pages+0x1117/0x1ad0 [ 2000.708160] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2000.708589] ? __pfx_kernel_move_pages+0x10/0x10 [ 2000.708964] ? fput+0x2f/0x1a0 [ 2000.709252] ? ksys_write+0x1a7/0x260 [ 2000.709561] ? __pfx_ksys_write+0x10/0x10 [ 2000.709896] __x64_sys_move_pages+0xe1/0x1c0 [ 2000.710251] ? syscall_enter_from_user_mode+0x21/0x50 [ 2000.710666] do_syscall_64+0x3f/0x90 [ 2000.710981] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2000.711422] RIP: 0033:0x7f0f10577b19 [ 2000.711732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2000.713281] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2000.713898] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2000.714477] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2000.715084] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2000.715667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2000.716232] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2000.716809] 09:02:26 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:02:26 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x0) 09:02:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x1800000000000000) 09:02:26 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 40) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:02:26 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x0, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:02:26 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c1042, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}, {@any, 0x1f, 0x85, 0x7d, "902c8f", 0x42f1, 0x4}, {@any, 0xcb, 0x1, 0x8, "00173a", 0x81, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0xcd, 0x80, "fcd4a5", 0x7fff, 0x1f}]}}}, 0x5e) 09:02:26 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xfbffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:02:26 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}, {@any, 0x1f, 0x85, 0x7d, "902c8f", 0x42f1, 0x4}, {@any, 0xcb, 0x1, 0x8, "00173a", 0x81, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0xcd, 0x80, "fcd4a5", 0x7fff, 0x1f}]}}}, 0x5e) 09:02:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x4000010000000000) 09:02:26 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 41) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:02:26 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xffefff1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:02:26 executing program 6: syz_emit_vhci(0x0, 0x0) [ 2000.873297] FAULT_INJECTION: forcing a failure. [ 2000.873297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2000.874509] CPU: 1 PID: 10091 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2000.875131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2000.875784] Call Trace: [ 2000.875996] [ 2000.876186] dump_stack_lvl+0xc1/0xf0 [ 2000.876499] should_fail_ex+0x4b4/0x5b0 [ 2000.876844] _copy_from_user+0x2e/0x180 [ 2000.877205] do_pages_stat+0x231/0x700 [ 2000.877542] ? __pfx_lock_release+0x10/0x10 [ 2000.877945] ? __pfx_do_pages_stat+0x10/0x10 [ 2000.878323] ? lock_release+0x1e3/0x680 [ 2000.878653] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2000.879115] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2000.879572] kernel_move_pages+0x1117/0x1ad0 [ 2000.879948] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2000.880390] ? __pfx_kernel_move_pages+0x10/0x10 [ 2000.880769] ? fput+0x2f/0x1a0 [ 2000.881045] ? ksys_write+0x1a7/0x260 [ 2000.881392] ? __pfx_ksys_write+0x10/0x10 [ 2000.881733] __x64_sys_move_pages+0xe1/0x1c0 [ 2000.882129] ? syscall_enter_from_user_mode+0x21/0x50 [ 2000.882578] do_syscall_64+0x3f/0x90 [ 2000.882887] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2000.883339] RIP: 0033:0x7f0f10577b19 [ 2000.883678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2000.885116] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2000.885735] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2000.886268] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2000.886812] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2000.887376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2000.887977] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2000.888523] 09:02:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x8389010000000000) 09:02:26 executing program 6: syz_emit_vhci(0x0, 0x0) 09:02:26 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xfffffff5}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:02:26 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x0, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:02:47 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xfffffffb}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:02:47 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:02:47 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 42) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:02:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xd010000000000000) 09:02:47 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:02:47 executing program 6: syz_emit_vhci(0x0, 0x0) 09:02:47 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:02:47 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, r0) [ 2022.151239] FAULT_INJECTION: forcing a failure. [ 2022.151239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2022.152496] CPU: 0 PID: 10122 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2022.153168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.153910] Call Trace: [ 2022.154133] [ 2022.154330] dump_stack_lvl+0xc1/0xf0 [ 2022.154668] should_fail_ex+0x4b4/0x5b0 [ 2022.155057] _copy_to_user+0x2e/0x150 [ 2022.155391] do_pages_stat+0x588/0x700 [ 2022.155736] ? __pfx_lock_release+0x10/0x10 [ 2022.156120] ? __pfx_do_pages_stat+0x10/0x10 [ 2022.156507] ? lock_release+0x1e3/0x680 [ 2022.156877] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2022.157301] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2022.157784] kernel_move_pages+0x1117/0x1ad0 [ 2022.158198] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2022.158641] ? __pfx_kernel_move_pages+0x10/0x10 [ 2022.159061] ? fput+0x2f/0x1a0 [ 2022.159350] ? ksys_write+0x1a7/0x260 [ 2022.159695] ? __pfx_ksys_write+0x10/0x10 [ 2022.160100] __x64_sys_move_pages+0xe1/0x1c0 [ 2022.160488] ? syscall_enter_from_user_mode+0x21/0x50 [ 2022.160932] do_syscall_64+0x3f/0x90 [ 2022.161305] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2022.161828] RIP: 0033:0x7f0f10577b19 [ 2022.162146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.163602] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2022.164345] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2022.164916] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2022.165543] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2022.166150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2022.166707] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2022.167337] 09:02:47 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:02:47 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}, {@any, 0x1f, 0x85, 0x7d, "902c8f", 0x42f1, 0x4}, {@any, 0xcb, 0x1, 0x8, "00173a", 0x81, 0x1}]}}}, 0x4f) 09:02:48 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 09:02:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xf500000000000000) 09:02:48 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:02:48 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 43) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 2022.405380] FAULT_INJECTION: forcing a failure. [ 2022.405380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2022.406900] CPU: 0 PID: 10147 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2022.407580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.408240] Call Trace: [ 2022.408476] [ 2022.408681] dump_stack_lvl+0xc1/0xf0 [ 2022.409047] should_fail_ex+0x4b4/0x5b0 [ 2022.409497] _copy_from_user+0x2e/0x180 [ 2022.409878] do_pages_stat+0x231/0x700 [ 2022.410252] ? __pfx_lock_release+0x10/0x10 [ 2022.410687] ? __pfx_do_pages_stat+0x10/0x10 [ 2022.411087] ? lock_release+0x1e3/0x680 [ 2022.411452] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2022.411914] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2022.412391] kernel_move_pages+0x1117/0x1ad0 [ 2022.412810] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2022.413242] ? __pfx_kernel_move_pages+0x10/0x10 [ 2022.413676] ? fput+0x2f/0x1a0 [ 2022.413950] ? ksys_write+0x1a7/0x260 [ 2022.414272] ? __pfx_ksys_write+0x10/0x10 [ 2022.414643] __x64_sys_move_pages+0xe1/0x1c0 [ 2022.415026] ? syscall_enter_from_user_mode+0x21/0x50 [ 2022.415490] do_syscall_64+0x3f/0x90 [ 2022.415863] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2022.416336] RIP: 0033:0x7f0f10577b19 [ 2022.416665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.418227] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2022.418873] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2022.419489] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2022.420149] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2022.420817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2022.421384] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2022.422020] [ 2038.705290] FAULT_INJECTION: forcing a failure. [ 2038.705290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2038.706455] CPU: 0 PID: 10155 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2038.707106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.707764] Call Trace: [ 2038.707974] [ 2038.708163] dump_stack_lvl+0xc1/0xf0 [ 2038.708499] should_fail_ex+0x4b4/0x5b0 [ 2038.708846] _copy_to_user+0x2e/0x150 [ 2038.709180] do_pages_stat+0x588/0x700 [ 2038.709535] ? __pfx_lock_release+0x10/0x10 [ 2038.709935] ? __pfx_do_pages_stat+0x10/0x10 [ 2038.710300] ? lock_release+0x1e3/0x680 [ 2038.710650] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2038.711087] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2038.711535] kernel_move_pages+0x1117/0x1ad0 [ 2038.711899] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2038.712323] ? __pfx_kernel_move_pages+0x10/0x10 [ 2038.712706] ? fput+0x2f/0x1a0 [ 2038.712989] ? ksys_write+0x1a7/0x260 [ 2038.713343] ? __pfx_ksys_write+0x10/0x10 [ 2038.713712] __x64_sys_move_pages+0xe1/0x1c0 [ 2038.714092] ? syscall_enter_from_user_mode+0x21/0x50 [ 2038.714507] do_syscall_64+0x3f/0x90 [ 2038.714826] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2038.715267] RIP: 0033:0x7f0f10577b19 [ 2038.715562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.716956] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2038.717586] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2038.718182] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2038.718721] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2038.719261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2038.719783] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2038.720353] 09:03:04 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0}, 0x58) 09:03:04 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}, {@any, 0x1f, 0x85, 0x7d, "902c8f", 0x42f1, 0x4}]}}}, 0x40) 09:03:04 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:03:04 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:03:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xf6ffffff00000000) 09:03:04 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:03:04 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 44) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:03:04 executing program 5: sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000000) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000280)={0x3, 0x80080000, 0x7fffffff, 0x1, 0xfff, 0xfffe}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000000c0)=0x20) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) 09:03:04 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/rcutree', 0x0, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={r2, 0x1, r3, 0x9, 0x80000}) move_pages(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) 09:03:04 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 45) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:03:04 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}, {@any, 0xfc, 0x8, 0x6, "ebbffe", 0x7ff}]}}}, 0x31) 09:03:04 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x3, 0x0, 0x0}, 0x58) 09:03:04 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2a8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:03:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xffffffff00000000) [ 2038.881966] FAULT_INJECTION: forcing a failure. [ 2038.881966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2038.883142] CPU: 0 PID: 10185 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2038.883778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.884453] Call Trace: [ 2038.884692] [ 2038.884884] dump_stack_lvl+0xc1/0xf0 [ 2038.885218] should_fail_ex+0x4b4/0x5b0 [ 2038.885557] _copy_from_user+0x2e/0x180 [ 2038.885959] do_pages_stat+0x231/0x700 [ 2038.886322] ? __pfx_lock_release+0x10/0x10 [ 2038.886745] ? __pfx_do_pages_stat+0x10/0x10 [ 2038.887174] ? lock_release+0x1e3/0x680 [ 2038.887530] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2038.887955] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2038.888385] kernel_move_pages+0x1117/0x1ad0 [ 2038.888770] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2038.889196] ? __pfx_kernel_move_pages+0x10/0x10 [ 2038.889575] ? fput+0x2f/0x1a0 [ 2038.889863] ? ksys_write+0x1a7/0x260 [ 2038.890177] ? __pfx_ksys_write+0x10/0x10 [ 2038.890516] __x64_sys_move_pages+0xe1/0x1c0 [ 2038.890890] ? syscall_enter_from_user_mode+0x21/0x50 [ 2038.891297] do_syscall_64+0x3f/0x90 [ 2038.891610] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2038.892023] RIP: 0033:0x7f0f10577b19 [ 2038.892318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.893697] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2038.894275] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2038.894833] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2038.895363] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2038.895911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2038.896453] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2038.897004] 09:03:04 executing program 5: move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x2) 09:03:04 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}, {@none, 0x2, 0x6, 0x6, "34cb2f", 0x6, 0x40}]}}}, 0x22) 09:03:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0xfffffffffffff000) 09:03:20 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2e8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:03:20 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x0, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:03:20 executing program 5: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x401, &(0x7f0000ffc000/0x2000)=nil, 0x3) 09:03:20 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 46) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:03:20 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:03:20 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:03:20 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x6, 0x0, 0x0}, 0x58) [ 2054.982397] FAULT_INJECTION: forcing a failure. [ 2054.982397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2054.983889] CPU: 0 PID: 10203 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2054.984535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2054.985174] Call Trace: [ 2054.985399] [ 2054.985609] dump_stack_lvl+0xc1/0xf0 [ 2054.985994] should_fail_ex+0x4b4/0x5b0 [ 2054.986349] _copy_to_user+0x2e/0x150 [ 2054.986684] do_pages_stat+0x588/0x700 [ 2054.987044] ? __pfx_lock_release+0x10/0x10 [ 2054.987444] ? __pfx_do_pages_stat+0x10/0x10 [ 2054.987853] ? lock_release+0x1e3/0x680 [ 2054.988221] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2054.988704] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2054.989167] kernel_move_pages+0x1117/0x1ad0 [ 2054.989569] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2054.990065] ? __pfx_kernel_move_pages+0x10/0x10 [ 2054.990486] ? fput+0x2f/0x1a0 [ 2054.990778] ? ksys_write+0x1a7/0x260 [ 2054.991140] ? __pfx_ksys_write+0x10/0x10 [ 2054.991536] __x64_sys_move_pages+0xe1/0x1c0 [ 2054.991963] ? syscall_enter_from_user_mode+0x21/0x50 [ 2054.992414] do_syscall_64+0x3f/0x90 [ 2054.992759] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2054.993237] RIP: 0033:0x7f0f10577b19 [ 2054.993570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2054.995204] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2054.995883] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2054.996536] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2054.997155] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2054.997794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2054.998470] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2054.999086] 09:03:20 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, r0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, r1) 09:03:20 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1}}}, 0x4) 09:03:20 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='fd\x00') openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 09:03:20 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8, 0x0, 0x0}, 0x58) 09:03:20 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:03:20 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 47) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 2055.220345] FAULT_INJECTION: forcing a failure. [ 2055.220345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2055.221689] CPU: 0 PID: 10235 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2055.222423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2055.223136] Call Trace: [ 2055.223372] [ 2055.223598] dump_stack_lvl+0xc1/0xf0 [ 2055.223952] should_fail_ex+0x4b4/0x5b0 [ 2055.224328] _copy_from_user+0x2e/0x180 [ 2055.224694] do_pages_stat+0x231/0x700 [ 2055.225050] ? __pfx_lock_release+0x10/0x10 [ 2055.225450] ? __pfx_do_pages_stat+0x10/0x10 [ 2055.225907] ? lock_release+0x1e3/0x680 [ 2055.226287] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2055.226745] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2055.227225] kernel_move_pages+0x1117/0x1ad0 [ 2055.227660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2055.228140] ? __pfx_kernel_move_pages+0x10/0x10 [ 2055.228557] ? fput+0x2f/0x1a0 [ 2055.228856] ? ksys_write+0x1a7/0x260 [ 2055.229220] ? __pfx_ksys_write+0x10/0x10 [ 2055.229594] __x64_sys_move_pages+0xe1/0x1c0 [ 2055.230006] ? syscall_enter_from_user_mode+0x21/0x50 [ 2055.230473] do_syscall_64+0x3f/0x90 [ 2055.230812] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2055.231278] RIP: 0033:0x7f0f10577b19 [ 2055.231613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2055.233161] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2055.233801] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2055.234459] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2055.235084] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2055.235697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2055.236312] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2055.236935] 09:03:36 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x9, 0x0, 0x0}, 0x58) 09:03:36 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x0, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:03:36 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 48) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:03:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, [0x10001, 0xfffffffffffffffe, 0xfffffffffffff5bb, 0x9, 0x7, 0x8]}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000002d) pread64(r1, &(0x7f0000000080)=""/84, 0x54, 0x76) r2 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) fdatasync(r2) 09:03:36 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1}}}, 0x4) 09:03:36 executing program 5: move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil], 0x0, 0x0, 0x0) 09:03:36 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa802) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) [ 2071.067096] FAULT_INJECTION: forcing a failure. [ 2071.067096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2071.068487] CPU: 0 PID: 10244 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2071.069157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2071.069813] Call Trace: [ 2071.070037] [ 2071.070253] dump_stack_lvl+0xc1/0xf0 [ 2071.070564] should_fail_ex+0x4b4/0x5b0 09:03:36 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 2071.070883] _copy_to_user+0x2e/0x150 [ 2071.071422] do_pages_stat+0x588/0x700 [ 2071.071733] ? __pfx_lock_release+0x10/0x10 [ 2071.072074] ? __pfx_do_pages_stat+0x10/0x10 [ 2071.072430] ? lock_release+0x1e3/0x680 [ 2071.072753] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2071.073168] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2071.073583] kernel_move_pages+0x1117/0x1ad0 [ 2071.073935] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2071.074374] ? __pfx_kernel_move_pages+0x10/0x10 [ 2071.074748] ? fput+0x2f/0x1a0 [ 2071.075015] ? ksys_write+0x1a7/0x260 [ 2071.075392] ? __pfx_ksys_write+0x10/0x10 [ 2071.075833] __x64_sys_move_pages+0xe1/0x1c0 [ 2071.076281] ? syscall_enter_from_user_mode+0x21/0x50 [ 2071.076838] do_syscall_64+0x3f/0x90 [ 2071.077250] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2071.077776] RIP: 0033:0x7f0f10577b19 [ 2071.078125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2071.079477] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2071.080054] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2071.080632] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2071.081208] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2071.081751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2071.082332] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2071.082900] 09:03:36 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0xffffffffffffffff) 09:03:36 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xe, 0x0, 0x0}, 0x58) 09:03:36 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1}}}, 0x4) 09:03:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x200000, 0x0) 09:03:36 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xe802) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:03:37 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 49) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:03:37 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:03:37 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)={{0x108, 0xa7, 0x20, 0x263, 0x282, 0x4, 0x326}, "447acfc8a6845606f27eee1a3c9d9faadd8c9b734d98ff1afa6bd9acdd074b41df0e896945f9047a399fa8796b3589e78d09d2b5e3f3892c89e835ccbff1e3dd76fb81fff8cc6aa355a5c1bf38ca1f8ec741b9090dfe47d37ebd450e84fff86fe9a83a0687c54445194c4d54856aa307693f5f46196c854c905750b442db149fc3477aab98363a3a05a62fda51957bd7a532d33a8e7d102c0996c07962faed2dacb8875860f01aea478786d8aa796ad4735302ec97dfb37a10d390684190798f012c81ce62982986a3c4464655ee34f30d9726eab0c6ee72bb65ae64cb5bd39057fc02c3ce269d90e74d08", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0b) 09:03:37 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x11, 0x0, 0x0}, 0x58) [ 2071.309361] FAULT_INJECTION: forcing a failure. [ 2071.309361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2071.310863] CPU: 1 PID: 10275 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2071.311571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2071.312255] Call Trace: [ 2071.312482] [ 2071.312683] dump_stack_lvl+0xc1/0xf0 [ 2071.313026] should_fail_ex+0x4b4/0x5b0 [ 2071.313378] _copy_from_user+0x2e/0x180 [ 2071.313726] do_pages_stat+0x231/0x700 [ 2071.314066] ? __pfx_lock_release+0x10/0x10 [ 2071.314501] ? __pfx_do_pages_stat+0x10/0x10 [ 2071.314882] ? lock_release+0x1e3/0x680 [ 2071.315238] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2071.315672] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2071.316115] kernel_move_pages+0x1117/0x1ad0 [ 2071.316494] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2071.316942] ? __pfx_kernel_move_pages+0x10/0x10 [ 2071.317350] ? fput+0x2f/0x1a0 [ 2071.317638] ? ksys_write+0x1a7/0x260 [ 2071.317980] ? __pfx_ksys_write+0x10/0x10 [ 2071.318388] __x64_sys_move_pages+0xe1/0x1c0 [ 2071.318771] ? syscall_enter_from_user_mode+0x21/0x50 [ 2071.319207] do_syscall_64+0x3f/0x90 [ 2071.319540] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2071.319983] RIP: 0033:0x7f0f10577b19 [ 2071.320307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2071.321794] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2071.322468] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2071.323057] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2071.323647] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2071.324237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2071.324817] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2071.325390] 09:03:52 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 50) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:03:52 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/1011], 0x3f4) 09:03:52 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) openat$incfs(r0, &(0x7f00000000c0)='.pending_reads\x00', 0x204000, 0xe4) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x400, 0x103) 09:03:52 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:03:52 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x71, 0x0, 0x0}, 0x58) 09:03:52 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x0, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:03:52 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x0, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:03:52 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x200000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) [ 2086.858138] FAULT_INJECTION: forcing a failure. [ 2086.858138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2086.859396] CPU: 0 PID: 10300 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2086.860089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2086.860784] Call Trace: [ 2086.861020] [ 2086.861229] dump_stack_lvl+0xc1/0xf0 [ 2086.861580] should_fail_ex+0x4b4/0x5b0 [ 2086.861942] _copy_to_user+0x2e/0x150 [ 2086.862286] do_pages_stat+0x588/0x700 [ 2086.862670] ? __pfx_lock_release+0x10/0x10 [ 2086.863067] ? __pfx_do_pages_stat+0x10/0x10 [ 2086.863466] ? lock_release+0x1e3/0x680 [ 2086.863823] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2086.864283] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2086.864753] kernel_move_pages+0x1117/0x1ad0 [ 2086.865154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2086.865639] ? __pfx_kernel_move_pages+0x10/0x10 [ 2086.866064] ? fput+0x2f/0x1a0 [ 2086.866407] ? ksys_write+0x1a7/0x260 [ 2086.866753] ? __pfx_ksys_write+0x10/0x10 [ 2086.867156] __x64_sys_move_pages+0xe1/0x1c0 [ 2086.867563] ? syscall_enter_from_user_mode+0x21/0x50 [ 2086.868024] do_syscall_64+0x3f/0x90 [ 2086.868365] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2086.868837] RIP: 0033:0x7f0f10577b19 [ 2086.869205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2086.870854] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2086.871550] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2086.872173] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2086.872840] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2086.873457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2086.874121] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2086.874824] 09:03:52 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ff2000/0xe000)=nil], 0x0, 0x0, 0x0) 09:03:52 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x0, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:03:52 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x10000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:03:52 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x121, 0x0, 0x0}, 0x58) 09:03:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080)) 09:03:52 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 51) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:03:52 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x122, 0x0, 0x0}, 0x58) 09:03:52 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x0, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:03:52 executing program 5: r0 = fork() move_pages(r0, 0x1fffffffffffff9c, &(0x7f0000000000), 0x0, 0x0, 0x0) [ 2087.079378] FAULT_INJECTION: forcing a failure. [ 2087.079378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2087.080971] CPU: 0 PID: 10324 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2087.081667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2087.082430] Call Trace: [ 2087.082649] [ 2087.082848] dump_stack_lvl+0xc1/0xf0 [ 2087.083201] should_fail_ex+0x4b4/0x5b0 [ 2087.083573] _copy_from_user+0x2e/0x180 [ 2087.083918] do_pages_stat+0x231/0x700 [ 2087.084301] ? __pfx_lock_release+0x10/0x10 [ 2087.084690] ? __pfx_do_pages_stat+0x10/0x10 [ 2087.085076] ? lock_release+0x1e3/0x680 [ 2087.085473] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2087.085945] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2087.086401] kernel_move_pages+0x1117/0x1ad0 [ 2087.086819] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2087.087287] ? __pfx_kernel_move_pages+0x10/0x10 [ 2087.087712] ? fput+0x2f/0x1a0 [ 2087.088036] ? ksys_write+0x1a7/0x260 [ 2087.088389] ? __pfx_ksys_write+0x10/0x10 [ 2087.088759] __x64_sys_move_pages+0xe1/0x1c0 [ 2087.089150] ? syscall_enter_from_user_mode+0x21/0x50 [ 2087.089632] do_syscall_64+0x3f/0x90 [ 2087.089995] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2087.090474] RIP: 0033:0x7f0f10577b19 [ 2087.090799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2087.092321] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2087.092949] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2087.093510] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2087.094089] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2087.094747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2087.095371] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2087.095958] 09:04:08 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x126, 0x0, 0x0}, 0x58) 09:04:08 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0x0, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:04:08 executing program 0: sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x4004800) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x25) 09:04:08 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0xb403, &(0x7f0000ffc000/0x2000)=nil, 0x6) 09:04:08 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x0, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:04:08 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:04:08 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 52) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:04:08 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1fffefff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) [ 2103.128265] FAULT_INJECTION: forcing a failure. [ 2103.128265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2103.129867] CPU: 0 PID: 10350 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2103.130634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2103.131329] Call Trace: [ 2103.131558] [ 2103.131790] dump_stack_lvl+0xc1/0xf0 [ 2103.132142] should_fail_ex+0x4b4/0x5b0 [ 2103.132513] _copy_to_user+0x2e/0x150 [ 2103.132883] do_pages_stat+0x588/0x700 [ 2103.133232] ? __pfx_lock_release+0x10/0x10 [ 2103.133618] ? __pfx_do_pages_stat+0x10/0x10 [ 2103.134017] ? lock_release+0x1e3/0x680 [ 2103.134388] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2103.134892] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2103.135351] kernel_move_pages+0x1117/0x1ad0 [ 2103.135744] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2103.136231] ? __pfx_kernel_move_pages+0x10/0x10 [ 2103.136657] ? fput+0x2f/0x1a0 [ 2103.136955] ? ksys_write+0x1a7/0x260 [ 2103.137305] ? __pfx_ksys_write+0x10/0x10 [ 2103.137680] __x64_sys_move_pages+0xe1/0x1c0 [ 2103.138079] ? syscall_enter_from_user_mode+0x21/0x50 [ 2103.138558] do_syscall_64+0x3f/0x90 [ 2103.138904] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2103.139367] RIP: 0033:0x7f0f10577b19 [ 2103.139696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2103.141230] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2103.141891] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2103.142529] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2103.143151] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2103.143756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2103.144389] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2103.145014] 09:04:08 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x0, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:04:08 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x6d0, &(0x7f0000ffb000/0x1000)=nil, 0x7) 09:04:09 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa8020000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:04:09 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1c3, 0x0, 0x0}, 0x58) 09:04:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x4) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 09:04:09 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 53) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:04:09 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x0, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) [ 2103.360358] FAULT_INJECTION: forcing a failure. [ 2103.360358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2103.361932] CPU: 0 PID: 10374 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2103.362677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2103.363377] Call Trace: [ 2103.363613] [ 2103.363825] dump_stack_lvl+0xc1/0xf0 [ 2103.364184] should_fail_ex+0x4b4/0x5b0 [ 2103.364540] _copy_from_user+0x2e/0x180 [ 2103.364935] do_pages_stat+0x231/0x700 [ 2103.365289] ? __pfx_lock_release+0x10/0x10 [ 2103.365686] ? __pfx_do_pages_stat+0x10/0x10 [ 2103.366084] ? lock_release+0x1e3/0x680 [ 2103.366433] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2103.366927] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2103.367393] kernel_move_pages+0x1117/0x1ad0 [ 2103.367774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2103.368209] ? __pfx_kernel_move_pages+0x10/0x10 [ 2103.368603] ? fput+0x2f/0x1a0 [ 2103.368883] ? ksys_write+0x1a7/0x260 [ 2103.369236] ? __pfx_ksys_write+0x10/0x10 [ 2103.369598] __x64_sys_move_pages+0xe1/0x1c0 [ 2103.369982] ? syscall_enter_from_user_mode+0x21/0x50 [ 2103.370435] do_syscall_64+0x3f/0x90 [ 2103.370801] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2103.371260] RIP: 0033:0x7f0f10577b19 [ 2103.371594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2103.373171] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2103.373857] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2103.374475] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2103.375189] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2103.375802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2103.376414] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2103.377088] 09:04:25 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1c4, 0x0, 0x0}, 0x58) 09:04:25 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0x0, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:04:25 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 54) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:04:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x8, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e21, @loopback}}}, 0x108) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 09:04:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) write$P9_RWALK(r1, &(0x7f0000000080)={0x30, 0x6f, 0x1, {0x3, [{0x80, 0x3, 0x8}, {0x40, 0x4, 0x3}, {0x10, 0x1, 0x3}]}}, 0x30) 09:04:25 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xe8020000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:04:25 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:04:25 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x0, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:04:25 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x0, "1f0428", 0x8, 0x16}]}}}, 0x13) [ 2119.351250] FAULT_INJECTION: forcing a failure. [ 2119.351250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2119.352861] CPU: 0 PID: 10391 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2119.353556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2119.354240] Call Trace: [ 2119.354487] [ 2119.354704] dump_stack_lvl+0xc1/0xf0 [ 2119.355114] should_fail_ex+0x4b4/0x5b0 [ 2119.355493] _copy_to_user+0x2e/0x150 [ 2119.355830] do_pages_stat+0x588/0x700 [ 2119.356169] ? __pfx_do_pages_stat+0x10/0x10 [ 2119.356545] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2119.357071] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 2119.357535] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2119.358000] kernel_move_pages+0x1117/0x1ad0 [ 2119.358402] ? ktime_get+0x157/0x1f0 [ 2119.358782] ? __pfx_lapic_next_deadline+0x10/0x10 [ 2119.359222] ? __pfx_kernel_move_pages+0x10/0x10 [ 2119.359639] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2119.360118] __x64_sys_move_pages+0xe1/0x1c0 [ 2119.360520] ? __x64_sys_move_pages+0x4/0x1c0 [ 2119.360920] do_syscall_64+0x3f/0x90 [ 2119.361262] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2119.361718] RIP: 0033:0x7f0f10577b19 [ 2119.362054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2119.363609] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2119.364251] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2119.364869] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2119.365473] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2119.366092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2119.366699] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2119.367382] 09:04:25 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000003, 0xffffffffffffffff) 09:04:25 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1c5, 0x0, 0x0}, 0x58) 09:04:25 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xffefff1f) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:04:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') dup3(0xffffffffffffffff, r0, 0x0) 09:04:25 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x0, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:04:25 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 55) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:04:25 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) recvmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000080)=""/197, 0xc5}, {&(0x7f00000002c0)=""/70, 0x46}], 0x2, &(0x7f00000001c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x400122c0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0x2010, r1, 0x10000000) 09:04:25 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1c6, 0x0, 0x0}, 0x58) [ 2119.588365] FAULT_INJECTION: forcing a failure. [ 2119.588365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2119.589786] CPU: 0 PID: 10418 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2119.590508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2119.591309] Call Trace: [ 2119.591561] [ 2119.591834] dump_stack_lvl+0xc1/0xf0 [ 2119.592166] should_fail_ex+0x4b4/0x5b0 [ 2119.592497] _copy_from_user+0x2e/0x180 [ 2119.592866] do_pages_stat+0x231/0x700 [ 2119.593227] ? __pfx_lock_release+0x10/0x10 [ 2119.593635] ? __pfx_do_pages_stat+0x10/0x10 [ 2119.594029] ? lock_release+0x1e3/0x680 [ 2119.594362] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2119.594856] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2119.595319] kernel_move_pages+0x1117/0x1ad0 [ 2119.595688] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2119.596160] ? __pfx_kernel_move_pages+0x10/0x10 [ 2119.596592] ? fput+0x2f/0x1a0 [ 2119.596872] ? ksys_write+0x1a7/0x260 [ 2119.597192] ? __pfx_ksys_write+0x10/0x10 [ 2119.597596] __x64_sys_move_pages+0xe1/0x1c0 [ 2119.597967] ? syscall_enter_from_user_mode+0x21/0x50 [ 2119.598407] do_syscall_64+0x3f/0x90 [ 2119.598796] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2119.599280] RIP: 0033:0x7f0f10577b19 [ 2119.599607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2119.601142] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2119.601771] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2119.602344] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2119.603016] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2119.603604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2119.604222] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2119.604867] 09:04:41 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7f3ffafc9fff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:04:41 executing program 0: ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/242) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') r1 = getpgid(0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) rt_tgsigqueueinfo(r2, r1, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x2, 0x0, 0x3, 0x100, r1}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r3, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 09:04:41 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0x0, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:04:41 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 56) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:04:41 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:04:41 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1c9, 0x0, 0x0}, 0x58) 09:04:41 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1f, 0x65, 0x1, 0xe4, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xdf58, 0x2}, 0x120, 0xfff, 0x4, 0x0, 0x3, 0x80000000, 0x8001, 0x0, 0x4, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 09:04:41 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x0, 0x16}]}}}, 0x13) [ 2135.580008] FAULT_INJECTION: forcing a failure. [ 2135.580008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2135.581457] CPU: 0 PID: 10437 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2135.582211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2135.582911] Call Trace: [ 2135.583157] [ 2135.583355] dump_stack_lvl+0xc1/0xf0 [ 2135.583692] should_fail_ex+0x4b4/0x5b0 [ 2135.584035] _copy_to_user+0x2e/0x150 [ 2135.584385] do_pages_stat+0x588/0x700 [ 2135.584750] ? __pfx_lock_release+0x10/0x10 [ 2135.585121] ? __pfx_do_pages_stat+0x10/0x10 [ 2135.585494] ? lock_release+0x1e3/0x680 09:04:41 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x0, 0x16}]}}}, 0x13) [ 2135.585849] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2135.586460] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2135.587010] kernel_move_pages+0x1117/0x1ad0 [ 2135.587402] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2135.587849] ? __pfx_kernel_move_pages+0x10/0x10 [ 2135.588267] ? fput+0x2f/0x1a0 [ 2135.588563] ? ksys_write+0x1a7/0x260 [ 2135.588904] ? __pfx_ksys_write+0x10/0x10 [ 2135.589262] __x64_sys_move_pages+0xe1/0x1c0 [ 2135.589654] ? syscall_enter_from_user_mode+0x21/0x50 [ 2135.590130] do_syscall_64+0x3f/0x90 [ 2135.590462] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2135.590915] RIP: 0033:0x7f0f10577b19 [ 2135.591268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2135.592712] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2135.593362] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2135.593941] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2135.594490] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2135.595129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2135.595724] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2135.596325] 09:04:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x202800, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x202800, 0x0) fsmount(r1, 0x0, 0x70) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 09:04:41 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1d1, 0x0, 0x0}, 0x58) 09:04:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) getsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x58e8}) 09:04:41 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x20000000000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:04:41 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x0, 0x16}]}}}, 0x13) 09:04:41 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 57) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 2135.827314] FAULT_INJECTION: forcing a failure. [ 2135.827314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2135.828565] CPU: 0 PID: 10466 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2135.829260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2135.829966] Call Trace: [ 2135.830204] [ 2135.830428] dump_stack_lvl+0xc1/0xf0 [ 2135.830765] should_fail_ex+0x4b4/0x5b0 [ 2135.831133] _copy_from_user+0x2e/0x180 [ 2135.831474] do_pages_stat+0x231/0x700 [ 2135.831826] ? __pfx_lock_release+0x10/0x10 [ 2135.832264] ? __pfx_do_pages_stat+0x10/0x10 [ 2135.832682] ? lock_release+0x1e3/0x680 [ 2135.833052] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2135.833563] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2135.834032] kernel_move_pages+0x1117/0x1ad0 [ 2135.834418] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2135.834877] ? __pfx_kernel_move_pages+0x10/0x10 [ 2135.835355] ? fput+0x2f/0x1a0 [ 2135.835652] ? ksys_write+0x1a7/0x260 [ 2135.835977] ? __pfx_ksys_write+0x10/0x10 [ 2135.836353] __x64_sys_move_pages+0xe1/0x1c0 [ 2135.836744] ? syscall_enter_from_user_mode+0x21/0x50 [ 2135.837205] do_syscall_64+0x3f/0x90 [ 2135.837529] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2135.837980] RIP: 0033:0x7f0f10577b19 [ 2135.838376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2135.839945] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2135.840657] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2135.841304] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2135.841960] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2135.842670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2135.843352] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2135.843966] 09:04:59 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1000000000000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:04:59 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:04:59 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x300, 0x0, 0x0}, 0x58) 09:04:59 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:04:59 executing program 0: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) syz_open_dev$vcsu(&(0x7f00000001c0), 0x3, 0x800) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000200)={0x2c0202900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) r4 = openat$incfs(r3, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x3, 0xc0, 0x9, 0x0, 0x1ff, 0x20011, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x8800, 0x8, 0x7fff, 0x8, 0x100000000, 0x200, 0x3, 0x0, 0x2, 0x0, 0x80000001}, 0xffffffffffffffff, 0x1, r4, 0x3) 09:04:59 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8}]}}}, 0x13) 09:04:59 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 58) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 2153.546391] FAULT_INJECTION: forcing a failure. [ 2153.546391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2153.547646] CPU: 0 PID: 10488 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2153.548312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2153.548973] Call Trace: [ 2153.549196] [ 2153.549384] dump_stack_lvl+0xc1/0xf0 [ 2153.549742] should_fail_ex+0x4b4/0x5b0 [ 2153.550130] _copy_to_user+0x2e/0x150 [ 2153.550466] do_pages_stat+0x588/0x700 [ 2153.550854] ? __pfx_lock_release+0x10/0x10 [ 2153.551277] ? __pfx_do_pages_stat+0x10/0x10 [ 2153.551647] ? lock_release+0x1e3/0x680 [ 2153.551975] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2153.552381] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2153.552798] kernel_move_pages+0x1117/0x1ad0 [ 2153.553165] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2153.553604] ? __pfx_kernel_move_pages+0x10/0x10 [ 2153.553979] ? fput+0x2f/0x1a0 [ 2153.554257] ? ksys_write+0x1a7/0x260 [ 2153.554617] ? __pfx_ksys_write+0x10/0x10 [ 2153.555026] __x64_sys_move_pages+0xe1/0x1c0 [ 2153.555455] ? syscall_enter_from_user_mode+0x21/0x50 [ 2153.555855] do_syscall_64+0x3f/0x90 [ 2153.556154] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2153.556574] RIP: 0033:0x7f0f10577b19 [ 2153.556895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2153.558254] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2153.558851] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2153.559436] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2153.559975] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2153.560499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2153.561095] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2153.561687] 09:04:59 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x600, 0x0, 0x0}, 0x58) 09:04:59 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8}]}}}, 0x13) 09:04:59 executing program 5: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x998}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x14, 0x4, @mcast2}}}]}, @CTA_LABELS_MASK={0x28, 0x17, [0x7, 0x6, 0x400, 0xffffff81, 0xffffffff, 0x1, 0x4, 0x1, 0x2]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4090}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x8010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000c8fa936f53", @ANYRES32=r8, @ANYBLOB="05002b0002000000"], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r7, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "d57c354a3a2b9dcd1c332fca8e78f61df9b306a0a07b81e955cc5f3fd06a5695"}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2aca184960914231}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 09:04:59 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 59) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:04:59 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8}]}}}, 0x13) 09:04:59 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x900, 0x0, 0x0}, 0x58) 09:04:59 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 2153.766937] FAULT_INJECTION: forcing a failure. [ 2153.766937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2153.768153] CPU: 0 PID: 10504 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2153.768785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2153.769408] Call Trace: [ 2153.769415] [ 2153.769423] dump_stack_lvl+0xc1/0xf0 [ 2153.770138] should_fail_ex+0x4b4/0x5b0 [ 2153.770458] _copy_from_user+0x2e/0x180 [ 2153.770791] do_pages_stat+0x231/0x700 [ 2153.771107] ? __pfx_lock_release+0x10/0x10 [ 2153.771483] ? __pfx_do_pages_stat+0x10/0x10 [ 2153.771842] ? lock_release+0x1e3/0x680 [ 2153.772217] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2153.772669] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2153.773158] kernel_move_pages+0x1117/0x1ad0 [ 2153.773546] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2153.774018] ? __pfx_kernel_move_pages+0x10/0x10 [ 2153.774451] ? fput+0x2f/0x1a0 [ 2153.774729] ? ksys_write+0x1a7/0x260 [ 2153.775042] ? __pfx_ksys_write+0x10/0x10 [ 2153.775410] __x64_sys_move_pages+0xe1/0x1c0 [ 2153.775758] ? syscall_enter_from_user_mode+0x21/0x50 [ 2153.776160] do_syscall_64+0x3f/0x90 [ 2153.776488] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2153.776927] RIP: 0033:0x7f0f10577b19 [ 2153.777248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2153.778659] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2153.779263] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2153.779805] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2153.780430] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2153.780989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2153.781574] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2153.782128] 09:04:59 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) rt_tgsigqueueinfo(r1, r0, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) move_pages(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x1) 09:05:17 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xe00, 0x0, 0x0}, 0x58) 09:05:17 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa802000000000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:05:17 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:05:17 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) rt_tgsigqueueinfo(r1, r0, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, 0x0, 0x0) 09:05:17 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x0, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:05:17 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 60) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:05:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x5a101, 0xb) 09:05:17 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 2171.255504] FAULT_INJECTION: forcing a failure. [ 2171.255504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2171.256844] CPU: 1 PID: 10541 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2171.257496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2171.258154] Call Trace: [ 2171.258372] [ 2171.258561] dump_stack_lvl+0xc1/0xf0 [ 2171.258899] should_fail_ex+0x4b4/0x5b0 [ 2171.259234] _copy_to_user+0x2e/0x150 [ 2171.259611] do_pages_stat+0x588/0x700 [ 2171.259956] ? __pfx_lock_release+0x10/0x10 [ 2171.260343] ? __pfx_do_pages_stat+0x10/0x10 [ 2171.260728] ? lock_release+0x1e3/0x680 [ 2171.261079] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2171.261526] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2171.261981] kernel_move_pages+0x1117/0x1ad0 [ 2171.262372] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2171.262845] ? __pfx_kernel_move_pages+0x10/0x10 [ 2171.263273] ? fput+0x2f/0x1a0 [ 2171.263598] ? ksys_write+0x1a7/0x260 [ 2171.263957] ? __pfx_ksys_write+0x10/0x10 [ 2171.264327] __x64_sys_move_pages+0xe1/0x1c0 [ 2171.264740] ? syscall_enter_from_user_mode+0x21/0x50 [ 2171.265197] do_syscall_64+0x3f/0x90 [ 2171.265528] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2171.265982] RIP: 0033:0x7f0f10577b19 [ 2171.266315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2171.267846] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2171.268506] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2171.269125] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2171.269671] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2171.270279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2171.270891] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2171.271589] 09:05:17 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1100, 0x0, 0x0}, 0x58) 09:05:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 09:05:17 executing program 5: move_pages(0x0, 0x8, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil], 0x0, 0x0, 0x0) 09:05:17 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2000, 0x0, 0x0}, 0x58) 09:05:17 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3091e0}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0xb02, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8, 0xa8, @random="506b0636"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x40010) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x10000011) 09:05:17 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:05:17 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 61) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:05:17 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 2171.605394] FAULT_INJECTION: forcing a failure. [ 2171.605394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2171.606900] CPU: 0 PID: 10566 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2171.607637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2171.608336] Call Trace: [ 2171.608565] [ 2171.608772] dump_stack_lvl+0xc1/0xf0 [ 2171.609124] should_fail_ex+0x4b4/0x5b0 [ 2171.609465] _copy_from_user+0x2e/0x180 [ 2171.609798] do_pages_stat+0x231/0x700 [ 2171.610137] ? __pfx_lock_release+0x10/0x10 [ 2171.610513] ? __pfx_do_pages_stat+0x10/0x10 [ 2171.610905] ? lock_release+0x1e3/0x680 [ 2171.611263] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2171.611732] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2171.612172] kernel_move_pages+0x1117/0x1ad0 [ 2171.612557] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2171.613018] ? __pfx_kernel_move_pages+0x10/0x10 [ 2171.613417] ? fput+0x2f/0x1a0 [ 2171.613697] ? ksys_write+0x1a7/0x260 [ 2171.614045] ? __pfx_ksys_write+0x10/0x10 [ 2171.614406] __x64_sys_move_pages+0xe1/0x1c0 [ 2171.614788] ? syscall_enter_from_user_mode+0x21/0x50 [ 2171.615230] do_syscall_64+0x3f/0x90 [ 2171.615602] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2171.616063] RIP: 0033:0x7f0f10577b19 [ 2171.616385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2171.617878] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2171.618502] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2171.619068] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2171.619659] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2171.620224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2171.620832] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2171.621439] 09:05:35 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 62) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:05:35 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2101, 0x0, 0x0}, 0x58) 09:05:35 executing program 5: syz_io_uring_setup(0x4342, &(0x7f0000000000)={0x0, 0x6ec9, 0x8, 0x2, 0x314}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:05:35 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xe802000000000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:05:35 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:05:35 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x1, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="140d140323824178ffffffc0ffffff0500800008000000"], 0x17) 09:05:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000200)={@id={0x2, 0x0, @d}}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000100)=""/165, 0xa5}], 0x2, 0x1, 0x3) 09:05:35 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 2189.438906] FAULT_INJECTION: forcing a failure. [ 2189.438906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2189.440129] CPU: 1 PID: 10578 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2189.440764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2189.441472] Call Trace: [ 2189.441710] [ 2189.441908] dump_stack_lvl+0xc1/0xf0 [ 2189.442245] should_fail_ex+0x4b4/0x5b0 [ 2189.442642] _copy_to_user+0x2e/0x150 [ 2189.442989] do_pages_stat+0x588/0x700 [ 2189.443368] ? __pfx_lock_release+0x10/0x10 [ 2189.443733] ? __pfx_do_pages_stat+0x10/0x10 [ 2189.444085] ? lock_release+0x1e3/0x680 [ 2189.444476] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2189.444890] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2189.445316] kernel_move_pages+0x1117/0x1ad0 [ 2189.445676] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2189.446096] ? __pfx_kernel_move_pages+0x10/0x10 [ 2189.446547] ? fput+0x2f/0x1a0 [ 2189.446826] ? ksys_write+0x1a7/0x260 [ 2189.447154] ? __pfx_ksys_write+0x10/0x10 [ 2189.447519] __x64_sys_move_pages+0xe1/0x1c0 [ 2189.447947] ? syscall_enter_from_user_mode+0x21/0x50 [ 2189.448387] do_syscall_64+0x3f/0x90 [ 2189.448716] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2189.449127] RIP: 0033:0x7f0f10577b19 [ 2189.449490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2189.450952] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2189.451560] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2189.452143] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2189.452749] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2189.453320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2189.453872] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2189.454460] 09:05:35 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2da, 0x460240) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0xf, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004041}, 0x40480c6) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="049e07fffffefdfffb07"], 0xa) 09:05:35 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2201, 0x0, 0x0}, 0x58) 09:05:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) dup(0xffffffffffffffff) fsmount(r1, 0x0, 0xf4) 09:05:35 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x2) 09:05:35 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 63) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:05:35 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2601, 0x0, 0x0}, 0x58) 09:05:35 executing program 6: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0422011fdec34f9f1600000600000000000000"], 0x13) 09:05:35 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="00eab4f239faccadc8ed1ff657031b98e743b1f9fa6669fcd0c93487d80647012c31959d6c0d3b2e394d362b828be6b68579d5e471e6591731edc01b3ea171f7fca58b715dbc93526882b5d80db572f85931b5000000008ba98c0051f8027d43c12900c7a42d7d0bf46f010000000000000064efebe63b19e1858856674b4eb0170298b61e1441"]) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x5c, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @calipso={0x7, 0x30, {0x3, 0xa, 0x80, 0x7ff, [0x6, 0x3ff, 0xa835, 0x40, 0x1f]}}]}, 0x40) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 09:05:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x100000, 0x9}}, './file0\x00'}) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) write$P9_RGETATTR(r2, &(0x7f0000000180)={0xa0, 0x19, 0x2, {0x0, {0x1, 0x2, 0x8}, 0x80, 0x0, r3, 0x80, 0xb1aa, 0xffff, 0x9, 0x0, 0xfffffffffffffffe, 0x80000001, 0x5, 0xff, 0x8, 0x3ff, 0x8, 0x802, 0x18d, 0x3f}}, 0xa0) [ 2189.732444] FAULT_INJECTION: forcing a failure. [ 2189.732444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2189.733759] CPU: 1 PID: 10611 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2189.734468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2189.735177] Call Trace: [ 2189.735407] [ 2189.735606] dump_stack_lvl+0xc1/0xf0 [ 2189.736007] should_fail_ex+0x4b4/0x5b0 [ 2189.736375] _copy_from_user+0x2e/0x180 [ 2189.736732] do_pages_stat+0x231/0x700 [ 2189.737088] ? __pfx_lock_release+0x10/0x10 [ 2189.737479] ? __pfx_do_pages_stat+0x10/0x10 [ 2189.737868] ? lock_release+0x1e3/0x680 [ 2189.738231] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2189.738700] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2189.739163] kernel_move_pages+0x1117/0x1ad0 [ 2189.739553] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2189.740080] ? __pfx_kernel_move_pages+0x10/0x10 [ 2189.740513] ? fput+0x2f/0x1a0 [ 2189.740806] ? ksys_write+0x1a7/0x260 [ 2189.741149] ? __pfx_ksys_write+0x10/0x10 [ 2189.741508] __x64_sys_move_pages+0xe1/0x1c0 [ 2189.741908] ? syscall_enter_from_user_mode+0x21/0x50 [ 2189.742359] do_syscall_64+0x3f/0x90 [ 2189.742691] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2189.743154] RIP: 0033:0x7f0f10577b19 [ 2189.743475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2189.745042] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2189.745700] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2189.746287] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2189.746887] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2189.747509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2189.748154] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2189.748753] [ 2189.781090] Bluetooth: hci6: Malformed HCI Event: 0x22 [ 2189.782068] Bluetooth: hci6: Malformed HCI Event: 0x22 09:05:35 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:05:54 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x3f00, 0x0, 0x0}, 0x58) 09:05:54 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x1ff, &(0x7f0000ffd000/0x1000)=nil, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/44, 0x2c, 0x0, &(0x7f0000000200)=""/237, 0xed}, &(0x7f0000000340)=0x40) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_setup(0x7844, &(0x7f00000000c0)={0x0, 0x2694, 0x4, 0x0, 0x238, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 09:05:54 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xff9ffcfa3f7f0000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:05:54 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:05:54 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 09:05:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 09:05:54 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:05:54 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 64) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 2209.279279] FAULT_INJECTION: forcing a failure. [ 2209.279279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2209.284107] CPU: 1 PID: 10652 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2209.285360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2209.286564] Call Trace: [ 2209.286971] [ 2209.287330] dump_stack_lvl+0xc1/0xf0 [ 2209.287955] should_fail_ex+0x4b4/0x5b0 [ 2209.288579] _copy_to_user+0x2e/0x150 [ 2209.289182] do_pages_stat+0x588/0x700 [ 2209.289793] ? __pfx_lock_release+0x10/0x10 [ 2209.290481] ? __pfx_do_pages_stat+0x10/0x10 [ 2209.291180] ? lock_release+0x1e3/0x680 [ 2209.291817] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2209.292653] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2209.293465] kernel_move_pages+0x1117/0x1ad0 [ 2209.294223] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2209.295097] ? __pfx_kernel_move_pages+0x10/0x10 [ 2209.295832] ? fput+0x2f/0x1a0 [ 2209.296362] ? ksys_write+0x1a7/0x260 [ 2209.296975] ? __pfx_ksys_write+0x10/0x10 [ 2209.297695] __x64_sys_move_pages+0xe1/0x1c0 [ 2209.298457] ? syscall_enter_from_user_mode+0x21/0x50 [ 2209.299301] do_syscall_64+0x3f/0x90 [ 2209.299891] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2209.300731] RIP: 0033:0x7f0f10577b19 [ 2209.301316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2209.303973] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2209.305116] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2209.306201] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2209.307334] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2209.308423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2209.309468] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2209.310547] 09:05:55 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0xfff7, 0x40, 0x0, 0x6, 0x9c}}}}, 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_info_req={{0xa, 0x8, 0x2}, {0xfff7}}, @l2cap_move_chan_rsp={{0xf, 0x4, 0x4}, {0x2, 0x1ff}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x81, 0x2}, {0x81}}]}}, 0x1d) 09:05:55 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xffefff1f00000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:05:55 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 09:05:55 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4000, 0x0, 0x0}, 0x58) 09:05:55 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x80801, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x290000, 0x4) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x100, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x6}, 0x1c) 09:05:55 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 65) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:05:55 executing program 6: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) rt_tgsigqueueinfo(r1, r0, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x0, 0x0, 0x7}, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}]) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) [ 2209.598490] FAULT_INJECTION: forcing a failure. [ 2209.598490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2209.600432] CPU: 1 PID: 10673 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2209.601549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2209.602687] Call Trace: [ 2209.603062] [ 2209.603392] dump_stack_lvl+0xc1/0xf0 [ 2209.603963] should_fail_ex+0x4b4/0x5b0 [ 2209.604523] _copy_from_user+0x2e/0x180 [ 2209.605088] do_pages_stat+0x231/0x700 [ 2209.605613] ? __pfx_lock_release+0x10/0x10 [ 2209.606241] ? __pfx_do_pages_stat+0x10/0x10 [ 2209.606850] ? lock_release+0x1e3/0x680 [ 2209.607437] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2209.608146] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2209.608882] kernel_move_pages+0x1117/0x1ad0 [ 2209.609489] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2209.610252] ? __pfx_kernel_move_pages+0x10/0x10 [ 2209.610909] ? fput+0x2f/0x1a0 [ 2209.611386] ? ksys_write+0x1a7/0x260 [ 2209.611939] ? __pfx_ksys_write+0x10/0x10 [ 2209.612556] __x64_sys_move_pages+0xe1/0x1c0 [ 2209.613165] ? syscall_enter_from_user_mode+0x21/0x50 [ 2209.613911] do_syscall_64+0x3f/0x90 [ 2209.614440] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2209.615198] RIP: 0033:0x7f0f10577b19 [ 2209.615706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2209.618255] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2209.619241] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2209.620300] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2209.621312] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2209.622312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2209.623327] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2209.624390] 09:06:14 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x7100, 0x0, 0x0}, 0x58) 09:06:14 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffff00000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:06:14 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:06:14 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x4481c0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000000c0)=0x5ce6) openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 09:06:14 executing program 5: getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @loopback, 0xd, 0x1, 0xf801, 0xd00, 0x8, 0x40070, r0}) 09:06:14 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x80, 0xc9, 0x9b}}}, 0xfdfa) 09:06:14 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 66) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:06:14 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:06:14 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/136, 0x88, 0x0, &(0x7f0000000680)=""/4096, 0x1000}, &(0x7f0000000100)=0x40) [ 2228.339946] FAULT_INJECTION: forcing a failure. [ 2228.339946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2228.341372] CPU: 0 PID: 10698 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2228.342136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2228.342897] Call Trace: [ 2228.343137] [ 2228.343353] dump_stack_lvl+0xc1/0xf0 [ 2228.343737] should_fail_ex+0x4b4/0x5b0 [ 2228.344123] _copy_to_user+0x2e/0x150 [ 2228.344511] do_pages_stat+0x588/0x700 [ 2228.344887] ? __pfx_lock_release+0x10/0x10 [ 2228.345295] ? __pfx_do_pages_stat+0x10/0x10 [ 2228.345710] ? lock_release+0x1e3/0x680 [ 2228.346099] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2228.346581] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2228.347062] kernel_move_pages+0x1117/0x1ad0 [ 2228.347487] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2228.347992] ? __pfx_kernel_move_pages+0x10/0x10 [ 2228.348460] ? fput+0x2f/0x1a0 [ 2228.348786] ? ksys_write+0x1a7/0x260 [ 2228.349162] ? __pfx_ksys_write+0x10/0x10 [ 2228.349564] __x64_sys_move_pages+0xe1/0x1c0 [ 2228.350053] ? syscall_enter_from_user_mode+0x21/0x50 [ 2228.350537] do_syscall_64+0x3f/0x90 [ 2228.350897] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2228.351403] RIP: 0033:0x7f0f10577b19 [ 2228.351761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2228.353455] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2228.354133] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2228.354770] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2228.355412] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2228.356050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2228.356724] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2228.357358] 09:06:14 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x8001, 0x0) 09:06:14 executing program 6: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="14221001aa0401000016"], 0x13) 09:06:14 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xc301, 0x0, 0x0}, 0x58) 09:06:14 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x1) syz_io_uring_setup(0x7e10, &(0x7f00000000c0)={0x0, 0xf634, 0x10, 0x2, 0x11c}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 09:06:14 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:06:14 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 67) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:06:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x3, @desc2}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="20f9ffffffa57ef1b8fddd013192ab00"]) openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x400080, 0x24) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) r4 = getpid() r5 = pidfd_open(r4, 0x0) process_madvise(r5, 0x0, 0x0, 0x3, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f00000006c0)=0x1c3, 0x4) r6 = io_uring_setup(0x515d, &(0x7f0000000100)={0x0, 0x480d, 0x0, 0x1, 0x3d7, 0x0, r1}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x17) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/181, 0xb5}, {&(0x7f00000003c0)=""/57, 0x39}, {&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000500)=""/163, 0xa3}, {&(0x7f0000000700)=""/95, 0x5f}], 0x5) fcntl$setlease(r0, 0x400, 0x0) 09:06:14 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04221001a4aaaaaaaa008005011f0428080016c505add3fb10a09e633784d3881fd381f07074fecf008f2c4a21e2f9814c656a6f7833d4f65eaddc3c63c9c679a96a888cdf53ab711de83887d09c9bc2bb17955c36bb181e3b1274ee01d63962b8"], 0x13) [ 2228.598120] FAULT_INJECTION: forcing a failure. [ 2228.598120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2228.599488] CPU: 0 PID: 10723 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2228.600253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2228.601029] Call Trace: [ 2228.601271] [ 2228.601488] dump_stack_lvl+0xc1/0xf0 [ 2228.601882] should_fail_ex+0x4b4/0x5b0 [ 2228.602271] _copy_from_user+0x2e/0x180 [ 2228.602659] do_pages_stat+0x231/0x700 [ 2228.603043] ? __pfx_lock_release+0x10/0x10 [ 2228.603474] ? __pfx_do_pages_stat+0x10/0x10 [ 2228.603879] ? lock_release+0x1e3/0x680 [ 2228.604300] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2228.604832] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2228.605342] kernel_move_pages+0x1117/0x1ad0 [ 2228.605765] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2228.606287] ? __pfx_kernel_move_pages+0x10/0x10 [ 2228.606752] ? fput+0x2f/0x1a0 [ 2228.607096] ? ksys_write+0x1a7/0x260 [ 2228.607484] ? __pfx_ksys_write+0x10/0x10 [ 2228.607882] __x64_sys_move_pages+0xe1/0x1c0 [ 2228.608337] ? syscall_enter_from_user_mode+0x21/0x50 [ 2228.608831] do_syscall_64+0x3f/0x90 [ 2228.609193] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2228.609707] RIP: 0033:0x7f0f10577b19 [ 2228.610065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2228.611703] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2228.612417] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2228.613073] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2228.613727] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2228.614398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2228.615062] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2228.615724] 09:06:32 executing program 5: move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0xf13cb1d416a40adb) 09:06:32 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:06:32 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) dup2(r0, r1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x200000c, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r2, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:06:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x280001, 0x0) 09:06:32 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:06:32 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 68) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:06:32 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xc401, 0x0, 0x0}, 0x58) 09:06:32 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xa) [ 2246.953850] FAULT_INJECTION: forcing a failure. [ 2246.953850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2246.955245] CPU: 0 PID: 10749 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2246.956015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.956768] Call Trace: [ 2246.957017] [ 2246.957239] dump_stack_lvl+0xc1/0xf0 [ 2246.957622] should_fail_ex+0x4b4/0x5b0 [ 2246.958042] _copy_to_user+0x2e/0x150 [ 2246.958408] do_pages_stat+0x588/0x700 [ 2246.958805] ? __pfx_do_pages_stat+0x10/0x10 [ 2246.959354] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2246.959851] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 2246.960323] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2246.960823] kernel_move_pages+0x1117/0x1ad0 [ 2246.961232] ? ktime_get+0x157/0x1f0 [ 2246.961588] ? __pfx_lapic_next_deadline+0x10/0x10 [ 2246.962056] ? __pfx_kernel_move_pages+0x10/0x10 [ 2246.962484] ? hrtimer_interrupt+0x586/0x750 [ 2246.962918] __x64_sys_move_pages+0xe1/0x1c0 [ 2246.963320] ? syscall_enter_from_user_mode+0x21/0x50 [ 2246.963787] do_syscall_64+0x3f/0x90 [ 2246.964134] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2246.964614] RIP: 0033:0x7f0f10577b19 [ 2246.964966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.966554] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2246.967211] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2246.967830] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2246.968473] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2246.969118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2246.969740] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2246.970395] 09:06:32 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xc501, 0x0, 0x0}, 0x58) 09:06:32 executing program 6: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0009e47f0a86b1c7ea008005011f24282418e0"], 0x13) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x3b61e45a6f870794}, 0x2) 09:06:32 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:06:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='children\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 09:06:32 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 69) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:06:32 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xc601, 0x0, 0x0}, 0x58) 09:06:32 executing program 6: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xfffffffeffffffff, 0x9, &(0x7f0000001680)=[{&(0x7f0000000180)="4b88908ed1dfede387ed87d369bbd5511f0a4fb2fded3d94f6ff8b17914fabe888a068cf986011d3aaa8624553c16f14997684e392", 0x35, 0xfffffffffffffff9}, {&(0x7f00000001c0)="5947891cdde49f152746047c83813544519ba1b120aa238b2e6259fa03c75885f085e790ec1a7a6b90e79722a5a8628d624e224c22f345dd81444cc1d23ca5e3834d411ec3d9e8407bb36754342d91a8b17d3e8baa6069f8643e21ea365b579ba7c9ba5e4fdaa85cbffab56539c140c2b766dccc90b571c51ce1f3a6558876007da69c7bf4b354c4726ec130a63a45b7dc17904002604a07f7b0bf8b2257e5c1a0e197c0e5d72d16be89a0e665227bde6ad5b19401b28311b3ee6bd0c1f0b1ab02c60f78bae66935b72f5737732f8be7ed3590de94f5bc9a775d", 0xda, 0x77db}, {&(0x7f00000002c0)="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", 0x1000, 0x7}, {&(0x7f00000012c0)="7a6e853e1db954945bae1be940136f71bf08b0e004ce3c7da7ffb221981afefb5cea3490b1996adcd4e1080c6457ee29b677c7df21e7b01197f308a60f00783f024f814e3f24a72372c8dca6f93a820973d63cff1f9cd9969b6b5fa83874a9c35c421620b4a7b2c7adfcd2a82349ba59235f81e0275dfd20b5f5c0d38fb274c9716162ece5ea64f346cb4565da971209f98f83763e502b4ca09e78c57b9b76d07ed09cb5d94370f71de0421ce0583572d3198b60b2c55dbe0c6fd8ad6cb1fe187cb9fbaa69414d", 0xc7, 0x7fffffff}, {&(0x7f00000013c0)="88cff9c53e2bf1f463a4ffc91d7b85575024c4aaf925dca94ba5450653d1467c8f4827a09084048fbc77eea35cb62a11033ac7896e653e2916e7197387c7b60067277e703e", 0x45, 0x7}, {&(0x7f0000001440)="73077875e1f7d35690e0e680b9d2224165cc94340dc628d5744d951215aeda3a95608e759159fa1356485f83503e697b5696184f03a105b5b0deaafd5c27e415bd5236ed5f8ef48080828a", 0x4b}, {&(0x7f00000014c0)="747386c4f3efd34313039b2790dd7555f5d4146b4b2347644a35621293de1afe8285d9837715095a599037d989537f48529dd571e261dd507934818bb631397f4d110e4b2932e3d82c", 0x49, 0x1}, {&(0x7f0000001540)="1b5ad8452459019783ecbe8986933e27645e76646bc876354dd0b9cdffd6dc3112544c000dd4ed20b97343a0872f9b8cc19ab58a2d7c7ac4c125d97123951d6034b3fe9fc035b8e851ae56a3f95bcc1dd919d78d9206416058bab86d27cbcedd8b42617b29df66eaeacf68a5c8cfe496509bc321a39dd08dfc789a0c80d27d0d28d0197de32714a6693899b622c506bac350019b58e9a66fb3e3d4c4e3e6153d5e93be89df226e057306ac781025282dc3f6f50f6ff94fbcff32d77d073a527f44d05ebb55a5893d20e8e5a433f535637fab4bdc4a6d0af876e2296bb8a3de933d84d45ad2b639b07dcb581380", 0xed, 0x6}, {&(0x7f0000001640)="7001fdb7e615a0e134efa5e342a953246b", 0x11, 0x2}], 0x1000, &(0x7f0000001780)={[{@map_normal}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@dmode={'dmode', 0x3d, 0x20}}, {@cruft}, {@cruft}, {@overriderock}, {@check_relaxed}], [{@dont_measure}, {@appraise}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@subj_type}]}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001840), 0x24600, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001880)={{r1}, {@void, @actul_num={@val=0x2d, 0x2, 0x50}}}) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0xbd}, @l2cap_cid_signaling={{0xb9}, [@l2cap_conf_rsp={{0x5, 0x6, 0x9}, {0xff4e, 0x2, 0xf7cc, [@l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_conn_rsp={{0x3, 0x1f, 0x8}, {0x1, 0x3, 0xe6, 0x80}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xbe, 0x4}}, @l2cap_info_rsp={{0xb, 0x2b, 0x61}, {0x8, 0x8, "37e87d79ac1b429e2731fb9310c146829b1285d6894192ac15f490934f24a2f9263ab4afb6f1dfb093ebb088bf290592b1868a66dbaf814b8934a2962a30f4827708bb0b62dc4b0ee9a0db8ac2437a0b8181894397d2fd37b3a8ee769a"}}, @l2cap_conf_req={{0x4, 0x1, 0x2f}, {0x9, 0xfffa, [@l2cap_conf_efs={0x6, 0x10, {0x0, 0x0, 0x7f, 0x0, 0x8, 0x205d4185}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x0, 0x3, 0x8, 0x0, 0x6}}]}}]}}, 0xc2) [ 2247.171323] loop6: detected capacity change from 0 to 264192 [ 2247.188226] loop6: detected capacity change from 0 to 264192 [ 2247.192391] FAULT_INJECTION: forcing a failure. [ 2247.192391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2247.193670] CPU: 1 PID: 10769 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2247.194380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2247.195098] Call Trace: [ 2247.195349] [ 2247.195584] dump_stack_lvl+0xc1/0xf0 [ 2247.195938] should_fail_ex+0x4b4/0x5b0 [ 2247.196334] _copy_from_user+0x2e/0x180 [ 2247.196710] do_pages_stat+0x231/0x700 [ 2247.197063] ? __pfx_lock_release+0x10/0x10 [ 2247.197447] ? __pfx_do_pages_stat+0x10/0x10 [ 2247.197846] ? lock_release+0x1e3/0x680 [ 2247.198210] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2247.198676] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2247.199150] kernel_move_pages+0x1117/0x1ad0 [ 2247.199577] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2247.200066] ? __pfx_kernel_move_pages+0x10/0x10 [ 2247.200562] ? fput+0x2f/0x1a0 [ 2247.200867] ? ksys_write+0x1a7/0x260 [ 2247.201227] ? __pfx_ksys_write+0x10/0x10 [ 2247.201626] __x64_sys_move_pages+0xe1/0x1c0 [ 2247.202041] ? syscall_enter_from_user_mode+0x21/0x50 [ 2247.202501] do_syscall_64+0x3f/0x90 [ 2247.202848] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2247.203316] RIP: 0033:0x7f0f10577b19 [ 2247.203658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.205291] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2247.205954] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2247.206581] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2247.207197] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2247.207821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2247.208472] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2247.209113] 09:06:51 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xc901, 0x0, 0x0}, 0x58) 09:06:51 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x200000, 0x0) 09:06:51 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:06:51 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x9, &(0x7f0000000340)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="00000000ff6c04000000000000d94fdb8b0e67f0140d00020000000000332c0e1bc4a49d8dcc639842f5dd550ae8037b8f2a252dede99b78cdea70cce8862a80036fecc6bdbe70ba20fa55f51eefee9180f96fb1a7cef1454c97680e749d071729ea9aef224ca4e9f23aaf3d15d1b16c1f595242ef671ac6186a64ba6e43bc7cee92b6c6a9d25108a2ad706df6a36d727fc440582f529ceb99"], &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='aio\x00', 0x2010050, &(0x7f00000001c0)='\x00') link(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='./file1\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f0000000200)='./file1\x00', 0x40040, 0x20) openat(r1, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:06:51 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x22080, 0x0) 09:06:51 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1, 0xa}, {0x8, 0x7, 0x7ff, 0x3, 0x2}}}}, 0x17) 09:06:51 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 70) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 2265.556459] FAULT_INJECTION: forcing a failure. [ 2265.556459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2265.557878] CPU: 0 PID: 10794 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2265.558610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.559337] Call Trace: [ 2265.559570] [ 2265.559781] dump_stack_lvl+0xc1/0xf0 [ 2265.560123] should_fail_ex+0x4b4/0x5b0 [ 2265.560475] _copy_to_user+0x2e/0x150 [ 2265.560848] do_pages_stat+0x588/0x700 [ 2265.561193] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2265.561675] ? __pfx_do_pages_stat+0x10/0x10 [ 2265.562078] ? lock_release+0x1e3/0x680 [ 2265.562439] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2265.562896] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2265.563360] kernel_move_pages+0x1117/0x1ad0 [ 2265.563755] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2265.564232] ? __pfx_kernel_move_pages+0x10/0x10 [ 2265.564670] ? fput+0x2f/0x1a0 [ 2265.564973] ? ksys_write+0x1a7/0x260 [ 2265.565323] ? __pfx_ksys_write+0x10/0x10 [ 2265.565686] __x64_sys_move_pages+0xe1/0x1c0 [ 2265.566080] ? syscall_enter_from_user_mode+0x21/0x50 [ 2265.566528] do_syscall_64+0x3f/0x90 [ 2265.566866] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2265.567318] RIP: 0033:0x7f0f10577b19 [ 2265.567650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.569162] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2265.569800] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2265.570374] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2265.570971] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2265.571603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2265.572183] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2265.572832] 09:06:51 executing program 5: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="001000000000000000000100000000000000000000000000000100000000000000000000000000000600000000000000ff0f000005000000ff01000001000080800000000000000007000000000000000000000000000000b300000000000000100000000000000000000000000000000000000000000000b19a9457958b556d79d6a1831d1da2487a9a4b4f53d72464fa5ad9ac2efd72fc133e40e0819a34ab39015a721107f184b134892e7a8761dc28fdc13378f52779a920f7bd0625ba2f701dbbf2ce3c3d8e9c6c119f2be1"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057cc0)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "576d093ecb516e"}) r2 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x40, 0xf9, 0x9, 0x0, 0xab, 0x40000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x78f22eca175d4127}, 0x41000, 0x7ff, 0x81, 0x8, 0x7, 0x200, 0x6, 0x0, 0x3, 0x0, 0xffffffff7fffffff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001280)={r4, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001f40)={r4, 0x0, "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", "acd85920ac069ed9690c22ec1993e4de3fade4310140b50fed2a2cb410405c2a388b8748784bfd5aef3e94799815f55ddc980fa001cf26a52a6c1ecd4753b5ba576b608cb4fc51d21fade251df577aa3e0d96d25d0f3c869b26de9c418e0fa6eb0d69d8e44cbca4b7894cf1a347ef2b1954ab947e63d5ccfa0f180780bf54eff1f4a6f73c0a6c72b8ccc4d9fdb699d45a26d3b736a6e3d1bf5d1693cb2a13373152968e6d25e2d563aa2f63a75c2a66a788b38cbc6990e7000a6044eeab41cf735b593f0b983e9ee2a0fd45ebf944614b622438c23e54de5bd0d482570a79c27773982fd65c9e27cdced267813466f9394ede1bcde623fc91940a4512fc3b09ca9c92d062cf2a76577e581382d2a4da87ecc71765f798fa60b0dc116b8c69dd4af0008f330163837921b667d0fc02a26d082a449d4153c9c2b7c7b7c419dbaab57c71d1c780df52aa49f8f59064f0066f3534ba750fa579a1d61c5685353bb4b16609e97996139cccaceda4ca7963d880fbd78a345e99c8ff218fb4799085fe08ac51f0ec62837ccdc4bb3c18c4e151cb894be43387a08ac2667ea32e0ba04145254b909d7e00a9b4f450f98b47068e5b400d82e6954c6760723e49f866958221261475d6517d9e2759fc591e9c9b02f3ce8c4ce617f3fdebe67570ac7393d7573a848dc417a014724128fa7e39f6ad4a7b1f63fb2299836d243252d19384557416a4a8efa2a75320bbfd9d95d9c96cee5f3e9ca155404aad9bf480981c817bd8e6f0a6819411fbbb9ff7d8fe684ab021268a6c4bb8499b16ae02282c6c603cfd9cfd91c0aaedef84751ffa3364751017604f987978557abb8cf338c284513ad3f4d74f8aeefd3c1a6404ddffc3731faf9fa919fd74e7126f6f782eb8c03c176149605f0ef43438bcd8791945d8f653b799a6520ddeccd6138fb18fa1441086d881920733f8a4d275909b8c98a5b5de4eebf7989fc9f4abc0838092879aede18bb518f1cf9339f3e0bd73d191d781aee6ccba92e9bc2e67ad4f517d18737c9cf79ab5c847529aaccab0b063273647ee0e2ae1bb24a7f95f6198e4f4249171280fd0f97c89de080d3d8c97d9af0c0a2bee37a361027089a76d8100dc38d7993cc8478e4a24efe432eb9ad1d089dc8dccddfd2fb2d4d6727dcc80125ee3783ab233c95660c8e9e00769e915936c8355a97bcbb8bb87f4a77f738eca32f67e7e3facba40a267a3feace903a0761b776ee9179b1c4d3713d96dfce685706a5990be1fb01eec2b5108504425c7592acb72a91f8b8dfda062bdf6f084804d232173abc0397b6de2ed3177101c8551f4a15a8fcc0d4c1716e97246b891f720b1c45a774458c5713ea366b158ae384b0beb636edd633f5d40595c29257071fd7217c59a5b48bda6f56d28fc3c587b7a3209c54826338ef94ff7ed5d133963ee7ed7778d0349bb8f393551ae43b292603b3b1fcc780d53d001d635687f6bd68030448e3b4202ad79c2801eb10159ea1f68d3ea9d0b4484746218edd019510b8e441db3d4f7628ae3da84eaf4cef58a9098da15753d432d4193627d4d2b9c3be726e0e8d9b02074985e2f57c83b712c500cbfeb6c9eeb46f1f7a7ee9c48ed9438829ce337d008319de1590f84fdf4cf73d8b519c1e4aa2c6a9474fc1f0e464de3b58af870360d1d5ea88e42327c107ec3b1a8318b0c1fd1f4e63857fd04034557d645dc2e84935cc6f604158cbabd7fe6e434e40a06ed72b2e615c5d610d0dcf11b4802c4a84dc24e4174921901ae89b7c6687b8d33f19acb75c2333c7bfde81cce52809dc9b84ac2f1e4ca52fdaec5fc8434b5c6690ae25b492de11231d44519fb291cab7190ff13734bda2615e33d6857c1e374f80ca59735f0f7bbf062c6f282e560d237c10cdbc6fcb5a890d9c432b49c0bb1ffe92daf8bc3d45c9da3e9af220a02255626cfa72f9b7faac9b365eaf3311cc70163818718e7d6b5593c4d6527a5fca3b42d256bd1ebdaca272abe1e151059c134ffbb167453c6dc151043a2ec13775d8b3b1ae544747c560813d9ba770b34744bfec89553400dc5c1364365423fe7ee354cb23998d4e540f0a48950cf453ee3c9a0e083dacf621273302dea4084f2f3ba15c9ae13fe7609fbe829f7bc9de11250364b72a10f7b829d81fbbcd93a043bc6af6f8da8b7495359014fdcce18e25cab05cf51ac643b72f4e4cf87b0eebbfa2f2e7c110ebfef39c07a2f51056e87fa1eb0ee4f7cdf650f9687e0af802d6c4ebdb5a39af45eed34047bdd08fc582d8715c6ba5cc3a459c8e1f4c8430a3c190f0bbb6856e4ed72280f200414da41c67a22aa06c17d64f3ef06a033a62f816c5ed9bedd440727a8d80f334bb6491232f7f838919774bfbbf42b32a9023bd8e55123bfd395ab6f5885c1afa0dc8d0198a490a88cae57b1b1a7e2440b009b5fe4f494b08726c4ab083936fd9640252dac76d97c4eb9e177712e2e94ed1bfdb28d0efc0b3ec1dcea54600732a406af6a56d7add6806e13001d745049dbef82b50e272f6d94e3f0e331f7931c55bd651ac5104b98a455b5f0a44d669e5916229a4766fff7ccb565c1f0e63074dbb3bca4e8b2e7a1e16236c486000aad6b4aa908333047d0ff2fc40ee866ae203fa707fbba90405871296d379b6921ec98ab5b8cf5f74f5089ac319e074777b7e14c77bff28219ee06b184c60fb3fc544a0f3df6fd480b21cd7a0d579b09d234089b7812f6646b7f4613350ed3a94ad635deaba9e47ab9051458843a684cddef655d9e378ae53a516f6f597fbbe639ab5ed2d68f26eedb605fac39c75c8b5b582efe41a826e6582637901e9b6051658462cdf611d150a40ee81095cc419848dcb2f22c4773b1fea721b325a3c679705ae5901a16b7d212b8cbc4d28f66258829f442fab7295a15e802f833feb9033dd67197ed4d090a6d0dd23d3a9b31a4e1efff286b518e0107d08ba784d7e474265e6f1c38afa892d8a1400560bcde81e8349527d88a2a83769343903f4f9185f8a9ed18e11c37714fbfd629d0a68ae46a61b956c43de990fd0eb236107d010c2c473fa23b23aa21a0860f1561640fc02e2bb55f6dc5f10bf8f9713a5972573181b2e398c8d451a41a0f1a3a622232e82527df3236c930fa316351e80cde035a3196327f99b746969092a8544cdba7cb163dc02924acf94988d221dd112db6532b9f0e5e7fae070095356a4ec7b7736f94a13aabd03909c99935966cd041c06cdae1eeeecb01a8a771d24ccd127e39881911376291a2bb588a9f57237694274869933a8fa2dfabce0aad1ed7933c37e000c426a6b589c3d286abb7b3b4abc95039cefbecdae8607a1c46926891e937fbb6ca650e768f874669591f63157e312ecbc41427dce6b159f10b874483613734924e574223b62c8309e4059c2a84e3e172c387ebf10ba4d998c9c417f811533170f7fafc4713e691c391f845d9f7641a7d99665e57a10648dce829354931d90551c159eb847364a1fc9b287761fd8b54c4bdc33acf2cc0805abb1f937604157b0212e2ba2f9c395084a7542d2a4c9fa42f504d0e2011e5047b465c3f24ac378887343a76617612627feb48af4dab60be45ca8fd655b4a3c2cead9e1a97489e9e5c404f8d2655e6d2f8e131964cde54633367f41df1b89186b8ea4b90eac31f82a098817c37d9b5f3e4424d2d63038d9d6463821cb886da67e16ebc4d8ff644123cecc128345eaa6f213e09b81c5852b8469c6a8f253e619a0f352de1e27ba3c958b0070edef630d74203f3bb433c74751b13e6348f2cb08980ec1140275c29d5d171fbe34d7f1cbcba246158ffdc85799fe014339bffa6cf33139758f2b8795c4f12c13ee882247cec20885874eac7d1af4eda4b07bbf4a451d2b5092dfce1f5b68e148778b8cdbd8f1ce13000870041b241c51dddd9bde9e693bcb5912a1ccdcfd4afaad4211dedfdec80a5a18bddc94b6accf34ac32a2c718a15aad1708385d6150cb6af86bed53620859af89a92c0348ebfd9346cec8775a1358e71f4996aa0f39118baeb021a68dab75cbea1263b21aee7012a4eda5b295e8104e4e673224eaf0f5245c25063ad77cb9c9f40631ef42bdb8c29dd062c316dfb1c2645e06bc97e0efc31d086ec395658947619c40d5c834fb9ee8ac43b7450db96f77b2c853941ca9bce530f3735489fd5ebf0bc63a4dd6ed6dbade929035c8d033227c84c43f4fe9ab3233610285276acd723e73510633a9e15a9dc158873750bc9bc1f6a2ff680fdf1344efe88676edf8e11ee64c94e6a05832d8256875334e95163b88139ad3e1c21c46b717bded996acf5448a572633074bda79fad61721d9e78a813f8aa5564176af6526b79a0187a86cc55843a95fdbd36017199045b3fb9f1e05a4e32738ef657dbd712ed9ce6fcb0198b8caedf1c12aafff8d60c519ec08f639bd7f5c1558873cb14a36620dcea045a4b8fcce855516f9851f113b9262d52deecf6f43b8f1e210b00f0d730447ea8ab913d3cd8bf0b4c3673fd674e7436795ac64a5ee0f7793a48ea88db17e4eaa850890e8cb5e7322a8baf0a5f1861fcc2002f95065f59325761d1a570d04996b84e01ee8be8413c924cd3555463469287aed3fe52772199456712e298c3eb8483e212a8e063b102aa1cdcfdaa9a7963bb7e7bfd6b521b774afda4c7ae8ac24c5e6ed58615dd0da0bd883ae851337dc4f165193ad18651b897057562b5e6f96b4bf6c207e54e06e0d6b53b6f97ca32f848a528bd65820c884912da6268185c482af5fc7e6b84516b923579404eb8f5f89e7cf589d7a98c5e2389dfd69f16acb67e6bf75283c5f601ba16922d45c1cdf4f33db7acdf98524ebd5debb4f96d69afd77fe135e1f2cfd5ede9835a042f1763c83f56a1764d646ebb6ddc01a9dd1a5e49dd0ce139cef29c66e0fa7f70eb653251da7473ff81da435830c6878718e25603f4f07252bf22f703b925e7852293aef4bf0a98ce7aab5e45010f69badeaba72ec8849c324e160945891e57ef523262364c35a6c48a1f96339e8f3087a8f8386f81b8c9d358bfd656dc8ed9907fbde5c9e23315d5fe893fd31f8abf0fbc01f00265b71f6d7b68ab56595efc9906a2952c4198c170f52e1925c69ec1e584c214162ef2bca406db3e616f7a4f95b7ad7284b20896514c476eb2494d372de723c54ce72268ec071e4a06c3364049bcb5245f9163a2a7e8dd60f80c810ccd5e3b53c148c2f241dc56894f2ef6f00f39275a9031ce14a96fe926b1c4fc70f7ea2cc87c54cc0580935f0f6eb344e853479ea9c2e4b402a38e5766677b8361a04dd66a8c9c69415b54d34adca921da40ad453434efeae5ade1dd430303aafc17caa13c5a86fd46718e85f794b8fe77b82f152502f412e27c2ac750513011f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058cc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "5e55564088a6b8"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) r9 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059cc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "9abc4031e0f371"}) r11 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x40, 0xf9, 0x9, 0x0, 0xab, 0x40000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x78f22eca175d4127}, 0x41000, 0x7ff, 0x81, 0x8, 0x7, 0x200, 0x6, 0x0, 0x3, 0x0, 0xffffffff7fffffff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, &(0x7f0000001280)={r13, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r12, 0xd000943e, &(0x7f0000001f40)={r13, 0x0, "017463d0737fc42a73914503611c6d63e37e5c8da00ca106b6a5d1c4a79f67777fd3e1eed92fd5557e41f96f0daac24113431fcdb87574d4c4ba62e5fbda1de541df9a760db14bce63769b5d34503d2e77bdc6b140eaafc582826848b1e841a84cf4957ba7e9bc259a513fd4049e1e8d9adffb1345b30e3b71c6bcf5cf3d47366879a92e5ff12698b5561cfa3e55825fbd2ec2377f39bdbcb4c4cf5355663806a124ffe8add65dac3e4b12f242a599340c6cd31e494a1f9d0e27110274476387489aec6fe5f13df6a3e2a52c12f36fcdd0cbe5653eb9a6bcc7538378334d071c48b743a4b2ff5778c1d9c9bcab268228ba05b446cbac32697b0c49b58e2b93fc", "acd85920ac069ed9690c22ec1993e4de3fade4310140b50fed2a2cb410405c2a388b8748784bfd5aef3e94799815f55ddc980fa001cf26a52a6c1ecd4753b5ba576b608cb4fc51d21fade251df577aa3e0d96d25d0f3c869b26de9c418e0fa6eb0d69d8e44cbca4b7894cf1a347ef2b1954ab947e63d5ccfa0f180780bf54eff1f4a6f73c0a6c72b8ccc4d9fdb699d45a26d3b736a6e3d1bf5d1693cb2a13373152968e6d25e2d563aa2f63a75c2a66a788b38cbc6990e7000a6044eeab41cf735b593f0b983e9ee2a0fd45ebf944614b622438c23e54de5bd0d482570a79c27773982fd65c9e27cdced267813466f9394ede1bcde623fc91940a4512fc3b09ca9c92d062cf2a76577e581382d2a4da87ecc71765f798fa60b0dc116b8c69dd4af0008f330163837921b667d0fc02a26d082a449d4153c9c2b7c7b7c419dbaab57c71d1c780df52aa49f8f59064f0066f3534ba750fa579a1d61c5685353bb4b16609e97996139cccaceda4ca7963d880fbd78a345e99c8ff218fb4799085fe08ac51f0ec62837ccdc4bb3c18c4e151cb894be43387a08ac2667ea32e0ba04145254b909d7e00a9b4f450f98b47068e5b400d82e6954c6760723e49f866958221261475d6517d9e2759fc591e9c9b02f3ce8c4ce617f3fdebe67570ac7393d7573a848dc417a014724128fa7e39f6ad4a7b1f63fb2299836d243252d19384557416a4a8efa2a75320bbfd9d95d9c96cee5f3e9ca155404aad9bf480981c817bd8e6f0a6819411fbbb9ff7d8fe684ab021268a6c4bb8499b16ae02282c6c603cfd9cfd91c0aaedef84751ffa3364751017604f987978557abb8cf338c284513ad3f4d74f8aeefd3c1a6404ddffc3731faf9fa919fd74e7126f6f782eb8c03c176149605f0ef43438bcd8791945d8f653b799a6520ddeccd6138fb18fa1441086d881920733f8a4d275909b8c98a5b5de4eebf7989fc9f4abc0838092879aede18bb518f1cf9339f3e0bd73d191d781aee6ccba92e9bc2e67ad4f517d18737c9cf79ab5c847529aaccab0b063273647ee0e2ae1bb24a7f95f6198e4f4249171280fd0f97c89de080d3d8c97d9af0c0a2bee37a361027089a76d8100dc38d7993cc8478e4a24efe432eb9ad1d089dc8dccddfd2fb2d4d6727dcc80125ee3783ab233c95660c8e9e00769e915936c8355a97bcbb8bb87f4a77f738eca32f67e7e3facba40a267a3feace903a0761b776ee9179b1c4d3713d96dfce685706a5990be1fb01eec2b5108504425c7592acb72a91f8b8dfda062bdf6f084804d232173abc0397b6de2ed3177101c8551f4a15a8fcc0d4c1716e97246b891f720b1c45a774458c5713ea366b158ae384b0beb636edd633f5d40595c29257071fd7217c59a5b48bda6f56d28fc3c587b7a3209c54826338ef94ff7ed5d133963ee7ed7778d0349bb8f393551ae43b292603b3b1fcc780d53d001d635687f6bd68030448e3b4202ad79c2801eb10159ea1f68d3ea9d0b4484746218edd019510b8e441db3d4f7628ae3da84eaf4cef58a9098da15753d432d4193627d4d2b9c3be726e0e8d9b02074985e2f57c83b712c500cbfeb6c9eeb46f1f7a7ee9c48ed9438829ce337d008319de1590f84fdf4cf73d8b519c1e4aa2c6a9474fc1f0e464de3b58af870360d1d5ea88e42327c107ec3b1a8318b0c1fd1f4e63857fd04034557d645dc2e84935cc6f604158cbabd7fe6e434e40a06ed72b2e615c5d610d0dcf11b4802c4a84dc24e4174921901ae89b7c6687b8d33f19acb75c2333c7bfde81cce52809dc9b84ac2f1e4ca52fdaec5fc8434b5c6690ae25b492de11231d44519fb291cab7190ff13734bda2615e33d6857c1e374f80ca59735f0f7bbf062c6f282e560d237c10cdbc6fcb5a890d9c432b49c0bb1ffe92daf8bc3d45c9da3e9af220a02255626cfa72f9b7faac9b365eaf3311cc70163818718e7d6b5593c4d6527a5fca3b42d256bd1ebdaca272abe1e151059c134ffbb167453c6dc151043a2ec13775d8b3b1ae544747c560813d9ba770b34744bfec89553400dc5c1364365423fe7ee354cb23998d4e540f0a48950cf453ee3c9a0e083dacf621273302dea4084f2f3ba15c9ae13fe7609fbe829f7bc9de11250364b72a10f7b829d81fbbcd93a043bc6af6f8da8b7495359014fdcce18e25cab05cf51ac643b72f4e4cf87b0eebbfa2f2e7c110ebfef39c07a2f51056e87fa1eb0ee4f7cdf650f9687e0af802d6c4ebdb5a39af45eed34047bdd08fc582d8715c6ba5cc3a459c8e1f4c8430a3c190f0bbb6856e4ed72280f200414da41c67a22aa06c17d64f3ef06a033a62f816c5ed9bedd440727a8d80f334bb6491232f7f838919774bfbbf42b32a9023bd8e55123bfd395ab6f5885c1afa0dc8d0198a490a88cae57b1b1a7e2440b009b5fe4f494b08726c4ab083936fd9640252dac76d97c4eb9e177712e2e94ed1bfdb28d0efc0b3ec1dcea54600732a406af6a56d7add6806e13001d745049dbef82b50e272f6d94e3f0e331f7931c55bd651ac5104b98a455b5f0a44d669e5916229a4766fff7ccb565c1f0e63074dbb3bca4e8b2e7a1e16236c486000aad6b4aa908333047d0ff2fc40ee866ae203fa707fbba90405871296d379b6921ec98ab5b8cf5f74f5089ac319e074777b7e14c77bff28219ee06b184c60fb3fc544a0f3df6fd480b21cd7a0d579b09d234089b7812f6646b7f4613350ed3a94ad635deaba9e47ab9051458843a684cddef655d9e378ae53a516f6f597fbbe639ab5ed2d68f26eedb605fac39c75c8b5b582efe41a826e6582637901e9b6051658462cdf611d150a40ee81095cc419848dcb2f22c4773b1fea721b325a3c679705ae5901a16b7d212b8cbc4d28f66258829f442fab7295a15e802f833feb9033dd67197ed4d090a6d0dd23d3a9b31a4e1efff286b518e0107d08ba784d7e474265e6f1c38afa892d8a1400560bcde81e8349527d88a2a83769343903f4f9185f8a9ed18e11c37714fbfd629d0a68ae46a61b956c43de990fd0eb236107d010c2c473fa23b23aa21a0860f1561640fc02e2bb55f6dc5f10bf8f9713a5972573181b2e398c8d451a41a0f1a3a622232e82527df3236c930fa316351e80cde035a3196327f99b746969092a8544cdba7cb163dc02924acf94988d221dd112db6532b9f0e5e7fae070095356a4ec7b7736f94a13aabd03909c99935966cd041c06cdae1eeeecb01a8a771d24ccd127e39881911376291a2bb588a9f57237694274869933a8fa2dfabce0aad1ed7933c37e000c426a6b589c3d286abb7b3b4abc95039cefbecdae8607a1c46926891e937fbb6ca650e768f874669591f63157e312ecbc41427dce6b159f10b874483613734924e574223b62c8309e4059c2a84e3e172c387ebf10ba4d998c9c417f811533170f7fafc4713e691c391f845d9f7641a7d99665e57a10648dce829354931d90551c159eb847364a1fc9b287761fd8b54c4bdc33acf2cc0805abb1f937604157b0212e2ba2f9c395084a7542d2a4c9fa42f504d0e2011e5047b465c3f24ac378887343a76617612627feb48af4dab60be45ca8fd655b4a3c2cead9e1a97489e9e5c404f8d2655e6d2f8e131964cde54633367f41df1b89186b8ea4b90eac31f82a098817c37d9b5f3e4424d2d63038d9d6463821cb886da67e16ebc4d8ff644123cecc128345eaa6f213e09b81c5852b8469c6a8f253e619a0f352de1e27ba3c958b0070edef630d74203f3bb433c74751b13e6348f2cb08980ec1140275c29d5d171fbe34d7f1cbcba246158ffdc85799fe014339bffa6cf33139758f2b8795c4f12c13ee882247cec20885874eac7d1af4eda4b07bbf4a451d2b5092dfce1f5b68e148778b8cdbd8f1ce13000870041b241c51dddd9bde9e693bcb5912a1ccdcfd4afaad4211dedfdec80a5a18bddc94b6accf34ac32a2c718a15aad1708385d6150cb6af86bed53620859af89a92c0348ebfd9346cec8775a1358e71f4996aa0f39118baeb021a68dab75cbea1263b21aee7012a4eda5b295e8104e4e673224eaf0f5245c25063ad77cb9c9f40631ef42bdb8c29dd062c316dfb1c2645e06bc97e0efc31d086ec395658947619c40d5c834fb9ee8ac43b7450db96f77b2c853941ca9bce530f3735489fd5ebf0bc63a4dd6ed6dbade929035c8d033227c84c43f4fe9ab3233610285276acd723e73510633a9e15a9dc158873750bc9bc1f6a2ff680fdf1344efe88676edf8e11ee64c94e6a05832d8256875334e95163b88139ad3e1c21c46b717bded996acf5448a572633074bda79fad61721d9e78a813f8aa5564176af6526b79a0187a86cc55843a95fdbd36017199045b3fb9f1e05a4e32738ef657dbd712ed9ce6fcb0198b8caedf1c12aafff8d60c519ec08f639bd7f5c1558873cb14a36620dcea045a4b8fcce855516f9851f113b9262d52deecf6f43b8f1e210b00f0d730447ea8ab913d3cd8bf0b4c3673fd674e7436795ac64a5ee0f7793a48ea88db17e4eaa850890e8cb5e7322a8baf0a5f1861fcc2002f95065f59325761d1a570d04996b84e01ee8be8413c924cd3555463469287aed3fe52772199456712e298c3eb8483e212a8e063b102aa1cdcfdaa9a7963bb7e7bfd6b521b774afda4c7ae8ac24c5e6ed58615dd0da0bd883ae851337dc4f165193ad18651b897057562b5e6f96b4bf6c207e54e06e0d6b53b6f97ca32f848a528bd65820c884912da6268185c482af5fc7e6b84516b923579404eb8f5f89e7cf589d7a98c5e2389dfd69f16acb67e6bf75283c5f601ba16922d45c1cdf4f33db7acdf98524ebd5debb4f96d69afd77fe135e1f2cfd5ede9835a042f1763c83f56a1764d646ebb6ddc01a9dd1a5e49dd0ce139cef29c66e0fa7f70eb653251da7473ff81da435830c6878718e25603f4f07252bf22f703b925e7852293aef4bf0a98ce7aab5e45010f69badeaba72ec8849c324e160945891e57ef523262364c35a6c48a1f96339e8f3087a8f8386f81b8c9d358bfd656dc8ed9907fbde5c9e23315d5fe893fd31f8abf0fbc01f00265b71f6d7b68ab56595efc9906a2952c4198c170f52e1925c69ec1e584c214162ef2bca406db3e616f7a4f95b7ad7284b20896514c476eb2494d372de723c54ce72268ec071e4a06c3364049bcb5245f9163a2a7e8dd60f80c810ccd5e3b53c148c2f241dc56894f2ef6f00f39275a9031ce14a96fe926b1c4fc70f7ea2cc87c54cc0580935f0f6eb344e853479ea9c2e4b402a38e5766677b8361a04dd66a8c9c69415b54d34adca921da40ad453434efeae5ade1dd430303aafc17caa13c5a86fd46718e85f794b8fe77b82f152502f412e27c2ac750513011f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005acc0)={0x7fbe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0, r1}, {0x0, r4}, {r5}, {r7, r10}, {0x0, r13}], 0x5, "d9c7dcdd2a3a5e"}) move_pages(0x0, 0x4, &(0x7f0000000040)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, 0x0, 0x0) 09:06:51 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xd101, 0x0, 0x0}, 0x58) 09:06:51 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x88000, 0x4) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f00000000c0)="47d1a2", 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000004c0)={0x6530, 0xb45b, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000140)={0x5, {{0x2, 0x4e24, @broadcast}}, 0x1, 0x3, [{{0x2, 0x4e22, @remote}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e23, @private=0xa010102}}]}, 0x210) openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0x0, 0xc1) 09:06:51 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @can={0x1d, 0x0}, @l2={0x1f, 0xffc0, @none, 0x3ff, 0x1}, @l2tp={0x2, 0x0, @remote, 0x1}, 0x37, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='team0\x00', 0x4, 0x1c89, 0x9}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000001c0)={'tunl0\x00', r1, 0x0, 0x10, 0x8, 0xfffffff8, {{0x26, 0x4, 0x0, 0x3c, 0x98, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @cipso={0x86, 0x46, 0xffffffffffffffff, [{0x1, 0x4, "eaec"}, {0x7, 0x5, "ac5d30"}, {0x0, 0x11, "79fc4d988aa2cb06fd7d8808ea5a53"}, {0x7, 0x4, "c1c4"}, {0x5, 0x10, "037b6b337ceab584c3ed9d7d42d6"}, {0x2, 0x12, "f0dd37f473876526e35c8503193a0c52"}]}, @end, @end, @ssrr={0x89, 0x13, 0xad, [@multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0xb4, [@local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast2, @multicast1, @rand_addr=0x64010102]}, @lsrr={0x83, 0x3, 0xb9}]}}}}}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:06:51 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x450e81, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'ip6gretap0\x00', {0x2}, 0xb63e}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 09:06:51 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20010, 0x0, 0x0}, 0x58) 09:06:51 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 71) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:06:51 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffa000/0x3000)=nil], 0x0, &(0x7f0000000000), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$rtc(&(0x7f00000003c0), 0xffffffffffffe5c3, 0x3) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r1, 0x20, 0xffffffffffff0000, 0x8}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x8, 0x1) r5 = getpgid(0x0) sched_rr_get_interval(r5, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) rt_tgsigqueueinfo(r6, r5, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x0, 0xff, 0x47, 0x3f, 0x0, 0x15d, 0x400, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x655df207}, 0x40084, 0x1, 0x8, 0x8, 0x4, 0x20, 0xf9c, 0x0, 0x8, 0x0, 0x1}, r6, 0x8, r4, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x2, 0x40, 0x3f, 0x2, 0x0, 0xffffffffffffff92, 0x8, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x0, 0x4, 0x8, 0x8, 0x7, 0x0, 0x81, 0x0, 0x7ff, 0x0, 0x4}, r5, 0xa, r2, 0x2) openat(r2, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:06:51 executing program 6: getcwd(&(0x7f0000000080)=""/86, 0x56) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x25, 0x2}, {0x9}}]}}, 0xf) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 2265.791884] FAULT_INJECTION: forcing a failure. [ 2265.791884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2265.793265] CPU: 0 PID: 10816 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2265.793964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.794689] Call Trace: [ 2265.794924] [ 2265.795135] dump_stack_lvl+0xc1/0xf0 [ 2265.795504] should_fail_ex+0x4b4/0x5b0 [ 2265.795866] _copy_from_user+0x2e/0x180 [ 2265.796233] do_pages_stat+0x231/0x700 [ 2265.796598] ? __pfx_lock_release+0x10/0x10 [ 2265.797002] ? __pfx_do_pages_stat+0x10/0x10 [ 2265.797397] ? lock_release+0x1e3/0x680 [ 2265.797872] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2265.798330] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2265.798844] kernel_move_pages+0x1117/0x1ad0 [ 2265.799326] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2265.799812] ? __pfx_kernel_move_pages+0x10/0x10 [ 2265.800238] ? fput+0x2f/0x1a0 [ 2265.800535] ? ksys_write+0x1a7/0x260 [ 2265.800910] ? __pfx_ksys_write+0x10/0x10 [ 2265.801291] __x64_sys_move_pages+0xe1/0x1c0 [ 2265.801704] ? syscall_enter_from_user_mode+0x21/0x50 [ 2265.802144] do_syscall_64+0x3f/0x90 [ 2265.802491] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2265.802949] RIP: 0033:0x7f0f10577b19 [ 2265.803282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.804796] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2265.805449] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2265.806050] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2265.806655] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2265.807258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2265.807860] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2265.808488] 09:06:51 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) rt_tgsigqueueinfo(r1, 0x0, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) rt_tgsigqueueinfo(r3, r2, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) clock_gettime(0x0, &(0x7f0000002600)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002540)=[{{&(0x7f0000001940), 0x6e, &(0x7f0000001e40)=[{&(0x7f00000019c0)=""/129, 0x81}, {&(0x7f0000001a80)=""/79, 0x4f}, {&(0x7f0000001b00)=""/240, 0xf0}, {&(0x7f0000001c00)=""/8, 0x8}, {&(0x7f0000001c40)=""/97, 0x61}, {&(0x7f0000001cc0)=""/178, 0xb2}, {&(0x7f0000001d80)=""/91, 0x5b}, {&(0x7f0000001e00)}], 0x8}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001ec0)=""/21, 0x15}, {&(0x7f0000001f00)=""/154, 0x9a}, {&(0x7f0000001fc0)=""/146, 0x92}], 0x3, &(0x7f00000020c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000002180), 0x6e, &(0x7f0000002480)=[{&(0x7f0000002200)=""/55, 0x37}, {&(0x7f0000002240)=""/45, 0x2d}, {&(0x7f0000002280)=""/69, 0x45}, {&(0x7f0000002300)=""/225, 0xe1}, {&(0x7f0000002400)=""/109, 0x6d}], 0x5, &(0x7f0000002500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x3, 0x10000, &(0x7f0000002640)={r4, r5+10000000}) r7 = getpgid(0x0) sched_rr_get_interval(r7, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) rt_tgsigqueueinfo(r8, r7, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) clone3(&(0x7f00000026c0)={0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0xf}, &(0x7f0000000180)=""/199, 0xc7, &(0x7f0000000280)=""/67, &(0x7f0000002680)=[0x0, 0x0, r0, r1, r0, r2, r6, r8, 0x0, r0], 0xa}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) rt_tgsigqueueinfo(r9, r0, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) r10 = fork() r11 = syz_open_procfs(r10, &(0x7f0000000040)='fd\x00') openat$incfs(r11, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x12) 09:06:51 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:07:08 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20200, 0x0, 0x0}, 0x58) 09:07:08 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 72) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:07:08 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x22080, 0x0) 09:07:08 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x3) r0 = pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r0) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, r0) 09:07:08 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4e00e, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8, 0x3, 0x3f, 0x7fffffff, 0x3, 0x3, 0x401, 0xd6, 0x40, 0x287, 0x100, 0x3, 0x38, 0x2, 0xe7, 0x2, 0x3}, [{0x70000000, 0x0, 0x3, 0x9, 0x3, 0x1, 0xffffffff00000000, 0x100}], "7eb833a46188dadb7790d4ac7a37d37c30e898dae4e20670b4ea87316f8e05e72b169709a1b19a33a388915916dd25c0e5daa382cd1e9c702de76eb1e9fe3f521530e7467dd05302af1fa47d731a25313c67d9cd4adeac5c1695a6856a4117e3040397", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8db) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r2, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x4, &(0x7f0000ff9000/0x3000)=nil) 09:07:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x200000, 0x13e) 09:07:08 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:07:08 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000210}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004001) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) [ 2282.688541] FAULT_INJECTION: forcing a failure. [ 2282.688541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2282.689924] CPU: 1 PID: 10858 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2282.690656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2282.691374] Call Trace: [ 2282.691608] [ 2282.691824] dump_stack_lvl+0xc1/0xf0 [ 2282.692182] should_fail_ex+0x4b4/0x5b0 [ 2282.692554] _copy_to_user+0x2e/0x150 [ 2282.692911] do_pages_stat+0x588/0x700 [ 2282.693295] ? __pfx_lock_release+0x10/0x10 [ 2282.693705] ? __pfx_do_pages_stat+0x10/0x10 [ 2282.694116] ? lock_release+0x1e3/0x680 [ 2282.694490] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2282.694975] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2282.695462] kernel_move_pages+0x1117/0x1ad0 [ 2282.695877] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2282.696371] ? __pfx_kernel_move_pages+0x10/0x10 [ 2282.696797] ? fput+0x2f/0x1a0 [ 2282.697149] ? ksys_write+0x1a7/0x260 [ 2282.697521] ? __pfx_ksys_write+0x10/0x10 [ 2282.697930] __x64_sys_move_pages+0xe1/0x1c0 [ 2282.698345] ? syscall_enter_from_user_mode+0x21/0x50 [ 2282.698821] do_syscall_64+0x3f/0x90 [ 2282.699168] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2282.699660] RIP: 0033:0x7f0f10577b19 [ 2282.699997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2282.701620] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2282.702329] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2282.702958] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2282.703571] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2282.704200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2282.704834] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2282.705575] 09:07:08 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x80000, 0x0, 0x0}, 0x58) 09:07:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) accept(r0, 0x0, &(0x7f0000000000)) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 09:07:08 executing program 0: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 09:07:08 executing program 6: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="06221001ffd8a6bdffbf8005ca56011f042808"], 0x13) 09:07:08 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x101000, 0x0, 0x0}, 0x58) 09:07:08 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 73) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 2282.920481] FAULT_INJECTION: forcing a failure. [ 2282.920481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2282.921868] CPU: 1 PID: 10878 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2282.922526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2282.923189] Call Trace: [ 2282.923419] [ 2282.923616] dump_stack_lvl+0xc1/0xf0 [ 2282.923977] should_fail_ex+0x4b4/0x5b0 [ 2282.924321] _copy_from_user+0x2e/0x180 [ 2282.924678] do_pages_stat+0x231/0x700 [ 2282.925055] ? __pfx_lock_release+0x10/0x10 [ 2282.925428] ? __pfx_do_pages_stat+0x10/0x10 [ 2282.925829] ? lock_release+0x1e3/0x680 [ 2282.926196] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2282.926665] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2282.927122] kernel_move_pages+0x1117/0x1ad0 [ 2282.927526] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2282.928000] ? __pfx_kernel_move_pages+0x10/0x10 [ 2282.928426] ? fput+0x2f/0x1a0 [ 2282.928725] ? ksys_write+0x1a7/0x260 [ 2282.929100] ? __pfx_ksys_write+0x10/0x10 [ 2282.929481] __x64_sys_move_pages+0xe1/0x1c0 [ 2282.929878] ? syscall_enter_from_user_mode+0x21/0x50 [ 2282.930329] do_syscall_64+0x3f/0x90 [ 2282.930678] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2282.931150] RIP: 0033:0x7f0f10577b19 [ 2282.931492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2282.933053] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2282.933722] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2282.934342] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2282.934961] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2282.935572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2282.936186] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2282.936817] 09:07:27 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x1061c0, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x103042, 0x3a64124bb374afa7) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x400, 0x88) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r2, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) write$binfmt_aout(r3, &(0x7f0000000300)={{0xcc, 0xf8, 0xff, 0x2bf, 0x292, 0x10000000, 0x1bc, 0x9}, "d296eeea1e0f6a7337392dbf6d8952d518983772b4", ['\x00', '\x00']}, 0x235) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 09:07:27 executing program 6: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x3, 0x7, 0xfff}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = syz_open_dev$vcsa(&(0x7f0000000480), 0xffffffff, 0x2000) io_submit(0x0, 0x4, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f0000000000)="bf266fb598b79e76925819a5d24b864385ea1aa8030374ee60c5a7d551dfa82ceb1f7253101beead81facb0a63e9ec999a2a1a4582a3b6e0b409ac118f001e538e8d9628bfa496f6f5ae51b06bef66bf465ea5038167c2d7872ddf33f4230d9f7d4e22adfa27217624de1571a4308ae8bfcfab2b3061976a3d4117329379db9f9c2bf298dac289ed447aa3bf1b29ac5ec5bdd0191789d677d33850c55a6e3a759033eb480272249c518b8e810e426e56f2e4a45609370e6506b0760c315f52232da6e73a1acc287f8efd804d8e115cf8356cfb319be1f27c0afb2503817fd016c6acb9b38f6ba37a91a62d6cfcb8d0b149fa72d23b29f8", 0xf7, 0x1f, 0x0, 0x2, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x8000, 0xffffffffffffffff, &(0x7f00000001c0)="7592b00d09b5e01b146c531b841e46b4646d3f06be4ef68bfbbe4954f79cef4de49cbaf2f46d0f5aa878236adf79fe23338299750bf6f704e4a7fd103c53d34b106220093f689734bae458751c5270faebf8ec0aa2a5e52de4a582d784464c3b9a00d60acc7f19311c20c14fd4fa0ec2f9514d306664032cf10b17e72c6e49c919911d0a1b132df9fe16185c444b6db81a77380f768b7d0fdeb09cd717b7e37ccb1137b3b5d602796ee3e237ef35af229c3c567b89", 0xb5, 0x5000}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x241, r1, &(0x7f00000002c0)="3f74a4de462a9c27764fa8ee6f9045104967053155c8e5152a55e45cceed24a187bbf2e1477de05d7e069ddbc165b5739f500499ecf5cac1c79a012f0abb82e705d826cf7751b561f1a503504a", 0x4d, 0x80c, 0x0, 0x0, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000380)="435262a5a9128de8a012a6862aa7b3e0cd31fb6c5a66427eed2eca51482bd566f557bf2115e16e0068b02fd4f13a2d76f41ece500860fa004ed4f9e6d1e6831e7e67ee009e0f76f48ff1c9033f1213b93b1d86bb07babfbc164d5ba186b41c801e58a2a172a644a3a899be953b1ee5da17ac5a043b127619c94286e4803d07a7ec45d2263dee61a60a85543899fbf5f4e73a2ddc403e6f28be8f19d134feb455b56139d7f6f1d2fdf882d14b7637394a83b0683309454bcb90cada48a688f25cc0e588859c78d7c191702209ebf9a8624ae3df023db5d64508f54857058065279068dd6da5680a240adc06d405b3077fc0e742", 0xf3, 0x9, 0x0, 0x3, r3}]) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:07:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[r0, r0, r2, r3, r1], 0x5) read$hiddev(r2, &(0x7f0000000140)=""/78, 0x4e) 09:07:27 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x22080, 0x0) 09:07:27 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 74) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:07:27 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:07:27 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x1c9, 0x20]) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r0 = pkey_alloc(0x0, 0x3) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, r0) syz_io_uring_setup(0x2f83, &(0x7f0000000040)={0x0, 0xdfdd, 0x20, 0x1, 0x1bf}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 09:07:27 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1000000, 0x0, 0x0}, 0x58) [ 2301.658560] FAULT_INJECTION: forcing a failure. [ 2301.658560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2301.660089] CPU: 0 PID: 10896 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2301.660799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.661518] Call Trace: [ 2301.661747] [ 2301.661987] dump_stack_lvl+0xc1/0xf0 [ 2301.662356] should_fail_ex+0x4b4/0x5b0 [ 2301.662737] _copy_to_user+0x2e/0x150 [ 2301.663129] do_pages_stat+0x588/0x700 [ 2301.663495] ? __pfx_lock_release+0x10/0x10 [ 2301.663921] ? __pfx_do_pages_stat+0x10/0x10 [ 2301.664334] ? lock_release+0x1e3/0x680 [ 2301.664718] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2301.665201] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2301.665662] kernel_move_pages+0x1117/0x1ad0 [ 2301.666056] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2301.666513] ? __pfx_kernel_move_pages+0x10/0x10 [ 2301.666934] ? fput+0x2f/0x1a0 [ 2301.667232] ? ksys_write+0x1a7/0x260 [ 2301.667576] ? __pfx_ksys_write+0x10/0x10 [ 2301.667951] __x64_sys_move_pages+0xe1/0x1c0 [ 2301.668357] ? syscall_enter_from_user_mode+0x21/0x50 [ 2301.668806] do_syscall_64+0x3f/0x90 [ 2301.669181] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2301.669638] RIP: 0033:0x7f0f10577b19 [ 2301.669960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.671474] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2301.672123] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2301.672716] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2301.673341] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2301.673945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2301.674530] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2301.675161] 09:07:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) dup3(r0, r1, 0x80000) 09:07:27 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:07:27 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2000000, 0x0, 0x0}, 0x58) 09:07:27 executing program 6: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="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") r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x800c0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000180)="5234b66a0083eed600a955", 0xb, 0x0, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffffffffffff, &(0x7f0000000200)="0a0cf6233bf9e4917b1631254642e5bc5ba37a42dfff4304778781fe150c8b0585458f4c4ffc869b64877556680cb0d905b2e7473bb4549521ec3fffc906cda479707a889a9347b4e1f9bed973fa7ee5060f20302df127aa5810f80a3e3e9bc700090692d10ae977cbc344bd87dca089306a9b27a640ab907400947cbf839de0425965208113c8b926a4faf29a1ae85a19e742876f72e4e77f11daf56286d80c073d649b2214cf1a7199f61e7bc9b5cbf8b7f50a52d7c557ef9a94b788083d8dd04d6b68627536e8b9a449c5c3c76c70", 0xd0, 0x7fffffff, 0x0, 0x2, r1}]) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x16, 0x37, 0x3, "a85bbc", 0xffff, 0x81}, {@any, 0x9, 0x9, 0xe2, "1a6a0b", 0x4}]}}}, 0x31) 09:07:27 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 75) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:07:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) 09:07:27 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x3000000, 0x0, 0x0}, 0x58) [ 2301.920312] FAULT_INJECTION: forcing a failure. [ 2301.920312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2301.921923] CPU: 0 PID: 10922 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2301.922666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.923425] Call Trace: [ 2301.923670] [ 2301.923895] dump_stack_lvl+0xc1/0xf0 [ 2301.924262] should_fail_ex+0x4b4/0x5b0 [ 2301.924781] _copy_from_user+0x2e/0x180 [ 2301.925179] do_pages_stat+0x231/0x700 [ 2301.925549] ? __pfx_lock_release+0x10/0x10 [ 2301.925949] ? __pfx_do_pages_stat+0x10/0x10 [ 2301.926351] ? lock_release+0x1e3/0x680 [ 2301.926725] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2301.927186] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2301.927670] kernel_move_pages+0x1117/0x1ad0 [ 2301.928077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2301.928560] ? __pfx_kernel_move_pages+0x10/0x10 [ 2301.928994] ? fput+0x2f/0x1a0 [ 2301.929321] ? ksys_write+0x1a7/0x260 [ 2301.929675] ? __pfx_ksys_write+0x10/0x10 [ 2301.930070] __x64_sys_move_pages+0xe1/0x1c0 [ 2301.930479] ? syscall_enter_from_user_mode+0x21/0x50 [ 2301.930942] do_syscall_64+0x3f/0x90 [ 2301.931301] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2301.931759] RIP: 0033:0x7f0f10577b19 [ 2301.932082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.933675] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2301.934344] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2301.934960] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2301.935583] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2301.936209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2301.936866] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2301.937503] 09:07:27 executing program 6: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0xfc, 0x4}, {0x2, 0x7}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x65}, "0936421641192e87d5cb9f4b80dedc9ef847a33a1d6f3faedcc69c891a17de3742870b1e0d507911b92074cba902bbe0bb3d9e5419348c2c5a10a5285250925eaa039a6d84d011f2e89bff68860b2a103c5f1356e49316572febf5c5ce07623bffb744592f"}, 0x69) 09:07:46 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 76) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:07:46 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:07:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 09:07:46 executing program 6: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="acf92600000786d24100000000800000000000"], 0x13) 09:07:46 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000000, 0x80010, r0, 0x8000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000200)=""/2, 0x2}, {&(0x7f0000000240)}], 0x3}, 0x0, 0x10000, 0x1, {0x1, r2}}, 0xeb4e) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}, 0xc4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r3, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:07:46 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 09:07:46 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, r0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000a, r0) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r1) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, r1) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, r0) pkey_alloc(0x0, 0x1) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, r2) 09:07:46 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x6000000, 0x0, 0x0}, 0x58) [ 2321.051134] FAULT_INJECTION: forcing a failure. [ 2321.051134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2321.052448] CPU: 1 PID: 10946 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2321.053178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2321.053912] Call Trace: [ 2321.054146] [ 2321.054356] dump_stack_lvl+0xc1/0xf0 [ 2321.054715] should_fail_ex+0x4b4/0x5b0 [ 2321.055083] _copy_to_user+0x2e/0x150 [ 2321.055435] do_pages_stat+0x588/0x700 [ 2321.055803] ? __pfx_lock_release+0x10/0x10 [ 2321.056197] ? __pfx_do_pages_stat+0x10/0x10 [ 2321.056605] ? lock_release+0x1e3/0x680 [ 2321.056977] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2321.057462] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2321.057930] kernel_move_pages+0x1117/0x1ad0 [ 2321.058339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2321.058826] ? __pfx_kernel_move_pages+0x10/0x10 [ 2321.059250] ? fput+0x2f/0x1a0 [ 2321.059554] ? ksys_write+0x1a7/0x260 [ 2321.059910] ? __pfx_ksys_write+0x10/0x10 [ 2321.060295] __x64_sys_move_pages+0xe1/0x1c0 [ 2321.060694] ? syscall_enter_from_user_mode+0x21/0x50 [ 2321.061149] do_syscall_64+0x3f/0x90 [ 2321.061523] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2321.061976] RIP: 0033:0x7f0f10577b19 [ 2321.062302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2321.063831] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2321.064477] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2321.065086] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2321.065711] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2321.066310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2321.066910] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2321.067530] 09:07:46 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000000, 0x0, 0x0}, 0x58) 09:07:46 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0xff}}}, 0x4) 09:07:46 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, r0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x1, &(0x7f0000ffd000/0x2000)=nil, 0x6) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x7, r0) 09:07:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x600140, 0x0) [ 2321.169842] Bluetooth: hci6: hardware error 0xff 09:07:47 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x9000000, 0x0, 0x0}, 0x58) 09:07:47 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:07:47 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 77) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:07:47 executing program 6: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="2808001600"/19], 0x13) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{0x9}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) 09:07:47 executing program 5: move_pages(0x0, 0x4, &(0x7f0000000040)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x181002, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0xff}) 09:07:47 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) rt_tgsigqueueinfo(r1, r0, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) r2 = syz_open_procfs(r1, &(0x7f0000000080)='fd\x00') r3 = openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x2f) rt_sigtimedwait(&(0x7f0000000040)={[0x40]}, &(0x7f0000000140), &(0x7f00000000c0)={0x0, 0x989680}, 0x8) 09:07:47 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 2321.340124] FAULT_INJECTION: forcing a failure. [ 2321.340124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2321.341470] CPU: 0 PID: 10976 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2321.342218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2321.342929] Call Trace: [ 2321.343166] [ 2321.343378] dump_stack_lvl+0xc1/0xf0 [ 2321.343741] should_fail_ex+0x4b4/0x5b0 [ 2321.344109] _copy_from_user+0x2e/0x180 [ 2321.344473] do_pages_stat+0x231/0x700 [ 2321.344826] ? __pfx_lock_release+0x10/0x10 [ 2321.345224] ? __pfx_do_pages_stat+0x10/0x10 [ 2321.345654] ? lock_release+0x1e3/0x680 [ 2321.346034] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2321.346500] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2321.346971] kernel_move_pages+0x1117/0x1ad0 [ 2321.347373] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2321.347850] ? __pfx_kernel_move_pages+0x10/0x10 [ 2321.348277] ? fput+0x2f/0x1a0 [ 2321.348581] ? ksys_write+0x1a7/0x260 [ 2321.348932] ? __pfx_ksys_write+0x10/0x10 [ 2321.349330] __x64_sys_move_pages+0xe1/0x1c0 [ 2321.349757] ? syscall_enter_from_user_mode+0x21/0x50 [ 2321.350208] do_syscall_64+0x3f/0x90 [ 2321.350548] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2321.351029] RIP: 0033:0x7f0f10577b19 [ 2321.351368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2321.352901] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2321.353561] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2321.354159] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2321.354850] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2321.355480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2321.356100] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2321.356741] [ 2321.367429] Bluetooth: hci6: unexpected event for opcode 0x040d [ 2321.374003] Bluetooth: hci6: unexpected event for opcode 0x040d [ 2323.207674] Bluetooth: hci6: Opcode 0x c03 failed: -110 09:08:05 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xe000000, 0x0, 0x0}, 0x58) 09:08:05 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 78) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:08:05 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1a6) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x182e42, 0x108) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) openat(r1, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:08:05 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 09:08:05 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) fcntl$notify(r0, 0x402, 0x2d) recvmmsg(r0, &(0x7f0000004580)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/243, 0xf3}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f0000000340)=""/122, 0x7a}], 0x4, &(0x7f0000000400)=""/95, 0x5f}, 0xffffffff}, {{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000500)=""/150, 0x96}, {&(0x7f00000005c0)=""/133, 0x85}, {&(0x7f0000000680)=""/197, 0xc5}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f00000007c0)=""/153, 0x99}], 0x5}, 0x401}, {{&(0x7f0000000900)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000980)=""/237, 0xed}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/38, 0x26}, {&(0x7f0000001ac0)=""/17, 0x11}, {&(0x7f0000001b00)=""/250, 0xfa}], 0x5, &(0x7f0000001c80)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002d00)=""/100, 0x64}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/30, 0x1e}], 0x3, &(0x7f0000003e00)=""/237, 0xed}}, {{&(0x7f0000003f00)=@can, 0x80, &(0x7f0000004440)=[{&(0x7f0000003f80)=""/11, 0xb}, {&(0x7f0000003fc0)=""/184, 0xb8}, {&(0x7f0000004080)=""/52, 0x34}, {&(0x7f00000040c0)=""/161, 0xa1}, {&(0x7f0000004180)=""/130, 0x82}, {&(0x7f0000004240)=""/143, 0x8f}, {&(0x7f0000004300)=""/7, 0x7}, {&(0x7f0000004340)=""/21, 0x15}, {&(0x7f0000004380)=""/172, 0xac}], 0x9, &(0x7f0000004500)=""/97, 0x61}, 0x3}], 0x5, 0x101, &(0x7f00000046c0)) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000004700), 0x4) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x2, 0x80000000, 0xfb0, 0x5, 0x0, 0xd6e8, 0x7f}, 0x1c) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil], 0x0, 0x0, 0x0) 09:08:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x1f, 0x2}) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000000c0)={0x2, 0x3, 0xa}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r4, 0x107, 0x0, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="73797a656e6c320000007124da985387b9742f4f737e5bf77e00343d6f8ab43f686c67230000000000000000", @ANYRES32=0x0, @ANYBLOB="008078000000975500000004451f00540067000069049078ac1414aae00000014408687000000001442cc343ac1414bb00000008ffffffff000000010a0101000000007fac14140e000000026401010100000009440cc1400000001000000003"]}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x0, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x0, 0x6, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40089) poll(&(0x7f0000000100), 0x0, 0x8) 09:08:05 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:08:05 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) [ 2340.042181] audit: type=1400 audit(1680167285.858:19): avc: denied { watch_reads } for pid=11001 comm="syz-executor.5" path="/dev/bsg" dev="devtmpfs" ino=113 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 [ 2340.069465] FAULT_INJECTION: forcing a failure. [ 2340.069465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2340.070867] CPU: 1 PID: 11012 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2340.071643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2340.072386] Call Trace: [ 2340.072674] [ 2340.072907] dump_stack_lvl+0xc1/0xf0 [ 2340.073277] should_fail_ex+0x4b4/0x5b0 [ 2340.073667] _copy_to_user+0x2e/0x150 [ 2340.074057] do_pages_stat+0x588/0x700 [ 2340.074447] ? __pfx_lock_release+0x10/0x10 [ 2340.074873] ? __pfx_do_pages_stat+0x10/0x10 [ 2340.075296] ? lock_release+0x1e3/0x680 [ 2340.075690] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2340.076178] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2340.076692] kernel_move_pages+0x1117/0x1ad0 [ 2340.077116] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2340.077684] ? __pfx_kernel_move_pages+0x10/0x10 [ 2340.078136] ? fput+0x2f/0x1a0 [ 2340.078462] ? ksys_write+0x1a7/0x260 [ 2340.078846] ? __pfx_ksys_write+0x10/0x10 [ 2340.079253] __x64_sys_move_pages+0xe1/0x1c0 [ 2340.079684] ? syscall_enter_from_user_mode+0x21/0x50 [ 2340.080165] do_syscall_64+0x3f/0x90 [ 2340.080537] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2340.081006] RIP: 0033:0x7f0f10577b19 [ 2340.081366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2340.083003] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2340.083717] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2340.084381] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2340.085018] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2340.085680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2340.086339] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2340.086998] 09:08:05 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10000200, 0x0, 0x0}, 0x58) 09:08:05 executing program 6: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x37, 0x8}, 0x18) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000080)=""/57) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:08:05 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{}], 0xa, "3e557cb49540e65d5a4fc109f37b5f0b15a4517bcffc42b37163fbe3823f1fb42d6fcb56adf2253555359f464f693028a30cae95c76c1c31ed0ad851d22e563a8cb92930c77a07964e5113d33a54f1893a7e29bb084296ffec50ff3a6baacc844b003bc963fbf654f6ccbd3a562069b2141d5fb92341ad2e28713928f35734bf2e9ddbdd653886dcf2978f814580ad23e7aee22d56176a0aecc5677006a19e044d33"}, 0xae) move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=@fragment={0x11, 0x0, 0xff, 0x0, 0x0, 0x8, 0x66}, 0x8) 09:08:06 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:08:06 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 79) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:08:06 executing program 5: r0 = getpgrp(0x0) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x2) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x8, &(0x7f0000ffd000/0x3000)=nil, 0x2) get_robust_list(r0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x18) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000013, 0xffffffffffffffff) setpriority(0x0, r0, 0x0) 09:08:06 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x11000000, 0x0, 0x0}, 0x58) [ 2340.305220] FAULT_INJECTION: forcing a failure. [ 2340.305220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2340.306506] CPU: 1 PID: 11033 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2340.307262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2340.308015] Call Trace: [ 2340.308256] [ 2340.308464] dump_stack_lvl+0xc1/0xf0 [ 2340.308842] should_fail_ex+0x4b4/0x5b0 [ 2340.309222] _copy_from_user+0x2e/0x180 [ 2340.309598] do_pages_stat+0x231/0x700 [ 2340.309993] ? __pfx_lock_release+0x10/0x10 [ 2340.310391] ? __pfx_do_pages_stat+0x10/0x10 [ 2340.310814] ? lock_release+0x1e3/0x680 [ 2340.311184] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2340.311658] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2340.312160] kernel_move_pages+0x1117/0x1ad0 [ 2340.312565] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2340.313084] ? __pfx_kernel_move_pages+0x10/0x10 [ 2340.313520] ? fput+0x2f/0x1a0 [ 2340.313836] ? ksys_write+0x1a7/0x260 [ 2340.314208] ? __pfx_ksys_write+0x10/0x10 [ 2340.314620] __x64_sys_move_pages+0xe1/0x1c0 [ 2340.315030] ? syscall_enter_from_user_mode+0x21/0x50 [ 2340.315528] do_syscall_64+0x3f/0x90 [ 2340.315892] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2340.316382] RIP: 0033:0x7f0f10577b19 [ 2340.316731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2340.318406] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2340.319106] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2340.319743] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2340.320386] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2340.321029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2340.321679] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2340.322354] 09:08:22 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x10001, 0x40, 0x0, 0x1, 0x0, [0xf90, 0x0, 0x8, 0x40]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 09:08:22 executing program 6: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) r3 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r0}], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{r2, 0x6, 0xd51, 0x8, 0x8, 0x7, 0xffffffffffffff0b, 0x1, 0x80000001, 0x1000000, 0x3, 0x0, 0x3, 0x7c636b11, 0x1a}, 0x10, [0x0, 0x0]}) 09:08:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, 0x0, 0x1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) fchown(r1, r4, 0xee01) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2000) r7 = open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x10100) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x40) 09:08:22 executing program 5: move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) 09:08:22 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1fffefff, 0x0, 0x0}, 0x58) 09:08:22 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:08:22 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 80) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:08:22 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002640)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000900)={0x4, 0x4, {0x0, @usage=0x400, 0x0, 0xf5, 0x80d, 0x4, 0x855, 0x7f, 0x20, @struct={0xc421, 0x9}, 0x6, 0xff, [0x8, 0x4, 0x4, 0x809, 0xe70d, 0x7e10c57]}, {0x8, @struct={0x1f, 0x10000008}, 0x0, 0x401, 0x3, 0x4, 0xe24000000, 0x8, 0x411, @struct={0x6, 0x2}, 0xd89, 0x1, [0x0, 0x0, 0x8, 0x0, 0x3, 0x81]}, {0x7, @usage=0x80000000, r3, 0x8, 0x3, 0x3, 0x7fff, 0xffffffffffffff44, 0x8, @usage=0x400, 0x3, 0x40, [0xac9c, 0x4, 0xfffffffffffffffc, 0xffff, 0xfffffffffffff001, 0x9]}, {0x10000, 0x6, 0x1}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000680)={r3, 0x8, 0x0, [0xa4d6, 0x9, 0xa1d, 0x6000, 0x1], [0x0, 0x10000, 0x101, 0x1, 0xffffffffffff719f, 0x0, 0x1, 0x3, 0x0, 0x7, 0x80000000, 0xfff, 0x2, 0x4, 0x8000000000000, 0x100000001, 0x4, 0x7, 0x5, 0x100, 0x5, 0x5, 0x3, 0x2, 0x755, 0x0, 0x1, 0xa09, 0x9, 0x9, 0x3, 0x7, 0x401, 0x0, 0x6, 0x8000, 0x3, 0xa3f, 0x900000000000, 0x1, 0x3, 0xffff, 0x0, 0x4a, 0xa4, 0x6, 0x7, 0x7, 0x6, 0xec, 0x4, 0x9, 0x5, 0x7ff, 0x10000, 0x2, 0x4, 0x5, 0x692b8dd, 0x9, 0x386, 0xfffffffffffffffc, 0x1, 0x1, 0x651, 0x1, 0x9, 0x3, 0x800, 0x4, 0x10000, 0x8000, 0x9, 0x4, 0x1249, 0x3f, 0x8, 0x2, 0x44, 0x2, 0x8, 0x80, 0x0, 0x3, 0x200, 0x80000000, 0x0, 0x1, 0x48, 0x26b8, 0x81, 0x9, 0x1, 0x6, 0x6000000000000, 0x5, 0x2, 0x357, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0xe20, 0x7, 0x8, 0x9a43, 0x114, 0x100, 0xfffffffffffff001, 0x7, 0x3ae, 0x8, 0x7, 0x3, 0x6, 0x6, 0xffff, 0x5b, 0xc1, 0x1, 0xaed]}) openat(r1, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x8, &(0x7f0000001d00)=[{0x1f, 0x7f, &(0x7f0000000140)="9b986e76ca4780f6aa12473b7b6356afc43323d3c81ac5f807b6c70cdbf68d350ccdc5f4b8914ebe1b93ff4b91d13f768dbc09d056bfe3ae92ca74d7842787b9e63c2bfcb152ac38b3bfb5e71d97a5b9e23ce03c93840f92c354477c3409f3a40d4e6fb5337630dd4b10f2bc10882f6729058fb6ca0f364858cb0ef0b9f0ea", 0x0, 0x1}, {0x6, 0x1000, &(0x7f0000000d00)="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"}, {0x9, 0xb4, &(0x7f00000001c0)="b9ce408c87640158c3e05977488f44d8318f7b514f5abff082a4557ba1400544d00a73bfc3a647cb9037e94795d7dec9e865d15dfcd6eca75d6cbdbeeb6ce1738da30c00e52dbb26415e9a17ed4ef8f0494680b7f31146be8714e6f07c708aa747e0c0aa2d5c04901a7db417fc31123a287b0811576974a8c96e4229d55c3c12cfb4bed130f309492c7b4e3aa3f86b4fd1ad07d828f324cfc86c64e1b7bc6abb9484c3cf6f9e4897a7daa1234f823e3ad4ec4fd1", 0x1}, {0x1ff, 0x0, &(0x7f00000000c0), 0x1}, {0x6, 0xfc, &(0x7f0000000300)="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", 0x1, 0x1}, {0x10000, 0x81, &(0x7f0000000400)="9c96afec8080342f18007c88109d18af31186dc9b1e797a78b0dfa8efc3364e414288d4f50814d0fbf7de76b15370f4bd566626422e534d3326b35aa7fba91f23a4e883cf5f9245d010d6a493093dadf1da3dd4480a6a78937343fd279a36b745fbb6135b55f8e96cfd0e41f35d468fc9f238d88750055c22a7dc4c365019a3920", 0x1, 0x1}, {0x7ac02ce9, 0x1000, &(0x7f0000002a40)="57754b0d6353125cb50e0deaf205a20572badecbc8f3d432307a7655a7fa10e89cf7b5c0eed85d8da8febfdfe6bc846528ad2fc83ef9e9214c2b05c44e11acf48b4935b0d34f16469704d89a238722f9e0390978075ad3c3f04b7ca1b6ce71885e53104fcbc28c9dfc77dfaca9d949bf3be8663a9289271b7425bf498975bfa3114f49a193fab738f3cc319c7301870b12498e7248ae5c7dcd37075133e56a6adb9816b35101bd2bb04036b3055bd8f96736cd5bf8a5d6269ece965b38372351467647c749ced034f7b4a7be45e9bc767a542213311907ff8f1fe69fcdd80158b963b87efe7d01b93169631d5044c6e9ec774dacb6a6c86c2e43ce4d1b67575d05b39dbcc595f2325723f7c5978fc7b183d292679b77c594856eee4a1c3bdb47c5298254d738d9a7ab65992bc1325d1c29c623dd9766fdaa6e13dd14b5a88ebf6e3205d2b6acb667f4c7613214fca931bcf5570c21efffe18277841e7981b212487318b4b762ac8451df2119b5c87ec1e1b3842ac1ec8916cf38509c4be045d1aca58d483565dd62d7f2f419016bba4a51ad3ca83b6a0715c8ad2f0e910fdc30f90c9cd149da8c6ed0f2e5c46b53d014b0bb21af6992c1223ca82a3ecdd08c7733267b1ce01baead153a4f32f1e723a3d27ba560c7c556e1d20f64d9d6b2b26e5d11fcae202ba80432f303fac75a2751da067377fbe5e816f140b43983b3a9e8cf204a8018ec514826c036099ca4a34c572a119fc930de23c53203146874d348572b5cc99bdb493e38f0e34d067e7191a654bf5124bc570f7b1461394e4fbad31c7e884d5a5b2a63ab084cfdf512ce62533a1db6edeca8b7bdfad311b2b20600a60703ba60344bb5ef8f6276231b8725cd273fe1a78b94dcfec834c913c5b11ab8977473031e7a32158e173659cf456e7fdb6ecc411f86298edcb7422aae5f4694865d10f852b09e1aa1475296b409bc6a0285a42b1c9d7cba4d949c92dcdc2e68c10bed72f52fbe991b54d317168fc85f9a600ea6083722d2d483d8a7b08a35f31b1c395b7efe49ae03abd7da5ebec4b8eb83455d7ca8753c3a4437e031c502e9f1b9c579b911995727f4b9955bac101f9c7c4226ee13ef16bc1b6e40c0f6eac29ff15b6d9a64d6d86df049fe25eb4d9d7a3e8de3a3dad85d1e90b02507d72af55ed2bdce26758878df31b27d1538a74a6a2b3ff323c858a6795668654c70d416f0f7e34be01f00dab5bf6aa17a6389d3386e9e3225c9d123deda7eb1ff624d4e4f7b16198133404198f4f6fb71e1dae0db740bda01c8e845f2a3ccdfe88fb4a084ae2478f7867af1ef0fcc3fd3df1c3bec937ffff73333169ebfc0d448c6523083b73c06d8a1ef5cdc664a64109ebde2edecccdafb0cfff7e9b79fb45de83c6dede29673836a0e15c7ed854462fbdce230c357a46293c6f7dd123de7b78fb8d154bdcd1fe9ea796821feb08bb04675be0ba123573bdb4d418165c18a21d3e0369ab95c5ed49c282a66ef0d566463c8656800b821c37b36e53c46c6fbb094485e99285eb88ca80dcc6019570b4d59b13069d6cda3b73c66c92c18b56526fd07c795ea432c446bee19dc83f20c0998c7fe288fc0132a04e432deca28df74c2bbb42f020a797c6301c2062be1fd229108a10da0a0d27090ae54a2d14246b644fe596929ce67056474f192f098dead4be2eebe3a9b1120ae4475c501c17e45d385243ea6f3b44bad23c37814e2dc5b6d93796f645fc89ab4a0b791a57a0f152b56555660efeb542e218e0e20116ffacb6718dbb923b5f9adf9ebcc091733a4a88f634040bcaa5401ae673e30a9f1f074f9bb57f9e9eabd65a4c7fdbd908c67dfae37c9f8131987fa746996557dd81aea337a96a85f6495f66ffcad3f97bee09957e381a25b371f0d293a91142125b9754c34e2de85db6102e4471198fa89d05043a3ea2e5086b451938ebde6ad1012361da344d811323f3481ab344bc3b303f35b67ef83fc5b7800dc512227c84ecac25f35f2bce5ae5455c02052b651e8d44c866773cb6fc648f9088d85544f577e5d8f6884a91df12f5e0bee47fa56e54f8261d3e5a1867b302089f9342fa33ce2cfa7bd93ddd9197d1cd0019df7c6e23ea8bce2f5867ee0fbdbf538ab88a1ebf1f00b32c9613af0b43d731431db00f9feae6cecc600311a3c749fe9fa9849ea13c1e47bf6c040b4de88174c26ff04f1b842a57d7293ffc18badc1812d4722a12a25c29c2396d30f2586f15e213509dbc05757205c2d1be3cfa40b36e93383fab9bd7c87a7d946becbe604074dcffbd9b47247a1f2affe6fc5db6b0645c123abd0460f4e440e858b61029315f47f71cfe4f26db75da136e5ce685ee79b41a12816cb58c467a7a5c0d7afe61998e92379e21321f95e5175725661212139aac19f42867def3d416e2703afc335a63bb9765586252453c8d5625d1e77e8713a075f7d17808a63a6b4b07f155368c45d0f18fe9d83d6c09e57557c7fdfd72d7ff4e973474ac9839559ef71aa2f970aeece5830f049755b98c93f55282e0605cabaae44e19c2a26621251c980e964ebbc178fbe98e52322ea748c61014b906109db605f4bbc15e2d25c9a752b655326a85738cc817a18fc1281273d4715007f32a503a7287033d980e21591c88fd83f016728a24920bdc864839bbf794d4337f6c1ec4eae2d9e9adb9abcd46aa268c4d64e8b8b7f7dd94758270d86d66b296b71578bb9176c0460bc05ccdc3d650c2632ff82c16eafda67c3dfc4ce01ea772dba0fddef2f4804d8e42cd7743ba832ba343491ef852a681d8ec82378963d811b544ccbad72296afd64fb1596dec9ab3335ed0b53d97e700e60012db15c67768f8dabd9da5ed37692a64cabaa3d9f318d7e67c935faaebd95f35ba1e97937b5ec59464cb5c058ce1e788af99d611775015baf0930a6b582ccaddd4372527a1e948ef8f95e65567900fb03f1a83203e98727ec1a091b2eb19b60b358766a6411dbc7944928d8b3447a37033564b15b46db7f2ba3b2131437340a9a1f8930b2897189eb7aea86c5177d08186123d7c574433ce8792ff32ba0329a9c256996ebd0b0e67878b04d1ba06f1a674d9477348d5f754d18e31137c9317c9fd570e7744e40aa2cb93f3ef557b3ad81aaaad30837462893c34f36d03ab4d753f2b2df42eef4dedf04d7fed46e76a31929260bac31008c2330be1a2a870b3349ca7ef5c664edd55d04d6ac9de618b321d9dc9775ff5fb3068eedfb5832c70718a30ccc5ed9dc4f1daa50b3e9ecff041a5e50acaedef0a6d09cd2dbe5ac96f4dae717144988b009bb2d20b1301828805e5d59c6ba3f7ba3a6f797e13b161758518070880930687c105f6153e5b146f4502402a5026effa91fc439724d0edc4377595e93b86011962d6f854e3e3b99475c649f72959d468918aa13d0a9e701f19479636e67277e1e9c48c4eb090d728e351251ceea1278081e44fa2a6518b3f142a594a978b3bf0479f440534510491491319effc0b450a7d3cf025ffbbebb37494023f817402e0815e1717dd56b154e94285d554806c542696a8455d71bc79eb0a0ff923417a25718dd472a1e8b4311002508e301ec97ed571f72868604a9f778efdac60fa2b96f90f5bd35003116f3df8ddfb5ff190d10e10d2f7a1b077ac72893f58d2eca323c727d0efc45e210910971c6e0c07dbe9d140e069f213f782aae0fb9c03c4acc277d80566b58cebc6304fcbd10ba97afd04546590f117ba4a196399e3a5befc846f5d58592406c87673c15ba7608b9bcc09f5d163ad00ae8778bcfb61a902a2b3f8276106949aae305e33dab6657ee4f6a38a664f39da46e25e6ab7db5dfc5da0c52471dad6edf4fb727a757f0f05432eaa72b08558a791ae4331b625089323d3c22bd56c77678c6d3986c17e96d5a7c178144d59d1d0705b274fdbf4925f9ec3dbb1ab89ff547362feb4418341f948cf070fbef7ef35007e3e6700d7c324197c3a6975d68dd39b22aa123c3e3fe56cb4d32e02c8e70b40869e5916d21a4f3f7ec15b90c03e991ab94f14e9ea1be2e56566c3097398350165a5b87668c45ad521ba2ebbba3853af29a038aa72fc09cfdd2b56b7caf9d1fd6d50711c81ce996e7cd7a96f943fb107fbe00e7e64d184c9598e3c8b16a3ed660624f532a04feb9c277edc00f4653f98b47d4e49571590ccdd1371a584c806103358654c5b597bf6a5fca9af94aa4e399be49e9517f24df6efad18cb96abc4b23c611863a0f5001ea605a2d79469123c17648d38df7edd0bb55e6358dffaf786a5b4dfcdb7f10ec79195f4630deab8f963ac4c5cca95b9d010b82b5451db7a93878d480ee90e7de9806e5b04f348e3c6499148470ce3082e96a93a8f658269871fb6bc41bda232d5ee02ea45d01f985029c9142e6b52769356057990ee41fb0305c34f0e1d3b961866f34b45ab6c4c7611680636b6879dc9aaa3a157141a82e316a8add51b7d1790b8ec873a07ce0b312b562e6c6c735f6a7c8dbaa11154b75d7a752f57414174a890715f2c5f74c4f686ad31534ea82bc57d786f45f3185cc2339578ea5d2bb26334b528d85b01a3cc507314464804c478fb0a623a90bc548852ff8e723ad6fed2664cf561ef9d644b35fdcccfc43c90dc18abe70684a517a9a4c46ffee1d21190f3eccf69ed7aa927e4d99f963336d5f57b2c0c439cd831ab57de6417bac6e35aa54529f63b4fd07605f202c70dee41ac94031ed06d9aea92198b476d5f9006dbe0b28e9706dd1ed6c0a6883ad8935a044e02504427a08fe38769a508b0caf14a7f17a1039042b55df1ba14c2500674652f66b23324e06ccaa48868ee09da910a04041977e4e7b5a59d38d4dc04f0d9dc63e6ef4011130e81cf847cf076abb2de3bd82e7aefaa7f60ac9f6f09733426ea1f638ad2b484762a9c4f139a27a98d5d8f9c24198e56b786627c4febd656eb9f8e9b6cf3d23cff012cc18f9604d1733150a47a067a51c44078616de343bf90486092c81c05dd037a602b306d0fafc8c84af4bcdb7bb44dcc16f31db704729efeb465824421f38adc804a15faefbf3d8bf214cb90eddb11cd9ff6638c19f8bdc2f7be00c0a1fff20ce71e55b3cc1dfcf7a246dab3497fd6f20696b426ec3c9bbc3a540b5e91fe63b49b9064302be76aebaa42656e2ed0a9f39fc3c66fae7a9b11f2aa7bf2df1ad64ceb49b8fdc0cdfff4c37a7ba57c18b6b65bfcdf65c101f937b33e938f0a4e7ec56c498a928e47d6c7ef5e2cbf5fa963385ae3b2d852ed4f18d3b5790cbcdabd7523eb9d7c45195c9ddd5aa9264ef0fa9782a285ca21b56327f120f338240149de3f00515b58fde7947c15c574b1dd6e2a674b2dec19644befcf0b458b5b21af4ec597b8bf24c86830c9bfbf1780dac39a17917e8f053b753630ba3abfe3d88671618fdd6ad2c6d5d3b3dd4ded45d5cfdb4f94906dffb4383896645f5c5d326374cd1e789e5308db241ffd2fe05e164b27faa3de29f05cea15a3995d5f5851198bc6668596090ddd9f98f9bdf8d93b26588e2b269776f1dcd617a6860236608c01c203eb712681d540572ca0a742af80ec4efe10c6ec127a93f7e24ad94056aac031a35a2f05c7ede9ea31c59a6c19253f6bf4745335e85c14ca4f92446fef9cfa91fffc73935427be2084b9095f7238af3f48adfd82c98e7c048f8dce16abcbaf1ffb808fa4b2cf673c0aa8d81fe9b6d70713ec665c32ca5b7b6b55e687c05f3dbed44b9497cc3287c7ed762525ca825bde34a13bf35ba27794449263ac06f", 0x1}, {0x3f, 0xef, &(0x7f00000004c0)="8fda17bb3b1ce66646f10c1201a44e6ec9ccf3aa54f62e588dd006ac9ae1182ebd63b01bc5df3513bb6d81925cd6190ab533b00edc9b925251a5064c913a62d208ed42d9a1897fc82051b3deffc5417a6a2a4161656a48ddefad34763ed582e1bf8358ff579e454dd0e57ed42a734bc780aa4a1dcd4d91a2cdad29594492758a166f5ca466ba184183df5905788cfcdb0dfd024904a90d3f6572fadc12519d33cbe586f9aee3e662a689c87982425bf23f8e8367ebb72ce41e67034f9d6cd62179bff6141919dfa72a5df89a3169eaf231081a67aae22fab9a9a81ab58ffb08ba2161bcae81e6d5163d30ea330fd34", 0x1, 0x1}]}) [ 2357.135927] FAULT_INJECTION: forcing a failure. [ 2357.135927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2357.137237] CPU: 0 PID: 11059 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2357.137989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2357.138704] Call Trace: [ 2357.138930] [ 2357.139135] dump_stack_lvl+0xc1/0xf0 [ 2357.139481] should_fail_ex+0x4b4/0x5b0 [ 2357.139844] _copy_to_user+0x2e/0x150 [ 2357.140190] do_pages_stat+0x588/0x700 [ 2357.140547] ? __pfx_lock_release+0x10/0x10 [ 2357.140933] ? __pfx_do_pages_stat+0x10/0x10 [ 2357.141333] ? lock_release+0x1e3/0x680 [ 2357.141723] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2357.142192] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2357.142642] kernel_move_pages+0x1117/0x1ad0 [ 2357.143036] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2357.143499] ? __pfx_kernel_move_pages+0x10/0x10 [ 2357.143929] ? fput+0x2f/0x1a0 [ 2357.144221] ? ksys_write+0x1a7/0x260 [ 2357.144562] ? __pfx_ksys_write+0x10/0x10 [ 2357.144940] __x64_sys_move_pages+0xe1/0x1c0 [ 2357.145346] ? syscall_enter_from_user_mode+0x21/0x50 [ 2357.145794] do_syscall_64+0x3f/0x90 [ 2357.146147] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2357.146602] RIP: 0033:0x7f0f10577b19 [ 2357.146931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2357.148420] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2357.149059] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2357.149653] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2357.150292] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2357.150883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2357.151495] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2357.152134] 09:08:22 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20000000, 0x0, 0x0}, 0x58) 09:08:23 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x13) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb9}, "17d303d8518911714da239372ac6b2eaf3dee8257cf6a9db8983672aadd48365537a3aa2074f2e812754299da1eb8cafe99d11cc935116c8b078fbec2743e01cfdaa3079ba8e43d07835afd8cbcde35b439c6c76ea7a3342658a7c9ca591966795ebd3187e2bea97106d5be8c9cf3a9810f8e9cb32aee1c1c8d01018831cc42812f84e273f5a58e29d65395d311cb15831cd12461033dc8fc873c8f3ab4a30a05f586af186d081613b46d3444278bcd335a0149150944f6b1d"}, 0xbd) 09:08:23 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:08:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0x1, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x0, 0xd6, 0x4}]}, 0x34}}, 0x4000000) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xc4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa1a1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x12c0}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) syz_io_uring_setup(0x6f57, &(0x7f0000000280)={0x0, 0xfc41, 0x0, 0x1, 0x302}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:08:23 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 81) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) [ 2357.264976] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11072 comm=syz-executor.5 [ 2357.267688] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11072 comm=syz-executor.5 [ 2357.284539] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11074 comm=syz-executor.5 [ 2357.289050] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11072 comm=syz-executor.5 09:08:23 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000080)=[r2]}, 0x1) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:08:23 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x21010000, 0x0, 0x0}, 0x58) [ 2357.357542] FAULT_INJECTION: forcing a failure. [ 2357.357542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2357.358842] CPU: 0 PID: 11077 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2357.359536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2357.360213] Call Trace: [ 2357.360445] [ 2357.360650] dump_stack_lvl+0xc1/0xf0 [ 2357.360996] should_fail_ex+0x4b4/0x5b0 [ 2357.361354] _copy_from_user+0x2e/0x180 [ 2357.361715] do_pages_stat+0x231/0x700 [ 2357.362075] ? __pfx_lock_release+0x10/0x10 [ 2357.362456] ? __pfx_do_pages_stat+0x10/0x10 [ 2357.362851] ? lock_release+0x1e3/0x680 [ 2357.363203] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2357.363671] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2357.364136] kernel_move_pages+0x1117/0x1ad0 [ 2357.364528] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2357.364997] ? __pfx_kernel_move_pages+0x10/0x10 [ 2357.365422] ? fput+0x2f/0x1a0 [ 2357.365717] ? ksys_write+0x1a7/0x260 [ 2357.366094] ? __pfx_ksys_write+0x10/0x10 [ 2357.366465] __x64_sys_move_pages+0xe1/0x1c0 [ 2357.366865] ? syscall_enter_from_user_mode+0x21/0x50 [ 2357.367316] do_syscall_64+0x3f/0x90 [ 2357.367658] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2357.368107] RIP: 0033:0x7f0f10577b19 [ 2357.368435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2357.369919] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2357.370537] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2357.371121] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2357.371721] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2357.372321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2357.372921] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2357.373537] 09:08:42 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x1400, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = gettid() move_pages(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x300, 0x0) openat(r1, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:08:42 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="2808001600"/19], 0x13) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{0x9}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) 09:08:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/udc', 0x40200, 0x100) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000000c0)=""/3) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x40) 09:08:42 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x301000, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="de2603227dc48b98b37e0fbee839fa5273c1eac669efc65d66573feb78e3518fa44ce3acb98d078c50a237b13b7452117eba8dfe28674d2891e67c623c2defc71e092544bd9d0100c5ae7c36d0e2c41c23f21bcddb3042f768d2c9c630f205bc6884d384b022ce7573", 0x69) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) 09:08:42 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x22010000, 0x0, 0x0}, 0x58) 09:08:42 executing program 6: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x3, 0xc8}}}, 0x8) 09:08:42 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 82) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:08:42 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") [ 2376.315200] FAULT_INJECTION: forcing a failure. [ 2376.315200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2376.316610] CPU: 1 PID: 11104 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2376.317345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2376.318056] Call Trace: [ 2376.318349] [ 2376.318557] dump_stack_lvl+0xc1/0xf0 [ 2376.318929] should_fail_ex+0x4b4/0x5b0 [ 2376.319301] _copy_to_user+0x2e/0x150 [ 2376.319659] do_pages_stat+0x588/0x700 [ 2376.320013] ? __pfx_lock_release+0x10/0x10 [ 2376.320425] ? __pfx_do_pages_stat+0x10/0x10 [ 2376.320843] ? lock_release+0x1e3/0x680 [ 2376.321226] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2376.321709] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2376.322210] kernel_move_pages+0x1117/0x1ad0 [ 2376.322615] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2376.323091] ? __pfx_kernel_move_pages+0x10/0x10 [ 2376.323524] ? fput+0x2f/0x1a0 [ 2376.323843] ? ksys_write+0x1a7/0x260 [ 2376.324208] ? __pfx_ksys_write+0x10/0x10 [ 2376.324605] __x64_sys_move_pages+0xe1/0x1c0 [ 2376.325017] ? syscall_enter_from_user_mode+0x21/0x50 [ 2376.325485] do_syscall_64+0x3f/0x90 [ 2376.325837] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2376.326326] RIP: 0033:0x7f0f10577b19 [ 2376.326660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2376.328189] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2376.328854] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2376.329508] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2376.330128] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2376.330808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2376.331429] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2376.332080] 09:08:42 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="2808001600"/19], 0x13) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{0x9}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) 09:08:42 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1, 0xc8, 0x4}}}, 0x8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x95}, "65c1c855ebb433246c37e1e69d3ca1f290189286099283a5eff00c44fe2ff14fb60c06dfda8f9acf9e0076df54d0ae0378d85ef8ab775fff8fee3f26df15893e82f88d1ee083455ee0c07669152e3091c501916d27d29af998fded1e3f0b1618034cae22e13bb25d5a6523d270368d03d1a747ce351b53f1600473f3c0e7e788c9ec606ead87590a627a409d89e892d328e150143f"}, 0x99) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x36}, "f7ff6df12584de0d90f17656eda99966714744d6efbe8a68bc51c3a29d370a653146ab9602520fa6d36aa44c18a4d22d996eaf1f5ef9"}, 0x3a) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 09:08:42 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x26010000, 0x0, 0x0}, 0x58) 09:08:42 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) perf_event_open(&(0x7f0000000140)={0x4aff493cd7a7fb25, 0x80, 0x8, 0xe6, 0x5, 0x3, 0x0, 0x0, 0x44100, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x3ff, 0x401}, 0x44c10, 0x8, 0x7fff, 0x1, 0x80000000, 0x5, 0x9, 0x0, 0x1, 0x0, 0x74f}, 0x0, 0xb, r0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x9) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r1, &(0x7f0000000080)='./file1\x00', 0x200000, 0xf3) 09:08:42 executing program 5: r0 = gettid() move_pages(r0, 0x2000000000000061, &(0x7f0000000000), 0x0, 0x0, 0x8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) rt_tgsigqueueinfo(r3, r2, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) sendmsg$AUDIT_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd29, 0x25dfdbfc, {0x52, 0x0, 0x2, r3, 0x1, 0x8, 0x3, 0x5, 0x0, 0x5}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x10) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 09:08:42 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 83) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:08:42 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x3f000000, 0x0, 0x0}, 0x58) 09:08:42 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="2808001600"/19], 0x13) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{0x9}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}}, 0xd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) 09:08:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x50) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"17cbeede5c14ed547d1a83ab67e55e07", 0x0, 0x0, {0x9, 0x642c}, {0x0, 0x9}, 0x3, [0x40, 0x8, 0x8000, 0x100, 0x1, 0xcdc8, 0xffffffff00000000, 0x0, 0x8, 0x6, 0x7, 0x7fffffff, 0x3, 0xffffffff, 0x9, 0x6]}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:08:42 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:08:42 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) [ 2376.546456] FAULT_INJECTION: forcing a failure. [ 2376.546456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2376.547739] CPU: 1 PID: 11129 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2376.548467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2376.549197] Call Trace: [ 2376.549435] [ 2376.549647] dump_stack_lvl+0xc1/0xf0 [ 2376.550017] should_fail_ex+0x4b4/0x5b0 [ 2376.550421] _copy_from_user+0x2e/0x180 [ 2376.550794] do_pages_stat+0x231/0x700 [ 2376.551175] ? __pfx_lock_release+0x10/0x10 [ 2376.551569] ? __pfx_do_pages_stat+0x10/0x10 [ 2376.551975] ? lock_release+0x1e3/0x680 [ 2376.552409] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2376.552881] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2376.553387] kernel_move_pages+0x1117/0x1ad0 [ 2376.553794] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2376.554333] ? __pfx_kernel_move_pages+0x10/0x10 [ 2376.554792] ? fput+0x2f/0x1a0 [ 2376.555113] ? ksys_write+0x1a7/0x260 [ 2376.555487] ? __pfx_ksys_write+0x10/0x10 [ 2376.555882] __x64_sys_move_pages+0xe1/0x1c0 [ 2376.556337] ? syscall_enter_from_user_mode+0x21/0x50 [ 2376.556810] do_syscall_64+0x3f/0x90 [ 2376.557173] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2376.557641] RIP: 0033:0x7f0f10577b19 [ 2376.557978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2376.559637] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2376.560336] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2376.560966] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2376.561591] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2376.562390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2376.563028] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2376.563702] 09:08:42 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="2808001600"/19], 0x13) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{0x9}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}}, 0xd) 09:08:42 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x40000000, 0x0, 0x0}, 0x58) 09:08:42 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 84) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:08:42 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x71000000, 0x0, 0x0}, 0x58) 09:08:42 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="2808001600"/19], 0x13) [ 2376.747900] FAULT_INJECTION: forcing a failure. [ 2376.747900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2376.749321] CPU: 0 PID: 11149 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2376.750100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2376.750886] Call Trace: [ 2376.751135] [ 2376.751356] dump_stack_lvl+0xc1/0xf0 [ 2376.751734] should_fail_ex+0x4b4/0x5b0 [ 2376.752129] _copy_to_user+0x2e/0x150 [ 2376.752518] do_pages_stat+0x588/0x700 [ 2376.752910] ? __pfx_lock_release+0x10/0x10 [ 2376.753319] ? __pfx_do_pages_stat+0x10/0x10 [ 2376.753737] ? lock_release+0x1e3/0x680 [ 2376.754118] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2376.754633] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2376.755111] kernel_move_pages+0x1117/0x1ad0 [ 2376.755527] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2376.756036] ? __pfx_kernel_move_pages+0x10/0x10 [ 2376.756480] ? fput+0x2f/0x1a0 [ 2376.756797] ? ksys_write+0x1a7/0x260 [ 2376.757152] ? __pfx_ksys_write+0x10/0x10 [ 2376.757550] __x64_sys_move_pages+0xe1/0x1c0 [ 2376.757979] ? syscall_enter_from_user_mode+0x21/0x50 [ 2376.758513] do_syscall_64+0x3f/0x90 [ 2376.758883] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2376.759368] RIP: 0033:0x7f0f10577b19 [ 2376.759725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2376.761353] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2376.762039] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2376.762716] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2376.763392] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2376.764054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2376.764690] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2376.765342] 09:08:42 executing program 5: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) rt_tgsigqueueinfo(r2, r0, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) move_pages(r0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0) 09:08:42 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="2808001600"/19], 0x13) 09:08:42 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:08:59 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 85) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:08:59 executing program 6: pkey_mprotect(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x2000000, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) pkey_mprotect(&(0x7f0000eba000/0x4000)=nil, 0x4000, 0x1000000, 0xffffffffffffffff) 09:08:59 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xc3010000, 0x0, 0x0}, 0x58) 09:08:59 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x44000, 0x0) r2 = dup2(0xffffffffffffffff, r0) r3 = open_tree(r1, &(0x7f0000000180)='./file1\x00', 0x1000) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, 0x0, 0x1) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x509001, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000200)=[r0, r3, r4, r0, r0, r5, r6, r7], 0x8) openat(r1, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x0, 0x7}) openat(r8, &(0x7f0000000140)='./file1\x00', 0x129680, 0x10) 09:08:59 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, r0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, r1) r2 = pkey_alloc(0x0, 0x0) pkey_free(r2) 09:08:59 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="2808001600"/19], 0x13) 09:08:59 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:08:59 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(r0, 0x0, 0x13, &(0x7f0000000180)="868da60acbaddba3ea154ffe2fa18bd752080e") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x10, 0x70bd25, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000040}, 0x4) [ 2394.187101] FAULT_INJECTION: forcing a failure. [ 2394.187101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2394.188413] CPU: 1 PID: 11169 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2394.189125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2394.189825] Call Trace: [ 2394.189943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2394.190053] [ 2394.190959] dump_stack_lvl+0xc1/0xf0 [ 2394.191315] should_fail_ex+0x4b4/0x5b0 [ 2394.191680] _copy_from_user+0x2e/0x180 [ 2394.192049] do_pages_stat+0x231/0x700 [ 2394.192416] ? __pfx_lock_release+0x10/0x10 [ 2394.192802] ? __pfx_do_pages_stat+0x10/0x10 [ 2394.192924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2394.193197] ? lock_release+0x1e3/0x680 [ 2394.194149] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2394.194694] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2394.195154] kernel_move_pages+0x1117/0x1ad0 [ 2394.195598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2394.196079] ? __pfx_kernel_move_pages+0x10/0x10 [ 2394.196506] ? fput+0x2f/0x1a0 [ 2394.196809] ? ksys_write+0x1a7/0x260 [ 2394.197168] ? __pfx_ksys_write+0x10/0x10 [ 2394.197594] __x64_sys_move_pages+0xe1/0x1c0 [ 2394.198003] ? syscall_enter_from_user_mode+0x21/0x50 [ 2394.198511] do_syscall_64+0x3f/0x90 [ 2394.198859] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2394.199327] RIP: 0033:0x7f0f10577b19 [ 2394.199660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2394.201206] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2394.201903] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2394.202537] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2394.203146] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2394.203765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2394.204404] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2394.205080] 09:09:00 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xc4010000, 0x0, 0x0}, 0x58) 09:09:00 executing program 5: syncfs(0xffffffffffffffff) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000640)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, 0x0, 0x0) 09:09:00 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{0x9}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}}, 0xd) 09:09:00 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "ef1818256798dea3"}}}, 0x11) 09:09:00 executing program 3: syz_emit_vhci(0x0, 0x0) 09:09:00 executing program 5: move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0) [ 2394.706899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2394.708031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:09:17 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 86) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:09:17 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0xfffffffffffffffc, 0x40000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="34256dfffd4c39ee073ceaf6490107c23db97eed66e26c59ea"]) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3, 0x8}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) fdatasync(r1) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)=0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0x1, 0x7, 0x6, 0x0, 0xfffffffffffffffb, 0x880, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6f0a958d, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x7, 0x9, 0x3, 0x101, 0x81, 0x0, 0x0, 0x9, 0x0, 0x36d}, r3, 0x7, r4, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x191042, 0x4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x22080, 0x0) openat(r5, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:09:17 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) rt_tgsigqueueinfo(r1, r0, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/igmp\x00') readahead(r2, 0x0, 0x5) openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 09:09:17 executing program 6: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x4, 0x4, 0x2, 0x0, 0x371e, 0x1, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x711, 0x2}, 0x14008, 0x2e, 0x4, 0x3, 0x9, 0x6, 0x3, 0x0, 0x200, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0xa) 09:09:17 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xc5010000, 0x0, 0x0}, 0x58) 09:09:17 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:09:17 executing program 3: syz_emit_vhci(0x0, 0x0) 09:09:17 executing program 5: move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x4000)=nil], 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) [ 2411.658317] FAULT_INJECTION: forcing a failure. [ 2411.658317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2411.659884] CPU: 1 PID: 11222 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2411.660642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2411.661364] Call Trace: [ 2411.661623] [ 2411.661837] dump_stack_lvl+0xc1/0xf0 [ 2411.662210] should_fail_ex+0x4b4/0x5b0 [ 2411.662576] _copy_to_user+0x2e/0x150 [ 2411.662961] do_pages_stat+0x588/0x700 [ 2411.663338] ? __pfx_lock_release+0x10/0x10 [ 2411.663762] ? __pfx_do_pages_stat+0x10/0x10 [ 2411.664173] ? lock_release+0x1e3/0x680 [ 2411.664567] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2411.665082] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2411.665560] kernel_move_pages+0x1117/0x1ad0 [ 2411.665989] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2411.666483] ? __pfx_kernel_move_pages+0x10/0x10 [ 2411.667022] ? fput+0x2f/0x1a0 [ 2411.667336] ? ksys_write+0x1a7/0x260 [ 2411.667730] ? __pfx_ksys_write+0x10/0x10 [ 2411.668146] __x64_sys_move_pages+0xe1/0x1c0 [ 2411.668581] ? syscall_enter_from_user_mode+0x21/0x50 [ 2411.669066] do_syscall_64+0x3f/0x90 [ 2411.669435] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2411.669939] RIP: 0033:0x7f0f10577b19 [ 2411.670298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2411.671998] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2411.672755] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2411.673442] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2411.674117] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2411.674785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2411.675463] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2411.676144] 09:09:17 executing program 3: syz_emit_vhci(0x0, 0x0) 09:09:17 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xc6010000, 0x0, 0x0}, 0x58) 09:09:17 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:09:17 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ff9000/0x4000)=nil], 0x0, 0x0, 0x0) 09:09:35 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x2cb4, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xe1, 0x25}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x28, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x24, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x580, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x34, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x39}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast1}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @broadcast}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x254, 0x4, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xd8, 0x2, "bb2992968955bdacd19e408f66135dad62fc7e16b33fe15088d005a5ff3338259a77ee7237115eba1cc0d8411e195e7386722f4304ebb2b5b4bc556ac592c12d093cc249b81b5ec6f4df2dda7026342e777c59558d2e621d1799de0eb5409c7743716294a07aab4f2178b07664e7fa32ddf0cfb2554afa3350926cefce6fb16ccd1c7bfaf980c4611f3cde5aceb710678c6b5a5027a9c1aed489f1fe907750114d85fb98c3ae2084b37a9a0cd8278005e289a23f92733daf28c67639d7977a9f6fe28c8f895a6f393acb409e6afab723795ed1c5"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x40}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xdf, 0x2, "d3ff9a26f951c8bca81939e5add9eefe9a11bdc80c9e557364c78a1311c025fd92736ee70bf4de1cb44f7ab85920e1d33cd9353b3285b63117ae4ee7be3140f1fcf817534ed67a53dbe1c88785dccac167a185527ff93a1c37163e5df687235be8ccd99c03ec40ccc5f22b66c978621f24c07d6017cae7e10a7d7c4a689fc1b99a6d64cca4af2fd07b3d06d3bb746d718e80e1e22350d8eb9967b8fb0efdffb4a280afe89fa396f837374851dddc897bc17ee8bdf3b142d8278ac3ab7fb83ab6edafae6aac8c24b0aba90e0e3ed37250c069ce5c1b249e1f0cc215"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x213}, @NL80211_PKTPAT_PATTERN={0x75, 0x2, "763b9efdf62b032008e147a331de29e8273089f17ebb6b7d99b6c2a8c9853b93c36d7e63ce984b8d9d9ce2c71cef495872aaff1643eed36bb8cb30c6cbf58a22fd83a5c0113f8266f8db608dfb792d4060980b3af9af54fc3005080816cf7c1f6b60583e90a79e099446f6a7e460e266c3"}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2f4, 0x4, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xfa, 0x2, "a0465cde857b6362f2c099116b0681927a2626c51ba3d631a0f91b70b110237b7ea0c55c3189df9bde02694c90537f24ec19e8f3e3bec4e6cdd5068ca7efd27d8ecf2a09f164c96703fe6a8bd86411b977110a00f71ad376eb56ce5971069878ec1c307e2850434ee458db46295b1f73f538065040901c24a71558efb179b2e44718bc6fdc5d098ada50f886533eb0772987a22b68517c2ac9ca901b2c22ddb9607842d6767a532f2bb93b7622639214bb447260ec70d8de01da4c0b8e922821f0ec496ff9cf7e5dc528056b920b94f51db5a71f1fe3046d245ab4cf4d6d00e340f9257132a653fec0093fbccb77e1a55e453c2c3e2a"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0xc0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xbb, 0x2, "a2dab6c543ef51f3636e56d0dd4d61e6bfdbb25cfa629e51df09b7562a331e00f8e1adbf91c15448dc2e725856442d59db0400b6db4f95691143df07f23da2e64cc805b12b12d6ca01cd5443cb307d03cbdb31da302fc0757beb40d337d9d7ee500118add5caeb8c1de8fd142857842f2edae863aa95d021723f747f00f1576a75c0e147cd5ef08b45a92e71492fbd9b8f8d53b20264a9510e70db0ca2b8a5f0ce5d719a2e308525e400bb506ae61f3171d0e82d9433ca"}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000000}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x21}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x101, 0x1, "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"}, @NL80211_PKTPAT_PATTERN={0x4}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x28, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x14, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x26bc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x26b0, 0x4, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xba, 0x1, "fe87ac46c87266199830c99a65f10e194f7c29b9e33f7da97e313c4c3789accd7608c158eba000504b0176a7eddd247ef0fd86d66e4692b35250e2a5f1a884c46b3bb71df6da48a2fcba3e9db2a15e71108e62e9e2dd178e339f5e4f30f99a5441ab8e12860755d1cf20ecf665d7e74806b9af8d2df1edb4bc1e2689c387478c73c9792560aa86e1d08d746ffa6908ccfe843d020f3f82684e6c04e29db171dd80ee1bc36f198dcab3844ef7362654f3084ce5154741"}]}, {0x1e8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_PATTERN={0xde, 0x2, "79982d1ad5e8a250ce862586038187a010d61807dda503f47eb80851478f6b5940d917571c479df951af2d4ddfc58e21d3e08a76e5d6d3b308a3c6c83d4090eab4e335239cf08630043d5d67be52a690cc57bf30c488525a5288f5c605a2bceaf29497cccea3da4118313eb2d7595382264c3534b00ea4ef39a87fb6ff4df33c2243024643154d063af0cc31ecc1b01ed05191fc08471f1c8c550950a1a16e04547b519ed225b109dfb25a1fee0237a3ab25851b6a1b004e446eac60b7b71535e2a90079bba6acdd811d600b17164f640fe76f386ddee1607255"}, @NL80211_PKTPAT_PATTERN={0xdc, 0x2, "3e39991f188a0d5d2241d8e3ff763bcf00b02e0efd4ad2754b334fad0816d7de72c6b13e84399f650d8eb60e33f6fed3408e566b848f6143692506effacdd91e37a41856ac45aff172537cef31bb97c6e7ebab98dfcfefcbfcda37b463e4207bd46783fb298d68a69a22928e150b177071dfeac0535191dcd0665bde340ef89789a1c3944b8a72d898e803922ebee83c33a5464ff935485ef0dae7f94cccedcf4b60b400d7a764aa6adfe1b2f87e03f1c3ce8acab8aa2fe636038b3222fadbff9bfa0b753c86f09e4ec9a240da4d6fe40d15d33c3fd375fc"}, @NL80211_PKTPAT_MASK={0x17, 0x1, "8128a132fcf461fdce529f26139e093b7b8070"}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xbf, 0x1, "12ad76885ff371d05115846d15ffd0a5f0c9a6eddd84cc4c1f266e5cdd7e0e383ebae6bf4188af3e5b00ebff8f9372bc133450a34ba7ebeb12e90a1b6ff381feb1783bc2fc587d9065ab06f8b0b06e08a4a06caa5a0c5368886f39106376c04ab31585afa013cd01f2da49ca6457efef06e4a85ac4974396b5fa30e7fcdd2b8e8fc63fe690089efabfa9f5a25f62f6ec5f5fbbae086ea1a9a13a4e7ff091a0394a219a1728154bfc6297962e9a0d1d27c7bedaedc1afd5d69ad6aa"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_MASK={0x2a, 0x1, "bb3eda3323936a4a84c98ba8575a2acffe8fe14227448fa7e397386179a4e2a2df19148e2e4a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}]}, {0x10e8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_PATTERN={0xc5, 0x2, "ad67818dba42f527256325d76bf026f53bb4afa49f2b11f1d48118615cfbf2927427bc9564573071d495b8ae5ada02f6ecfdcff6c7638854340ca85bd08d9e576d92513318ceba168a66f11f3247eb8ef216259d388627ef1b7d26364094e8a906d6eabc29bb5e10fef1644d5b86a509c13f6a62e9922e0b89c66edb936917dbb16661017ef852c87450d180ec48ba1a5974780eca72d7ffcd3710d9b7474fbc34b3b4d916a59b08b58504eab9bf60c746aed3e97886ba1f7cb55960d20dd94199"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x96d}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}]}, {0x1154, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x12, 0x2, "a2c00b7eff17f3b8d8d43f4dbc80"}, @NL80211_PKTPAT_PATTERN={0x18, 0x2, "e97290fc456c81fe7cd57a88ea9c5e8764c06a40"}, @NL80211_PKTPAT_MASK={0x37, 0x1, "3923ef3118f95ba14e05d3df5074aa6e76099d17d9acba186bb595842284e79ef5da0016fbdd9b9dd33fb5dd8bafa1b6ff1b1e"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8001}, @NL80211_PKTPAT_MASK={0xdd, 0x1, "a05224ad422e98a148af10a4be1b7b982e298d2e3f133262162b6ed167f1f9a7dddf2016dbc415fb6f435ca968b940e55bde459de761869a1613ab8c4f64a16a6822e582f6bf2a17bbf4dfa77999bc855be0f10812625aa5e0af70b6013d7ef3cd3880ab2ca7c00dae34c3a9139cc97299216ba9f67ac7c7e834c89696807fd8f954e4760c5ee37fe05badbdf0ab76e699bab082ce76e195bd2113c5ee829a13489bf9078bd95ea12257997d93037d96a5add84a3af02286a415206b88671dce6595a06e4f87e1e3f926d6f8c6a72b1d8a109f20cf5db2982e"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x449f}, @NL80211_PKTPAT_PATTERN={0x6a, 0x2, "c1dfedc3acc3c7b03e90c6d2b7ac690003a99b0476b8b42dbac1b2aae5eb197689012ae58223d67d0aea8ffb7600317803f28ed4f2e52fab0fdfc5d9fa1cf5cd7b062638fe89f4c1efdcaf8f81787a0685bb130bc7b7caaafdde1ea60e91e6e81328f1e68ded"}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x2b, 0x2, "dfa2f63fd10e193a447c8331887f77a238d9d3a262d487558ee59c44c261638a98008f2d64794a"}, @NL80211_PKTPAT_MASK={0x6, 0x1, "d255"}, @NL80211_PKTPAT_MASK={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x2cb4}, 0x1, 0x0, 0x0, 0x10}, 0x20048800) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x0, 0x0, 0xb98, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(r3, 0x402, 0x8000002b) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x9, 0x0, 0x6, 0x5e, 0x0, 0x3f, 0x960c4, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x400, 0x800}, 0x1010, 0xff, 0x2, 0x3, 0x1, 0x9, 0x800, 0x0, 0x3f, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0xb) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat(r4, &(0x7f0000000080)='./file1\x00', 0x814fc7fca637320, 0x20) 09:09:35 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0xe10a03, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x1) recvmmsg$unix(r2, &(0x7f0000001180)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000003c0)=""/154, 0x9a}], 0x3, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000700)=""/251, 0xfb}], 0x1, &(0x7f0000000840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000001300), 0x6e, &(0x7f0000000900), 0x0, &(0x7f0000000940)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a00)=""/186, 0xba}, {&(0x7f0000000ac0)=""/101, 0x65}], 0x2, &(0x7f0000000b80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000d40)=""/197, 0xc5}, {&(0x7f0000000e40)=""/211, 0xd3}, {&(0x7f0000000f40)=""/10, 0xa}, {&(0x7f0000000f80)=""/63, 0x3f}, {&(0x7f0000000fc0)=""/154, 0x9a}], 0x5, &(0x7f0000001100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x5, 0xf7ab430e753076cc, &(0x7f00000012c0)={0x77359400}) r4 = fork() kcmp(r3, r4, 0x6, r1, r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) rt_tgsigqueueinfo(r6, r0, 0x41, &(0x7f0000000480)={0x21, 0x6, 0x3}) r7 = syz_open_procfs(r5, &(0x7f0000000040)='fd\x00') r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, 0x0, 0x1) pidfd_send_signal(r8, 0x2b, &(0x7f0000000080)={0x2e, 0x1, 0xc61}, 0x0) pipe(&(0x7f0000000200)) openat$incfs(r7, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) 09:09:35 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}}, 0xd) 09:09:35 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000314, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (fail_nth: 87) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) 09:09:35 executing program 6: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) 09:09:35 executing program 2: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3359}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140)={0x6, "e58252"}, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000000)="9387b9fe177b1269e323") 09:09:35 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xc9010000, 0x0, 0x0}, 0x58) 09:09:35 executing program 5: move_pages(0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x4) 09:09:35 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}}, 0xd) 09:09:35 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xd1010000, 0x0, 0x0}, 0x58) 09:09:35 executing program 5: ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0x1) move_pages(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000)) [ 2429.837273] FAULT_INJECTION: forcing a failure. [ 2429.837273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2429.838583] CPU: 0 PID: 11258 Comm: syz-executor.1 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2429.839333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2429.840061] Call Trace: [ 2429.840299] [ 2429.840520] dump_stack_lvl+0xc1/0xf0 [ 2429.840901] should_fail_ex+0x4b4/0x5b0 [ 2429.841274] _copy_from_user+0x2e/0x180 [ 2429.841639] do_pages_stat+0x231/0x700 [ 2429.842119] ? __pfx_lock_release+0x10/0x10 [ 2429.842509] ? __pfx_do_pages_stat+0x10/0x10 [ 2429.842946] ? lock_release+0x1e3/0x680 [ 2429.843319] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2429.843790] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2429.844253] kernel_move_pages+0x1117/0x1ad0 [ 2429.844648] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2429.845125] ? __pfx_kernel_move_pages+0x10/0x10 [ 2429.845549] ? fput+0x2f/0x1a0 [ 2429.845848] ? ksys_write+0x1a7/0x260 [ 2429.846201] ? __pfx_ksys_write+0x10/0x10 [ 2429.846585] __x64_sys_move_pages+0xe1/0x1c0 [ 2429.846992] ? syscall_enter_from_user_mode+0x21/0x50 [ 2429.847441] do_syscall_64+0x3f/0x90 [ 2429.847784] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2429.848250] RIP: 0033:0x7f0f10577b19 [ 2429.848579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2429.850092] RSP: 002b:00007f0f0daed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2429.850742] RAX: ffffffffffffffda RBX: 00007f0f1068af60 RCX: 00007f0f10577b19 [ 2429.851369] RDX: 0000000020000640 RSI: 0000000020000314 RDI: 0000000000000000 [ 2429.851974] RBP: 00007f0f0daed1d0 R08: 0000000020000000 R09: 0000000000000000 [ 2429.852572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2429.853175] R13: 00007ffd08a6141f R14: 00007f0f0daed300 R15: 0000000000022000 [ 2429.853792] 09:09:35 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x210, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004000) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed, 0x80, 0x5, 0x1, "1f0428", 0x8, 0x16}]}}}, 0x13) 09:09:35 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}}, 0xd) 09:09:35 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xaa00, 0xe1) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x42800) 09:09:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/hci\x00') openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x200000, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x5, 0x2, 0x4, 0xffffffff, 0x1}) 09:09:35 executing program 7: clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf5ffffff, 0x0, 0x0}, 0x58) [ 2433.798819] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 2433.800415] Bluetooth: hci7: Injecting HCI hardware error event [ 2433.801383] Bluetooth: hci7: hardware error 0x00 [ 2433.829667] ================================================================== [ 2433.830379] BUG: KASAN: slab-use-after-free in hci_conn_hash_flush+0x1f9/0x230 [ 2433.831050] Read of size 8 at addr ffff888042f90000 by task kworker/u5:0/6361 [ 2433.831694] [ 2433.831863] CPU: 1 PID: 6361 Comm: kworker/u5:0 Not tainted 6.3.0-rc4-next-20230329 #1 [ 2433.832557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.833256] Workqueue: hci7 hci_error_reset [ 2433.833648] Call Trace: [ 2433.833883] [ 2433.834081] dump_stack_lvl+0x91/0xf0 [ 2433.834426] print_report+0xcc/0x620 [ 2433.834767] ? __virt_addr_valid+0x102/0x340 [ 2433.835192] ? hci_conn_hash_flush+0x1f9/0x230 [ 2433.836134] kasan_report+0xc0/0xf0 [ 2433.838475] ? hci_conn_hash_flush+0x1f9/0x230 [ 2433.838934] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 2433.839354] hci_conn_hash_flush+0x1f9/0x230 [ 2433.839748] hci_dev_close_sync+0x57f/0xff0 [ 2433.840148] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 2433.840580] ? do_raw_spin_lock+0x125/0x270 [ 2433.840961] hci_error_reset+0xab/0x140 [ 2433.841311] process_one_work+0xa20/0x1660 [ 2433.841701] ? __pfx_process_one_work+0x10/0x10 [ 2433.842133] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2433.842553] worker_thread+0x64f/0x12a0 [ 2433.842944] ? __pfx_worker_thread+0x10/0x10 [ 2433.843350] kthread+0x33f/0x440 [ 2433.843665] ? __pfx_kthread+0x10/0x10 [ 2433.844008] ret_from_fork+0x2c/0x50 [ 2433.844363] [ 2433.844581] [ 2433.844752] Allocated by task 7275: [ 2433.845083] kasan_save_stack+0x22/0x50 [ 2433.845449] kasan_set_track+0x25/0x30 [ 2433.845800] __kasan_kmalloc+0x7f/0x90 [ 2433.846160] hci_conn_add+0xa3/0x1470 [ 2433.846517] hci_connect_sco+0x422/0x9d0 [ 2433.846909] sco_sock_connect+0x358/0xa60 [ 2433.847293] __sys_connect_file+0x159/0x1a0 [ 2433.847696] __sys_connect+0x169/0x1a0 [ 2433.848061] __x64_sys_connect+0x73/0xb0 [ 2433.848443] do_syscall_64+0x3f/0x90 [ 2433.848801] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2433.849275] [ 2433.849434] Freed by task 6361: [ 2433.849735] kasan_save_stack+0x22/0x50 [ 2433.850090] kasan_set_track+0x25/0x30 [ 2433.850455] kasan_save_free_info+0x2e/0x50 [ 2433.850856] __kasan_slab_free+0x10a/0x190 [ 2433.851259] __kmem_cache_free+0xd1/0x2f0 [ 2433.851645] device_release+0xa6/0x240 [ 2433.852015] kobject_put+0x177/0x270 [ 2433.852370] put_device+0x1f/0x30 [ 2433.852694] hci_conn_del+0x28f/0x940 [ 2433.853053] hci_conn_del+0x6cf/0x940 [ 2433.853404] hci_conn_hash_flush+0x195/0x230 [ 2433.853811] hci_dev_close_sync+0x57f/0xff0 [ 2433.854214] hci_error_reset+0xab/0x140 [ 2433.854572] process_one_work+0xa20/0x1660 [ 2433.854995] worker_thread+0x64f/0x12a0 [ 2433.855373] kthread+0x33f/0x440 [ 2433.855708] ret_from_fork+0x2c/0x50 [ 2433.856061] [ 2433.856220] The buggy address belongs to the object at ffff888042f90000 [ 2433.856220] which belongs to the cache kmalloc-4k of size 4096 [ 2433.857278] The buggy address is located 0 bytes inside of [ 2433.857278] freed 4096-byte region [ffff888042f90000, ffff888042f91000) [ 2433.858337] [ 2433.858504] The buggy address belongs to the physical page: [ 2433.859016] page:0000000077b2c4f7 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42f90 [ 2433.859880] head:0000000077b2c4f7 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2433.860584] anon flags: 0x100000000010200(slab|head|node=0|zone=1) [ 2433.861142] page_type: 0xffffffff() [ 2433.861488] raw: 0100000000010200 ffff888008442140 0000000000000000 dead000000000001 [ 2433.862192] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 2433.862830] page dumped because: kasan: bad access detected [ 2433.863376] [ 2433.863538] Memory state around the buggy address: [ 2433.863969] ffff888042f8ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2433.864613] ffff888042f8ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2433.865258] >ffff888042f90000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2433.865901] ^ [ 2433.866228] ffff888042f90080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2433.866872] ffff888042f90100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2433.867543] ================================================================== [ 2433.869130] Disabling lock debugging due to kernel taint [ 2433.869820] general protection fault, probably for non-canonical address 0xe0a2fc47c000031b: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 2433.870834] KASAN: maybe wild-memory-access in range [0x0518023e000018d8-0x0518023e000018df] [ 2433.871586] CPU: 1 PID: 6361 Comm: kworker/u5:0 Tainted: G B 6.3.0-rc4-next-20230329 #1 [ 2433.872538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.873304] Workqueue: hci7 hci_error_reset [ 2433.873693] RIP: 0010:hci_conn_cleanup+0x1c5/0x780 [ 2433.874139] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ef 04 00 00 48 89 da 49 89 5c 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 ab 04 00 00 48 b8 22 01 00 00 00 00 ad de 4c 89 [ 2433.875685] RSP: 0018:ffff88801999fb60 EFLAGS: 00010216 [ 2433.876148] RAX: dffffc0000000000 RBX: 0518023e000018d9 RCX: ffffffff83d91133 [ 2433.876808] RDX: 00a30047c000031b RSI: 0000000000000008 RDI: ffff888043a35008 [ 2433.877461] RBP: ffff888042f90000 R08: 0000000000000001 R09: 0000000000000000 [ 2433.878094] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888043a35000 [ 2433.878744] R13: ffff888042f90240 R14: dffffc0000000000 R15: ffff88800eda8000 [ 2433.879457] FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 2433.880172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2433.880740] CR2: 0000562eae01bcb0 CR3: 00000000090cc000 CR4: 0000000000350ee0 [ 2433.881378] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2433.882007] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2433.882637] Call Trace: [ 2433.882874] [ 2433.883109] hci_conn_del+0x28f/0x940 [ 2433.883474] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 2433.883914] hci_conn_hash_flush+0x195/0x230 [ 2433.884324] hci_dev_close_sync+0x57f/0xff0 [ 2433.884738] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 2433.885189] ? do_raw_spin_lock+0x125/0x270 [ 2433.885590] hci_error_reset+0xab/0x140 [ 2433.885965] process_one_work+0xa20/0x1660 [ 2433.886370] ? __pfx_process_one_work+0x10/0x10 [ 2433.886819] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2433.887293] worker_thread+0x64f/0x12a0 [ 2433.887666] ? __pfx_worker_thread+0x10/0x10 [ 2433.888093] kthread+0x33f/0x440 [ 2433.888412] ? __pfx_kthread+0x10/0x10 [ 2433.888785] ret_from_fork+0x2c/0x50 [ 2433.889153] [ 2433.889374] Modules linked in: [ 2433.889735] ---[ end trace 0000000000000000 ]--- [ 2433.890162] RIP: 0010:hci_conn_cleanup+0x1c5/0x780 [ 2433.890661] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ef 04 00 00 48 89 da 49 89 5c 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 ab 04 00 00 48 b8 22 01 00 00 00 00 ad de 4c 89 [ 2433.892306] RSP: 0018:ffff88801999fb60 EFLAGS: 00010216 [ 2433.892814] RAX: dffffc0000000000 RBX: 0518023e000018d9 RCX: ffffffff83d91133 [ 2433.893453] RDX: 00a30047c000031b RSI: 0000000000000008 RDI: ffff888043a35008 [ 2433.894106] RBP: ffff888042f90000 R08: 0000000000000001 R09: 0000000000000000 [ 2433.894775] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888043a35000 [ 2433.895429] R13: ffff888042f90240 R14: dffffc0000000000 R15: ffff88800eda8000 [ 2433.896092] FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 2433.896820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2433.897352] CR2: 0000562eae01bcb0 CR3: 00000000090cc000 CR4: 0000000000350ee0 [ 2433.898001] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2433.898653] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 VM DIAGNOSIS: 09:09:39 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=ffff8880441b0960 RCX=aaaaaaaaaaaaaaab RDX=0000000000000000 RSI=0000000000000002 RDI=ffffffff856d7620 RBP=0000000000000000 RSP=ffff88801cd77870 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff8880441b0000 R14=ffffffff856d7618 R15=0000000000000000 RIP=ffffffff812ceb90 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555602e400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffddd091b88 CR3=000000001cc06000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=ffffffff00000000000055572f89c270 XMM05=00000000000000000000000000000000 XMM06=000055572f8786000000000000000002 XMM07=00000000000000000000000000000000 XMM08=00000000000000410000000000006b63 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824fbf85 RDI=ffffffff87f10dc0 RBP=ffffffff87f10d80 RSP=ffff88801999f590 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000061 R11=0000000000000001 R12=0000000000000061 R13=ffffffff87f10d80 R14=0000000000000010 R15=ffffffff824fbf70 RIP=ffffffff824fbfdd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562eae01bcb0 CR3=00000000090cc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=ffffffffffffffffffffffffffffffff XMM03=00000000000000000000000000000000 XMM04=0000562eadffd4e00000562eadffcec0 XMM05=00ff0000010100010000000100000007 XMM06=697665642e3130323a376963682d3769 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000562eae029b00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000